Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: TkCsxbmAKGahlTIbJAvnipBKBPEPz6KLyFUkb1An1Xs=
Subject key identifier: 7C:2E:67:66:5A:59:49:34:92:34:74:9B:84:8E:E4:60:F2:04:D8:31
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5E50D1C972E2F927B2872A51E95EFD79C66BECA6
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54252.roa
Signing time: Wed 28 Jan 2026 15:36:02 +0000
ROA not before: Wed 28 Jan 2026 15:31:02 +0000
ROA not after: Wed 27 Jan 2027 15:36:02 +0000
asID: 54252
IP address blocks: 143.20.19.0/24 maxlen: 24
143.20.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:50:d1:c9:72:e2:f9:27:b2:87:2a:51:e9:5e:fd:79:c6:6b:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jan 28 15:31:02 2026 GMT
Not After : Jan 27 15:36:02 2027 GMT
Subject: CN=7C2E67665A5949349234749B848EE460F204D831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:b3:96:fe:02:27:7c:ee:ba:5d:b3:8f:1e:
7d:04:3a:58:56:0c:6e:aa:32:e9:a5:79:75:51:39:
af:08:71:25:da:bc:a9:9e:84:43:97:fe:6e:55:9f:
f2:28:8e:f4:6f:da:bb:dc:ce:05:37:77:66:19:27:
c3:36:a9:05:11:2d:ba:fe:cc:59:ec:07:2e:aa:9b:
d8:64:c5:f2:bf:e9:bb:36:df:b1:16:6a:91:33:6f:
c6:f1:5c:77:51:be:2c:93:10:b8:dc:11:60:c5:22:
69:80:b3:26:fd:b3:60:8d:0e:da:a9:c3:3c:23:b1:
77:fe:b4:be:65:0b:c8:c0:a1:20:f5:9d:7e:a3:46:
c2:a0:a2:28:93:5e:55:f0:e4:0e:9c:74:0e:6e:75:
e6:2b:e5:75:62:0e:ab:a8:b7:0b:9b:f7:3b:e8:3a:
b6:8f:f9:a1:36:3c:11:fa:29:7b:5d:b2:fb:f4:7e:
4f:0e:c0:aa:60:49:f7:d1:a1:b3:36:ce:c9:fa:a0:
17:90:85:83:e0:57:b4:36:85:8c:cf:c9:98:2a:4f:
c0:e2:f3:6c:7a:ff:b2:76:b7:32:b2:b0:f8:0d:b3:
cc:96:be:ec:cf:4e:c1:23:62:60:f6:e2:a2:df:80:
70:86:b3:0f:22:f7:5d:cb:0d:29:b7:97:5a:02:d1:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:67:66:5A:59:49:34:92:34:74:9B:84:8E:E4:60:F2:04:D8:31
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.19.0/24
143.20.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e8:f1:57:46:09:b1:f9:a2:d5:a7:90:2d:7a:94:ca:96:53:
9c:7f:cb:c4:1a:2a:b7:13:f9:10:2e:39:23:ae:c9:b3:9b:c7:
e3:1e:80:43:01:1d:07:b5:30:c5:f8:bb:32:04:c7:a8:27:ba:
dc:71:ee:08:26:eb:80:a7:b1:f6:59:ee:36:4e:0b:78:de:59:
8d:cd:ca:c4:c1:60:49:0b:1b:1c:13:d8:e9:cd:2b:ab:05:45:
1d:16:9e:5d:0f:fb:4c:e5:fa:80:22:90:e8:9e:e0:73:cd:4f:
6c:07:ae:e2:3e:9e:d8:71:24:59:83:86:e3:d6:ba:b4:b9:63:
f5:7e:4a:9c:d2:32:87:0e:57:47:b0:90:eb:b5:48:c7:60:e5:
c5:eb:36:d8:5e:b8:25:f7:6b:15:95:0f:b9:ab:91:53:69:da:
d7:b4:1f:82:21:50:5f:c7:8d:7b:38:40:91:c9:2a:59:40:77:
7a:16:1c:bc:88:ea:5e:7f:7c:48:a9:1d:23:2c:28:d9:33:16:
23:94:1f:36:50:af:d8:15:74:75:a3:69:55:e8:ea:9c:bb:33:
6c:f4:63:3a:55:e1:0f:6e:d7:a2:f7:62:37:80:6e:1c:e3:fe:
53:1d:aa:cb:bb:9f:6a:5c:89:36:e4:7c:76:87:5f:0a:5e:2d:
29:a4:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:09 2026 by rpki-client