Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: Iw3xGWyVphOMb4IthYQbt5lksRLNrkFJtLm5lZ2oCpU=
Subject key identifier: A4:EE:59:98:E9:53:5E:EE:6A:FC:CA:D1:10:70:C6:91:74:B2:C4:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 032FB5BA27AA3595E5FCA2AD485605C9BA3E0D81
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
Signing time: Mon 15 Jun 2026 00:02:53 +0000
ROA not before: Sun 14 Jun 2026 23:57:53 +0000
ROA not after: Mon 14 Jun 2027 00:02:53 +0000
asID: 54252
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2f:b5:ba:27:aa:35:95:e5:fc:a2:ad:48:56:05:c9:ba:3e:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 14 23:57:53 2026 GMT
Not After : Jun 14 00:02:53 2027 GMT
Subject: CN=A4EE5998E9535EEE6AFCCAD11070C69174B2C4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:f8:14:14:7f:21:37:88:76:ee:02:c1:f6:
fe:e4:76:bb:a7:18:14:a5:f7:eb:53:1e:56:e8:fe:
c7:1e:70:12:e1:77:0a:7e:48:2f:97:23:67:c6:13:
28:6a:ce:a0:c9:fd:e1:3e:06:6f:bc:3d:64:16:43:
57:79:f8:7d:1a:c1:17:86:72:e3:9f:e9:ca:a9:ff:
66:ac:23:5c:74:3f:e6:e2:84:6b:92:00:3c:ad:fd:
a5:74:5d:78:cb:8a:78:01:69:50:4f:5f:72:33:59:
72:c7:84:9a:af:14:eb:6a:70:1f:91:b2:f9:b9:eb:
dc:86:b6:60:f2:b2:e1:34:95:30:3d:11:81:89:60:
f2:9c:01:17:2b:9f:a6:6e:dc:0d:b8:53:95:2c:52:
81:ae:73:d9:17:d7:9b:8e:65:06:91:3b:f2:18:dd:
4b:20:a3:ee:49:63:61:2f:5f:9f:13:05:41:1d:56:
03:53:45:ea:e7:46:1b:89:2b:1c:3d:59:75:c1:1e:
cf:0d:47:54:21:b3:79:9d:2b:e1:56:13:72:04:37:
8e:02:b6:cf:18:4d:71:9d:07:59:14:50:ba:df:6c:
34:17:70:ec:1c:c4:8c:7b:99:25:68:48:8d:9c:09:
40:73:1f:fa:c4:6e:15:24:72:9e:6f:55:5a:f2:72:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:59:98:E9:53:5E:EE:6A:FC:CA:D1:10:70:C6:91:74:B2:C4:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.174.0/24
150.241.234.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
46:14:14:ef:56:c5:55:86:a7:37:0a:46:82:bd:30:99:c3:bf:
5d:e8:c5:a3:12:d9:78:0e:e3:71:12:04:fb:3c:10:3b:f7:8a:
21:97:f3:59:40:28:44:af:da:7e:98:4c:83:68:7c:2a:38:4a:
90:62:16:66:44:65:74:de:52:f4:4a:10:7b:ca:99:fb:6d:c5:
23:de:71:0f:98:0f:6b:31:c4:67:d1:43:e2:cc:2e:57:f7:e0:
f9:bd:64:1a:09:fc:5f:91:35:00:3b:ec:21:4f:fe:5f:cb:65:
fb:38:b0:b4:24:08:72:5b:8f:42:86:ad:22:b3:b2:47:53:58:
99:87:24:99:3a:67:57:0a:42:d3:e7:88:0a:0c:8c:c3:4b:1c:
3b:de:a5:f9:08:ea:ea:80:9a:f9:a1:ac:c0:96:c4:89:da:37:
6e:ff:4d:6f:8c:95:be:9f:c3:fb:ca:66:4c:73:33:e6:fc:e1:
ee:2b:0f:e7:0a:7f:7b:0e:2a:1e:67:0a:77:e8:02:59:ac:a3:
59:e8:aa:c1:40:bc:23:96:9d:a5:6e:56:a9:fe:4f:2e:f4:10:
29:ce:e3:e2:a3:f4:dc:32:a9:d4:48:fd:96:6a:cf:99:90:98:
92:3a:af:d4:fc:41:ab:6b:2a:58:c2:00:54:81:5b:8b:24:25:
9b:0d:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:35 2026 by rpki-client