Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: 9A2ntQ9DIU9e117wy8jfMbI8DVN9mu7BIRnEwsGVh7Y=
Subject key identifier: 47:34:53:BC:C9:62:8C:06:E0:B8:86:F1:C5:5F:E3:C1:08:E1:3B:98
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0F6FD4A7F563E5535BE55DEEE4F918C44D240F67
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
Signing time: Sun 15 Feb 2026 00:07:05 +0000
ROA not before: Sun 15 Feb 2026 00:02:05 +0000
ROA not after: Sun 14 Feb 2027 00:07:05 +0000
asID: 54252
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6f:d4:a7:f5:63:e5:53:5b:e5:5d:ee:e4:f9:18:c4:4d:24:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 15 00:02:05 2026 GMT
Not After : Feb 14 00:07:05 2027 GMT
Subject: CN=473453BCC9628C06E0B886F1C55FE3C108E13B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:b0:e4:86:4a:84:82:17:e2:42:f4:89:ac:
46:27:f4:02:10:6b:d3:d8:f3:c9:41:36:96:d1:b4:
3b:f0:8f:55:6b:62:ba:8c:12:e7:b6:fa:bc:de:52:
ee:cf:84:b4:ea:29:f7:75:17:b6:f0:c4:c3:5e:68:
15:7e:2c:8c:b9:65:f6:bc:88:26:4a:10:ab:da:24:
62:73:b0:1b:90:61:97:fe:c9:f6:34:2f:f1:bf:34:
c1:e9:8b:14:c4:ff:b0:51:06:7b:4c:24:ba:2d:d3:
ac:41:21:fa:30:d8:88:a5:ca:44:a6:fd:53:16:3e:
c8:84:fe:bb:21:e6:65:8c:77:a0:a4:45:64:b2:36:
c7:62:8b:ca:09:25:44:10:a7:cd:94:85:8c:38:a8:
b9:46:96:8e:f3:9f:e0:35:80:93:37:3f:a2:6e:8a:
d9:5b:29:2d:a6:d9:a7:74:56:a2:59:c6:90:81:27:
37:97:9c:08:4c:91:58:c4:57:3e:3d:90:7a:0d:8a:
e6:e6:69:51:e6:45:43:9b:11:25:85:f8:95:78:5b:
ff:a1:b8:39:28:5a:94:c2:4e:34:bd:f8:01:4a:13:
1c:13:7e:18:e2:eb:c4:7a:e4:23:9d:94:f5:18:d5:
8f:ab:7d:67:6c:9b:57:38:43:75:24:96:2b:2c:ef:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:53:BC:C9:62:8C:06:E0:B8:86:F1:C5:5F:E3:C1:08:E1:3B:98
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.136.0/24
155.117.81.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d6:58:48:c4:05:60:a7:dc:c7:40:7a:0b:d0:37:02:57:60:
1b:d7:f3:9d:1b:6b:d8:18:89:6c:b6:20:3b:d4:10:44:a6:4f:
4b:b2:e4:35:70:f3:fd:84:0f:89:84:32:f5:23:94:de:3d:a4:
dd:7e:cd:de:24:78:0d:d3:d9:31:66:ae:f3:45:d8:1c:6b:0f:
68:cd:df:94:39:a3:41:87:3d:d2:e3:d7:e8:22:0d:0e:29:44:
c8:f5:6a:8e:b7:18:f5:e5:c8:4f:29:8f:40:04:ba:94:87:9b:
b0:14:65:f3:fc:69:7b:36:f6:1c:60:d6:19:13:7d:6b:d2:74:
b2:6d:7e:f3:a0:2c:65:2d:52:dd:c5:9d:18:a8:78:77:df:cc:
db:a9:9f:7d:6a:79:2c:c2:60:47:43:2e:a9:77:1e:10:c6:5b:
e6:25:c0:b5:2a:09:89:8f:f9:79:c6:6c:e9:0a:95:bb:f3:79:
1e:bf:fa:0b:63:34:ba:c5:70:d6:32:32:07:cd:aa:8b:4a:54:
9f:ba:b8:6e:76:55:2d:42:73:d6:fb:54:7e:a0:0f:41:c0:0f:
59:14:58:b5:17:32:5c:10:6b:3b:6d:25:82:61:ab:52:cd:d3:
f0:11:a3:59:e1:7a:47:45:68:52:5e:c4:2c:6a:4b:e8:0d:f5:
72:4e:ed:24
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUD2/Up/Vj5VNb5V3u5PkYxE0kD2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMTUwMDAyMDVaFw0yNzAyMTQwMDA3MDVaMDMxMTAvBgNV
BAMTKDQ3MzQ1M0JDQzk2MjhDMDZFMEI4ODZGMUM1NUZFM0MxMDhFMTNCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekrDkhkqEghfiQvSJrEYn9AIQ
a9PY88lBNpbRtDvwj1VrYrqMEue2+rzeUu7PhLTqKfd1F7bwxMNeaBV+LIy5Zfa8
iCZKEKvaJGJzsBuQYZf+yfY0L/G/NMHpixTE/7BRBntMJLot06xBIfow2IilykSm
/VMWPsiE/rsh5mWMd6CkRWSyNsdii8oJJUQQp82UhYw4qLlGlo7zn+A1gJM3P6Ju
itlbKS2m2ad0VqJZxpCBJzeXnAhMkVjEVz49kHoNiubmaVHmRUObESWF+JV4W/+h
uDkoWpTCTjS9+AFKExwTfhji68R65COdlPUY1Y+rfWdsm1c4Q3Ukliss7+YlAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQURzRTvMlijAbguIbxxV/jwQjhO5gwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTQyNTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACPDrwD
BACW8YgDBACbdVEwDQYJKoZIhvcNAQELBQADggEBAHXWWEjEBWCn3MdAegvQNwJX
YBvX850ba9gYiWy2IDvUEESmT0uy5DVw8/2ED4mEMvUjlN49pN1+zd4keA3T2TFm
rvNF2BxrD2jN35Q5o0GHPdLj1+giDQ4pRMj1ao63GPXlyE8pj0AEupSHm7AUZfP8
aXs29hxg1hkTfWvSdLJtfvOgLGUtUt3FnRioeHffzNupn31qeSzCYEdDLql3HhDG
W+YlwLUqCYmP+XnGbOkKlbvzeR6/+gtjNLrFcNYyMgfNqotKVJ+6uG52VS1Cc9b7
VH6gD0HAD1kUWLUXMlwQazttJYJhq1LN0/ARo1nhekdFaFJexCxqS+gN9XJO7SQ=
-----END CERTIFICATE-----
Generated at Sat Feb 21 15:03:46 2026 by rpki-client