Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=
Subject key identifier: 91:B5:84:71:52:0E:58:FE:84:14:21:DA:A9:36:93:58:B9:3F:9A:6C
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 60422E9A40280BCB169E45959063C70E0A4DA10C
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS54252.roa
Signing time: Thu 12 Feb 2026 14:39:25 +0000
ROA not before: Thu 12 Feb 2026 14:34:25 +0000
ROA not after: Thu 11 Feb 2027 14:39:25 +0000
asID: 54252
IP address blocks: 78.41.48.0/24 maxlen: 24
78.41.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 06:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:42:2e:9a:40:28:0b:cb:16:9e:45:95:90:63:c7:0e:0a:4d:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Feb 12 14:34:25 2026 GMT
Not After : Feb 11 14:39:25 2027 GMT
Subject: CN=91B58471520E58FE841421DAA9369358B93F9A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:2b:89:1d:0f:4b:d6:a4:bb:c6:c9:58:f2:
97:13:34:28:0c:35:28:f0:b7:3c:8b:00:14:31:ed:
81:cb:fb:1f:7a:c4:9e:45:5d:fd:04:b9:c7:19:82:
6c:27:29:b1:28:e1:82:b8:4b:d7:94:a2:e7:a7:99:
d7:82:ff:a1:3e:e1:f1:3a:c0:d5:cd:13:0a:90:65:
e9:de:e9:3c:c6:e1:84:82:0d:fe:f1:ae:34:f1:37:
d3:93:61:2b:df:c2:6d:90:92:aa:ab:7a:c7:14:34:
e6:e0:69:21:fb:70:9b:7d:9d:a4:32:27:86:14:03:
95:a6:20:1e:85:d4:5c:43:57:8f:73:f8:ca:c7:33:
2a:e0:c8:a0:1d:a9:30:dc:26:b5:6b:ac:ae:3f:43:
49:97:1d:a8:48:22:0f:8f:16:22:87:24:0e:0f:17:
32:1e:ee:b1:43:df:1d:87:b8:a5:17:fa:81:e6:a9:
a6:5e:b5:7c:c9:d6:d0:9d:41:9e:f1:37:3f:23:a0:
43:ec:5e:26:9b:1e:f9:24:2f:64:cf:69:3c:51:d9:
78:88:87:97:a6:a6:ef:31:2d:b4:2e:b4:73:40:55:
f3:8c:13:9b:69:89:ae:1f:16:36:8d:9f:09:40:c4:
d5:24:6c:8f:3f:91:a3:18:a4:a0:28:48:93:37:eb:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:84:71:52:0E:58:FE:84:14:21:DA:A9:36:93:58:B9:3F:9A:6C
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:ad:63:e1:d4:73:4f:28:61:c4:f2:f6:aa:fc:f6:d1:cf:cc:
4a:3e:17:ad:92:bc:76:fc:fb:ec:b7:12:f4:a1:13:79:29:4d:
cb:91:e1:69:51:c4:66:4e:df:66:16:b7:1a:4e:41:d1:ab:50:
cb:10:c6:af:be:c9:5a:83:43:6c:24:17:00:dd:d8:2c:a2:df:
90:64:d1:9e:b9:d2:17:33:ac:01:06:82:09:31:bd:1e:e2:2e:
45:7b:a6:0a:f9:1c:44:bd:1d:dd:55:27:57:20:e1:d9:96:70:
c8:43:a6:cb:40:10:7f:20:a9:81:47:a0:70:0b:3b:09:e3:8e:
7d:7b:65:38:4e:8b:83:d2:f8:3a:a1:39:ab:f9:01:b9:ae:77:
e9:44:df:7d:da:99:b7:f6:c6:05:84:2a:3f:01:b5:db:df:b4:
82:2b:73:07:84:bd:0e:80:0e:f7:ea:42:16:f9:51:70:0b:e3:
01:99:8e:7f:c4:e9:37:29:0f:b0:c7:e4:56:e0:0b:ae:20:fa:
a7:97:68:6d:33:34:33:0b:bf:4d:6a:b7:cf:3c:c4:96:fd:2a:
d1:27:74:0f:3e:39:45:cd:85:4d:24:21:c3:95:9f:3d:bd:47:
1f:7c:6b:36:88:35:26:32:55:57:db:4b:aa:b4:a1:05:67:d6:
a3:b7:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 16:30:49 2026 by rpki-client