Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: zTyk1ex6bBbk9XTBhZLbAgAqqDqfgTfu6YgDt46GbO0=
Subject key identifier: F0:BD:81:14:D0:DC:64:CD:08:1E:27:86:05:A2:06:81:EC:99:67:53
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 122F84CED807115C830289EA4240A780E28D5BF6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55720.roa
Signing time: Wed 09 Sep 2026 02:49:36 +0000
ROA not before: Wed 09 Sep 2026 02:44:36 +0000
ROA not after: Wed 08 Sep 2027 02:49:36 +0000
asID: 55720
IP address blocks: 168.222.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2f:84:ce:d8:07:11:5c:83:02:89:ea:42:40:a7:80:e2:8d:5b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 9 02:44:36 2026 GMT
Not After : Sep 8 02:49:36 2027 GMT
Subject: CN=F0BD8114D0DC64CD081E278605A20681EC996753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:c2:0c:e0:5b:84:28:b7:f5:b2:ac:bc:d9:
9a:5c:fc:0f:a7:b5:93:c0:55:2e:41:40:f8:5b:b5:
0f:ff:bb:f9:72:9d:5f:91:83:56:3e:4c:06:b5:58:
f4:a3:8d:da:cb:4b:34:95:14:63:ba:b2:0f:10:5e:
92:3a:63:9b:30:29:2c:06:c6:45:12:f8:40:7c:bf:
3d:4a:1c:32:21:1b:ce:23:ac:90:65:69:b7:a4:e0:
91:90:ec:a7:a1:a9:db:a8:5d:34:1b:44:c0:2a:24:
2c:08:5d:1c:76:46:b2:0f:58:3a:e9:c0:09:92:d5:
27:de:78:1f:63:ed:17:63:35:d1:3c:79:2f:15:d6:
71:d3:32:aa:c6:ed:83:cf:7c:38:20:02:8e:91:4d:
f6:8c:dd:d8:f3:9f:b7:06:91:b5:36:7b:0b:34:42:
0d:7c:6d:36:a2:1a:94:d5:02:61:82:44:bc:c0:39:
c4:9d:b0:06:a0:04:b0:40:49:6a:ea:47:b4:67:ce:
37:8f:96:1e:fe:d8:3e:0e:13:7a:8e:20:40:65:c1:
2f:ac:02:1f:5c:63:81:00:48:92:5c:37:e0:a7:68:
7a:35:39:24:41:49:9a:f6:f7:fd:61:02:1e:ca:90:
56:62:b5:ba:4a:c2:aa:de:3f:aa:4d:2e:b7:5c:3c:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BD:81:14:D0:DC:64:CD:08:1E:27:86:05:A2:06:81:EC:99:67:53
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.124.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:6f:8f:36:e1:8a:7f:93:e4:02:78:9a:46:63:dc:e1:18:
80:0d:ea:70:6e:d6:54:87:11:57:a8:e2:a2:62:6a:15:15:72:
12:d4:d5:9e:1a:3f:7f:a3:d2:70:81:c7:dc:f5:73:f0:29:7c:
91:e2:44:5b:5d:6c:34:28:ca:f3:44:ce:47:ba:1b:bc:86:7e:
a5:83:90:6d:15:09:9f:e4:14:3a:79:4e:ee:7f:eb:4a:03:6e:
84:d8:7b:f9:0c:a2:42:d3:b2:16:dc:8d:3f:bc:b6:62:84:b9:
31:82:94:41:c3:17:f5:bd:f2:cc:e2:63:a3:3f:f7:7a:a9:16:
78:08:13:e8:be:02:86:da:11:96:4f:53:81:c1:14:cd:36:c4:
25:76:3d:2b:c3:6a:6b:79:d8:93:69:8a:fb:21:96:59:32:db:
92:ae:88:8b:f3:90:6d:e9:6c:17:83:34:57:aa:be:92:6f:38:
db:07:ef:16:fd:5c:4a:83:ef:a4:3a:e6:96:92:ae:db:ea:e4:
23:c8:31:ab:cc:17:cf:61:ef:dc:da:14:81:04:6f:1b:a9:50:
35:21:a3:ac:6b:14:5d:ba:09:36:4e:e8:d6:49:fb:67:22:e9:
f4:ea:1b:9f:dc:ee:90:fa:b4:e8:d5:cf:29:2c:2a:fc:3d:de:
1e:bf:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:06 2026 by rpki-client