Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54702.roa
File: AS54702.roa (raw, json)
Hash identifier: l6K9rdS2zgJUBO8MOEa8mYzN/kTN7h+RKH8xE2kujqU=
Subject key identifier: 89:B0:A4:57:65:13:A8:06:CB:D2:B0:94:70:A0:00:AE:13:96:98:1D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 613D2CEF95B689A71135466C9143B63D2E6DCD3E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54702.roa
Signing time: Tue 04 Aug 2026 23:00:46 +0000
ROA not before: Tue 04 Aug 2026 22:55:46 +0000
ROA not after: Tue 03 Aug 2027 23:00:46 +0000
asID: 54702
IP address blocks: 143.14.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3d:2c:ef:95:b6:89:a7:11:35:46:6c:91:43:b6:3d:2e:6d:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 4 22:55:46 2026 GMT
Not After : Aug 3 23:00:46 2027 GMT
Subject: CN=89B0A4576513A806CBD2B09470A000AE1396981D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:c8:13:81:e4:3c:e4:7d:1a:89:0a:a1:48:
81:f8:b0:d3:37:7a:92:29:8f:48:ff:53:85:8c:eb:
51:a5:0c:67:4a:10:fd:fd:09:d3:62:ee:0a:f3:77:
ae:cd:7b:89:a5:52:2d:16:0e:61:7f:58:da:8d:00:
4e:75:e9:a9:a3:ae:d5:04:b6:2d:71:bf:2d:9a:ac:
68:27:be:b2:be:12:11:58:46:02:f9:93:13:d8:71:
6d:e0:59:0e:59:55:13:31:6b:bb:34:e8:a4:d3:52:
5d:63:7d:ce:45:02:77:31:37:de:41:f5:c2:cd:09:
51:74:78:2d:a6:4e:96:ae:e2:f2:b1:cf:76:f5:b4:
8e:ca:38:05:5f:71:34:7e:f0:e1:e1:54:f1:25:e2:
65:66:95:2e:01:56:e3:69:b3:44:98:f3:f0:d9:62:
dd:7b:29:77:1f:fb:9f:14:75:96:e7:d0:fc:a8:ef:
62:46:ee:b1:2a:ad:62:ec:c2:10:0c:01:8f:0d:ad:
eb:73:39:f9:62:8e:54:d2:f3:ea:3f:b3:74:08:aa:
15:b3:fe:b9:a1:74:e3:d3:3a:a8:ce:8d:0a:b0:88:
d6:bf:06:08:42:10:ef:10:6e:d3:7f:65:e9:0e:d1:
c8:74:2d:19:13:5c:db:36:c7:11:e7:79:cf:25:92:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:A4:57:65:13:A8:06:CB:D2:B0:94:70:A0:00:AE:13:96:98:1D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c1:4c:a6:41:66:0c:ab:f1:c9:99:3d:ce:2c:70:d2:ec:81:
25:9b:45:79:37:2b:56:74:95:03:09:51:4b:3f:f7:02:c1:69:
7f:79:bb:a8:57:a9:4b:86:0c:54:da:60:94:a7:48:2b:17:c7:
c4:a7:aa:f0:68:1c:06:7c:eb:06:bb:c8:eb:4b:0f:3a:81:8c:
20:9e:f2:9a:47:a8:e5:3d:fd:86:a2:d1:3d:97:dd:8e:14:a9:
4b:d7:f5:dc:9f:42:fc:a2:ed:6f:12:80:bb:b9:64:ba:41:1b:
5b:52:e3:04:b6:40:d9:48:ea:f0:8d:1d:77:3e:47:9c:59:0b:
56:23:72:be:95:90:be:75:bd:11:d2:70:b8:bf:bd:13:eb:dc:
93:a1:07:fd:80:9a:a0:04:ed:18:31:6a:f1:c7:96:b7:d5:09:
5a:7c:4d:6d:79:0b:5f:20:1f:07:ad:b4:df:0a:01:58:8f:34:
fc:ad:dd:ef:ed:b7:3a:a1:99:01:ff:52:0b:e0:2f:0b:96:24:
ae:a3:4a:82:b7:7b:07:ee:47:ce:bf:a9:e8:5c:85:de:ca:59:
72:af:b6:95:4b:57:56:a7:77:1d:a4:79:93:5f:ce:09:11:34:
21:ee:9f:8b:4a:3c:65:4e:22:da:50:09:0b:6e:85:9b:eb:82:
60:f4:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:29:48 2026 by rpki-client