Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: DbSD4GKNrny9cHAWNm4OSXvC8c7x9Sy6RdSPz/UuKyI=
Subject key identifier: D5:9E:1A:0C:7C:98:4B:99:97:90:A1:85:A5:70:41:64:47:B4:FB:18
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 5B868B6833BDCD2061A3A1B139C047CD1C77F508
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS55201.roa
Signing time: Thu 12 Nov 2026 08:25:13 +0000
ROA not before: Thu 12 Nov 2026 08:20:13 +0000
ROA not after: Thu 11 Nov 2027 08:25:13 +0000
asID: 55201
IP address blocks: 2a0f:1cc2::/32 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:86:8b:68:33:bd:cd:20:61:a3:a1:b1:39:c0:47:cd:1c:77:f5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:13 2026 GMT
Not After : Nov 11 08:25:13 2027 GMT
Subject: CN=D59E1A0C7C984B999790A185A570416447B4FB18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:72:25:f9:35:f6:fb:fe:82:ac:6f:22:85:
c3:99:1b:cc:b1:5c:38:ee:74:d3:40:3d:61:86:1d:
98:f7:99:f4:f2:2c:0c:86:3c:a3:51:2a:ef:d6:63:
6d:46:2c:be:90:14:de:82:dc:23:51:83:d5:07:a6:
cc:24:ba:e1:67:07:75:7d:bd:43:7e:e6:f7:9e:5c:
98:76:49:7a:62:89:dc:3a:05:b9:51:07:2d:77:f5:
6b:86:b7:bb:d8:35:c1:be:a6:6b:e8:71:55:f9:aa:
08:56:64:5a:7d:39:c0:ff:64:b0:3a:c6:f7:cc:92:
3d:7e:c0:3c:78:51:1d:ea:23:a5:be:38:2c:a9:15:
f2:03:e6:11:25:d6:13:d1:0a:f5:12:98:f2:11:d3:
f6:63:5a:07:64:54:cd:ea:a5:30:65:7c:25:1d:b4:
4e:48:2f:2b:78:09:4e:5f:98:01:77:e1:c9:0c:44:
8b:f7:51:00:b9:22:9e:ab:6e:bd:78:d2:46:db:ca:
aa:b3:da:4d:91:e9:ee:ab:da:38:72:8a:09:ef:14:
4f:fa:cf:76:12:12:a8:60:f3:4a:50:65:cf:20:93:
25:7c:26:06:5f:33:57:a7:45:f2:f4:f7:b5:cb:e8:
ea:c9:7b:fd:d7:f2:a8:19:eb:05:b7:e1:c4:65:30:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:1A:0C:7C:98:4B:99:97:90:A1:85:A5:70:41:64:47:B4:FB:18
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc2::/32
Signature Algorithm: sha256WithRSAEncryption
1a:41:7a:99:de:12:f5:94:a4:4d:d2:eb:7b:72:26:54:95:68:
9c:ec:18:e3:85:54:a0:05:82:e5:a1:ce:00:29:0e:97:7e:94:
9d:09:56:71:a2:07:11:90:16:19:8b:8a:b7:fd:dd:a9:51:bb:
f7:ed:c9:a0:83:52:9e:85:5d:6a:aa:47:71:13:50:f7:4e:c8:
04:ae:24:c0:a7:a1:42:dc:08:5d:8e:5f:61:30:43:f9:28:45:
32:b3:77:32:60:83:21:2b:f2:8c:29:51:73:af:e5:28:5e:fb:
43:48:c8:b1:16:bb:ce:0c:5a:5c:49:8a:1e:c3:18:f9:30:a5:
20:81:c8:10:af:35:bf:6a:ed:eb:07:5f:92:2c:e2:fd:97:ca:
e2:18:8f:b6:5c:b2:ae:77:b9:bd:a9:26:cb:95:e7:8f:45:2c:
ec:72:dc:36:33:d0:e8:d3:d3:a3:c2:34:cf:ff:50:40:d1:65:
1c:6b:7d:ad:83:ca:42:51:08:2c:0c:c1:ae:f3:e5:b2:02:df:
9d:18:8d:42:52:f5:00:60:b0:0f:4e:55:ba:78:ab:7a:31:c0:
67:79:61:60:63:da:af:17:e7:f7:95:04:6c:59:e9:45:3d:3f:
26:f9:f2:77:e8:e8:e5:70:4b:d5:f9:13:75:91:7b:09:c5:c7:
4d:bd:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:44 2026 by rpki-client