Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: 2N8q1q+So9RhMHdNHr3YMvUmo95scwI13p06ypdVioI=
Subject key identifier: FF:F6:62:88:5D:F4:B1:14:C4:E0:10:6F:EF:E9:D8:3D:4F:B6:E5:52
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7163F36608D2E5D5EA47AC45739CEBBDE2E6E010
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS55201.roa
Signing time: Thu 07 May 2026 16:22:45 +0000
ROA not before: Thu 07 May 2026 16:17:45 +0000
ROA not after: Thu 06 May 2027 16:22:45 +0000
asID: 55201
IP address blocks: 82.47.189.0/24 maxlen: 24
82.47.190.0/24 maxlen: 24
82.47.208.0/24 maxlen: 24
82.47.212.0/24 maxlen: 24
82.47.214.0/24 maxlen: 24
82.47.218.0/24 maxlen: 24
82.47.219.0/24 maxlen: 24
82.47.221.0/24 maxlen: 24
82.47.224.0/24 maxlen: 24
82.47.225.0/24 maxlen: 24
82.47.228.0/24 maxlen: 24
82.47.229.0/24 maxlen: 24
82.47.231.0/24 maxlen: 24
82.47.242.0/24 maxlen: 24
82.47.243.0/24 maxlen: 24
82.47.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:63:f3:66:08:d2:e5:d5:ea:47:ac:45:73:9c:eb:bd:e2:e6:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 7 16:17:45 2026 GMT
Not After : May 6 16:22:45 2027 GMT
Subject: CN=FFF662885DF4B114C4E0106FEFE9D83D4FB6E552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:e3:5a:47:b3:07:72:a3:c3:ee:33:7b:fc:
9c:51:c5:3a:fd:02:88:39:29:22:11:43:74:50:ca:
0d:3b:56:5c:19:0c:7f:06:24:c4:76:26:1e:bb:29:
a2:85:94:62:4d:0c:3c:26:fa:0d:87:7c:7d:eb:f0:
50:e1:50:16:fa:0d:ae:cd:c0:63:3e:56:41:94:7e:
2b:7b:09:33:12:2b:c4:de:cc:4f:a4:42:a7:9f:c9:
62:10:d3:af:71:55:e2:29:8b:b3:a6:27:30:b8:a5:
c8:07:ba:b5:b5:83:30:da:e4:e0:9b:20:12:3b:d6:
35:09:67:d4:4d:69:fe:9e:4d:2b:b6:80:fe:53:ad:
5b:bc:7e:b1:3b:92:41:05:98:d1:37:75:28:be:f9:
bc:23:42:11:b2:f8:0a:b5:b4:38:71:71:f3:9f:72:
d4:ff:77:fc:4d:04:e1:6a:f0:bb:ee:e9:46:29:7a:
f6:23:80:fa:10:7e:3a:6a:8f:44:b7:28:56:8b:42:
62:24:14:19:b9:bb:d0:25:69:57:60:a6:c4:6b:27:
36:a0:16:a7:c4:82:ce:ca:55:6a:42:d1:94:86:ed:
f1:dc:cb:3d:37:6d:fc:31:46:e9:c0:c0:14:ab:bc:
48:77:f2:1c:47:41:2f:82:a5:a5:3e:3f:6a:df:75:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:62:88:5D:F4:B1:14:C4:E0:10:6F:EF:E9:D8:3D:4F:B6:E5:52
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.189.0-82.47.190.255
82.47.208.0/24
82.47.212.0/24
82.47.214.0/24
82.47.218.0/23
82.47.221.0/24
82.47.224.0/23
82.47.228.0/23
82.47.231.0/24
82.47.242.0/23
82.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b5:92:db:63:64:28:66:71:44:47:b8:b3:95:a1:95:4b:18:
fc:15:fc:47:5c:5b:f7:26:ae:c8:a3:df:c1:3a:3a:97:66:1d:
b5:92:1c:dd:1a:1a:77:90:ab:ea:58:59:80:7a:0d:19:69:79:
3f:a3:77:ad:c0:69:06:63:8d:a6:ed:11:ed:04:d6:54:a3:02:
95:f7:82:0e:18:a8:8d:a3:bd:ab:dd:46:4c:c8:7a:66:c2:94:
ee:7f:5e:a9:d6:77:43:a1:e0:4f:8d:7b:5c:d2:3b:a7:57:27:
32:c8:d3:2f:ab:b1:80:d1:eb:6e:44:9f:2b:b6:ae:59:89:5c:
fe:26:fa:0a:4d:cc:46:a9:07:a0:d6:e3:b4:e8:67:6d:0a:95:
c1:9c:f3:e5:1a:cb:8f:f8:70:bc:a5:bd:9d:7a:71:cf:97:71:
04:81:84:af:90:7e:54:bd:7b:ff:cc:ac:9e:23:bc:d3:17:6c:
cc:c2:32:0a:69:61:75:13:d1:15:11:21:8e:38:4a:aa:8b:a7:
e9:47:c5:95:1e:e7:9e:45:ce:8c:cd:85:4c:a7:43:3f:21:0f:
65:f5:48:14:c5:88:10:f2:55:fa:3b:15:4a:bd:b8:2b:c1:7d:
66:eb:ea:3f:80:41:56:bf:97:a0:75:f2:b5:b0:06:50:ec:4b:
f3:1b:92:e8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcWPzZgjS5dXqR6xFc5zrveLm4BAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDcxNjE3NDVaFw0yNzA1MDYxNjIyNDVaMDMxMTAvBgNV
BAMTKEZGRjY2Mjg4NURGNEIxMTRDNEUwMTA2RkVGRTlEODNENEZCNkU1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRONaR7MHcqPD7jN7/JxRxTr9
Aog5KSIRQ3RQyg07VlwZDH8GJMR2Jh67KaKFlGJNDDwm+g2HfH3r8FDhUBb6Da7N
wGM+VkGUfit7CTMSK8TezE+kQqefyWIQ069xVeIpi7OmJzC4pcgHurW1gzDa5OCb
IBI71jUJZ9RNaf6eTSu2gP5TrVu8frE7kkEFmNE3dSi++bwjQhGy+Aq1tDhxcfOf
ctT/d/xNBOFq8Lvu6UYpevYjgPoQfjpqj0S3KFaLQmIkFBm5u9AlaVdgpsRrJzag
FqfEgs7KVWpC0ZSG7fHcyz03bfwxRunAwBSrvEh38hxHQS+CpaU+P2rfdZXVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU//ZiiF30sRTE4BBv7+nYPU+25VIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTUyMDEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEowDAMEAFIv
vQMEAFIvvgMEAFIv0AMEAFIv1AMEAFIv1gMEAVIv2gMEAFIv3QMEAVIv4AMEAVIv
5AMEAFIv5wMEAVIv8gMEAFIv/jANBgkqhkiG9w0BAQsFAAOCAQEAbrWS22NkKGZx
REe4s5WhlUsY/BX8R1xb9yauyKPfwTo6l2YdtZIc3Road5Cr6lhZgHoNGWl5P6N3
rcBpBmONpu0R7QTWVKMClfeCDhiojaO9q91GTMh6ZsKU7n9eqdZ3Q6HgT417XNI7
p1cnMsjTL6uxgNHrbkSfK7auWYlc/ib6Ck3MRqkHoNbjtOhnbQqVwZzz5RrLj/hw
vKW9nXpxz5dxBIGEr5B+VL17/8ysniO80xdszMIyCmlhdRPRFREhjjhKqoun6UfF
lR7nnkXOjM2FTKdDPyEPZfVIFMWIEPJV+jsVSr24K8F9ZuvqP4BBVr+XoHXytbAG
UOxL8xuS6A==
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:22 2026 by rpki-client