Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: NeAMGx/CQORXKboWb+qkg8ZdN+RBg2unTmQ9UZCojzY=
Subject key identifier: 68:E2:15:D0:E7:85:A5:55:78:C2:97:91:DE:36:92:FC:FA:07:62:00
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 196F00AF2E95A6149A18E6F759CD540174178476
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS55201.roa
Signing time: Tue 15 Sep 2026 23:28:38 +0000
ROA not before: Tue 15 Sep 2026 23:23:38 +0000
ROA not after: Tue 14 Sep 2027 23:28:38 +0000
asID: 55201
IP address blocks: 153.76.119.0/24 maxlen: 24
153.76.120.0/24 maxlen: 24
153.76.121.0/24 maxlen: 24
2a06:a007::/32 maxlen: 48
2a09:54c0::/32 maxlen: 48
2a09:54c2::/32 maxlen: 48
2a0a:6041::/32 maxlen: 48
2a0d:d901::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6f:00:af:2e:95:a6:14:9a:18:e6:f7:59:cd:54:01:74:17:84:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 15 23:23:38 2026 GMT
Not After : Sep 14 23:28:38 2027 GMT
Subject: CN=68E215D0E785A55578C29791DE3692FCFA076200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:e5:dc:26:7d:f6:ac:39:97:83:3c:6e:84:
e3:55:be:7e:ef:e0:41:bc:f7:13:4a:af:71:a1:9e:
a6:e4:94:72:e4:48:1a:3c:4d:ad:3f:b3:0d:bf:45:
18:18:18:bf:9d:2f:0f:ff:8c:f0:5d:97:5b:37:dd:
90:b6:69:ba:00:18:9b:d2:79:53:81:74:cd:31:7c:
eb:bc:2c:56:7e:1b:3e:7d:b8:e1:dc:ab:68:ce:47:
eb:a6:a4:9e:63:ab:91:29:22:a0:a2:ec:95:87:21:
93:69:46:88:61:e1:97:19:85:8e:08:49:c9:01:4e:
4d:df:0b:44:84:17:ac:11:1c:69:7b:37:82:ee:de:
a4:67:18:3f:45:89:5a:85:26:db:61:9e:80:8b:9d:
7d:09:73:2b:5a:96:0b:0b:0a:dd:aa:37:d7:25:49:
28:f3:90:5d:86:9c:41:fb:a3:06:8b:43:67:fa:a0:
1c:8c:4b:e1:93:b4:fa:3c:eb:26:a7:c7:06:f6:ee:
50:50:bd:9e:b2:1c:67:90:9c:25:e9:11:37:52:3c:
07:29:f6:89:dc:27:5a:99:2d:86:0b:41:00:51:de:
58:64:36:7e:bf:11:a6:2f:dd:2f:32:a3:c1:78:48:
83:d2:49:8d:09:78:b0:46:bb:b1:b4:1c:e4:3d:5e:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E2:15:D0:E7:85:A5:55:78:C2:97:91:DE:36:92:FC:FA:07:62:00
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.119.0-153.76.121.255
IPv6:
2a06:a007::/32
2a09:54c0::/32
2a09:54c2::/32
2a0a:6041::/32
2a0d:d901::/32
Signature Algorithm: sha256WithRSAEncryption
c7:4f:c1:64:81:ca:e3:6d:78:57:c5:0a:9a:e5:90:b0:5e:28:
40:c3:e0:27:a1:59:c8:e3:ef:d6:c5:77:40:c6:e6:17:4f:22:
1c:0e:b4:be:59:23:50:79:f4:7d:28:a8:08:b6:9e:95:b0:93:
5d:5a:2f:9f:dc:a7:df:f7:d3:72:4b:37:de:05:50:b8:fb:f4:
2a:b6:c1:2a:be:e0:07:4e:04:c9:bf:dd:7a:e5:6e:72:af:b9:
20:e8:ba:80:7c:47:4d:6c:d0:61:88:0f:81:dc:3b:56:16:7a:
06:9d:14:43:73:48:d6:1b:79:49:da:cf:85:72:ce:a1:28:87:
3b:f6:81:52:c1:0f:fc:01:c7:a2:b9:64:7a:87:43:02:e9:94:
0d:a4:c2:3a:2a:a6:6c:f5:79:5a:6a:7e:f8:85:90:45:24:46:
ed:07:ad:78:7d:f8:79:e4:68:2b:94:6c:ab:ea:bb:68:ee:d5:
f3:69:77:9c:3d:22:4c:0e:d6:e5:bb:4a:da:7d:07:31:2d:1f:
38:00:96:6a:63:a7:99:78:a7:8f:e8:9e:c8:50:de:09:1f:07:
b7:0d:2c:52:17:ea:64:ce:e0:69:0e:0f:a7:31:12:f1:7d:cf:
93:46:1b:4e:61:98:46:a4:a7:79:85:63:1e:39:5c:85:f6:5d:
43:80:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:09:44 2026 by rpki-client