Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54004.roa
File: AS54004.roa (raw, json)
Hash identifier: a6o1XACd6V3PsjeBV3sF3ouMo3gYj/saoI4kY3wC7bM=
Subject key identifier: 4F:54:97:73:8E:F6:F3:B9:50:7F:DC:DD:9E:01:BD:2E:33:BB:89:37
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6DE5D3ACB41920047F0603780C9605A7A0CDC698
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54004.roa
Signing time: Tue 21 Jul 2026 10:40:00 +0000
ROA not before: Tue 21 Jul 2026 10:35:00 +0000
ROA not after: Tue 20 Jul 2027 10:40:00 +0000
asID: 54004
IP address blocks: 181.214.97.0/24 maxlen: 24
181.214.108.0/24 maxlen: 24
181.214.111.0/24 maxlen: 24
181.214.113.0/24 maxlen: 24
191.96.58.0/24 maxlen: 24
191.101.56.0/24 maxlen: 24
191.101.85.0/24 maxlen: 24
191.101.87.0/24 maxlen: 24
191.101.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e5:d3:ac:b4:19:20:04:7f:06:03:78:0c:96:05:a7:a0:cd:c6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 21 10:35:00 2026 GMT
Not After : Jul 20 10:40:00 2027 GMT
Subject: CN=4F5497738EF6F3B9507FDCDD9E01BD2E33BB8937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:4c:6e:72:dd:4d:50:04:fa:55:1d:21:eb:
16:2d:41:bb:ba:bd:3a:69:4f:d4:cc:b4:8e:67:f0:
22:e6:f0:61:c2:d8:c1:77:50:01:d2:4f:ca:0c:c8:
99:87:ef:74:7c:4c:55:e3:3b:b7:de:55:8a:10:5c:
1c:d9:2a:18:6d:df:eb:40:2c:97:f9:3c:da:d5:bd:
76:0f:aa:a7:8c:ac:80:81:5f:76:76:5c:41:59:b5:
35:77:c0:b2:41:b7:33:bb:8c:2a:d6:19:6c:e0:25:
ae:54:13:49:bb:92:ac:54:6d:db:bb:0c:c5:ed:8c:
ee:46:fe:b5:71:36:8e:a1:07:9b:be:2f:12:35:de:
76:be:29:6c:55:7f:b3:8e:3a:36:2f:a3:a3:38:c4:
e9:c3:91:de:a2:ef:28:e4:af:e3:61:a2:05:0a:b6:
93:97:bd:76:81:00:03:30:4e:05:8b:43:22:c7:68:
f8:f1:e1:c0:d0:4a:82:d3:a8:4f:37:75:35:d7:fc:
a6:6f:1f:d0:54:cc:21:f8:1f:9e:e4:91:6e:ee:a8:
e4:0c:ce:31:9b:ab:f0:b3:be:6f:9f:ac:f2:7c:78:
fd:61:bd:3c:92:dd:ce:58:a8:e8:85:49:56:e3:ef:
eb:7c:d6:12:9b:78:75:73:39:11:10:f0:ac:8c:83:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:97:73:8E:F6:F3:B9:50:7F:DC:DD:9E:01:BD:2E:33:BB:89:37
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.97.0/24
181.214.108.0/24
181.214.111.0/24
181.214.113.0/24
191.96.58.0/24
191.101.56.0/24
191.101.85.0/24
191.101.87.0/24
191.101.95.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ef:0c:d9:fc:e1:f3:00:a0:a6:26:f6:3d:f2:1c:3a:79:95:
51:c7:81:4f:8a:ef:96:67:ff:4d:cc:d5:1b:ce:86:5a:cb:67:
17:47:55:d9:c5:19:0e:b6:f6:97:f9:26:65:15:3c:3d:ab:27:
cd:68:da:03:96:ab:a5:6f:2f:71:6e:59:ae:e1:14:a0:33:89:
be:cb:5a:df:f4:49:32:b6:58:c2:85:72:a0:1b:e5:7e:96:31:
0c:2a:8c:9b:96:a3:1f:af:9f:0a:0c:0b:bd:1d:b8:2d:07:19:
fb:24:d5:b4:ce:08:92:4a:8b:ad:8f:99:ab:98:d7:3e:bf:4b:
df:3d:1a:33:69:a1:1d:b9:ae:0d:28:fb:f4:84:9f:a2:de:d3:
9d:52:d4:89:46:2d:84:ee:ef:1a:d4:6d:6b:46:78:f5:d9:76:
a5:d2:f2:4d:b7:cf:de:dc:cb:88:3e:de:a5:2c:8f:fb:96:8b:
f6:e3:fc:d8:64:c9:00:18:ee:63:24:e7:d7:b4:f9:1d:f6:e4:
a6:e7:47:59:0e:19:4f:4a:e0:7a:98:a1:ad:4f:19:89:6e:25:
0e:ed:de:3e:be:64:d0:80:7a:dd:fd:f4:cf:2e:b3:7e:4b:50:
e0:47:b8:a3:b8:5b:53:c9:61:fc:0c:d3:a1:b5:61:1f:69:5f:
ef:25:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:50 2026 by rpki-client