Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: KhQRLKXQZAqlmJa8dSwcvz8y2vBYE0cXfWwX7prGz/s=
Subject key identifier: 30:0E:DC:BF:46:1A:AD:DB:4B:9E:16:C3:59:DA:BB:B5:F4:E1:E7:7E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7D1C7C127F2328B7C0ED2CCC71CF2C1820DA2BC0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
Signing time: Mon 15 Jun 2026 00:05:45 +0000
ROA not before: Mon 15 Jun 2026 00:00:45 +0000
ROA not after: Mon 14 Jun 2027 00:05:45 +0000
asID: 54252
IP address blocks: 181.215.219.0/24 maxlen: 24
191.96.9.0/24 maxlen: 24
191.101.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1c:7c:12:7f:23:28:b7:c0:ed:2c:cc:71:cf:2c:18:20:da:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 15 00:00:45 2026 GMT
Not After : Jun 14 00:05:45 2027 GMT
Subject: CN=300EDCBF461AADDB4B9E16C359DABBB5F4E1E77E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:20:35:83:b8:2d:a3:43:bf:16:2e:8d:6e:
76:32:40:6d:27:06:9a:4e:1e:9b:ae:79:6d:6c:8b:
58:de:17:58:ee:91:a5:e5:10:96:d1:1d:c5:d6:de:
85:f5:ff:2d:40:fb:26:71:4a:8f:d5:29:4f:5f:31:
0d:1e:3d:ab:30:a7:50:86:be:d3:d6:a8:41:49:f7:
21:e5:c1:00:f1:90:1a:f2:e4:49:00:ae:32:b9:d7:
5c:d8:7a:1b:bd:92:e0:a7:f7:89:8e:98:83:5c:d6:
f5:cb:8a:7c:4a:17:e3:02:94:22:95:44:b7:ad:df:
eb:d2:e7:ad:46:f7:58:8e:f6:1e:a9:6a:17:43:14:
01:48:ad:ff:68:8f:8d:d9:29:a8:99:be:97:99:23:
31:b3:c9:2c:5c:5a:64:36:91:91:f4:8b:05:18:fb:
8d:87:a5:6c:db:03:47:ce:7d:f9:6d:d8:92:b0:73:
b2:eb:e7:d4:12:a6:76:16:9f:81:a0:1b:e8:10:fe:
d5:d3:2a:a2:c2:f1:b6:58:f9:21:6d:1f:a6:d8:6c:
40:c4:7a:43:e6:53:98:e8:64:7b:73:6e:b0:67:93:
89:eb:a5:81:78:24:65:86:33:c9:32:25:5c:aa:41:
e6:06:8e:c5:aa:ef:d0:5b:67:a4:6f:fe:c2:04:ab:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:DC:BF:46:1A:AD:DB:4B:9E:16:C3:59:DA:BB:B5:F4:E1:E7:7E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.219.0/24
191.96.9.0/24
191.101.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4a:98:7f:17:e8:3e:55:1c:2d:e8:cc:c8:e1:41:14:a9:66:
02:fe:1f:a4:56:a1:7a:8f:11:6a:24:61:47:58:61:3e:59:3d:
8d:38:46:cc:57:50:55:ff:51:95:d2:30:35:2c:ad:0c:23:e9:
a4:ee:3e:5b:0b:28:38:df:27:2a:95:5d:32:ef:de:b9:11:67:
b5:9f:02:57:36:2a:1a:b7:e9:60:f0:00:4d:b6:9d:b4:c3:4b:
1d:04:7a:f8:d6:da:8e:80:2f:0f:8e:c6:7d:81:96:4e:bd:0f:
3b:ba:b1:e5:8d:5a:34:b8:2b:0a:6a:9a:69:7a:7e:79:93:52:
01:b8:c8:5b:f7:47:a3:58:52:ce:7e:c6:86:bb:ed:3d:f9:39:
70:04:08:e0:cd:bb:f2:79:8f:6c:19:9d:55:02:81:0c:ad:ee:
97:9a:a5:0a:0e:83:d8:20:ca:9a:ff:74:d3:b2:00:51:12:fb:
32:44:87:dc:d1:36:4f:9c:3a:d0:b2:22:a5:68:39:f1:ea:2c:
5a:15:ea:70:68:49:50:f8:56:dd:df:92:7e:6d:74:29:20:de:
21:df:71:d9:c9:de:8c:79:c7:7f:f5:11:88:dd:a1:5a:ae:b3:
1c:15:4b:70:48:a1:d4:20:ea:71:bb:4d:f1:95:f1:fd:0c:07:
6a:bf:a3:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:47 2026 by rpki-client