Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52053.roa
File: AS52053.roa (raw, json)
Hash identifier: vUIDMYO392bg7TgbiXCQ+TOPhivJE0FYtjTVCpNvf3k=
Subject key identifier: 52:02:BE:A6:B7:A6:E4:DB:B1:85:BF:59:7E:5D:DE:3B:96:77:73:17
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7101398633B186EB5EBD0C71B7A7FFAD8B2834B1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52053.roa
Signing time: Sun 23 Aug 2026 13:49:30 +0000
ROA not before: Sun 23 Aug 2026 13:44:30 +0000
ROA not after: Sun 22 Aug 2027 13:49:30 +0000
asID: 52053
IP address blocks: 2a13:9500:e7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:01:39:86:33:b1:86:eb:5e:bd:0c:71:b7:a7:ff:ad:8b:28:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 13:44:30 2026 GMT
Not After : Aug 22 13:49:30 2027 GMT
Subject: CN=5202BEA6B7A6E4DBB185BF597E5DDE3B96777317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:43:41:47:c1:b5:a3:45:6d:97:4b:77:80:
11:71:bb:92:a0:76:32:b4:d2:9f:bb:63:e6:c7:87:
b1:57:05:d8:42:c7:56:53:12:40:8d:5e:17:4d:a1:
2c:db:ac:eb:09:21:d1:c0:ad:33:e6:6f:c0:a8:ec:
39:00:b8:ee:4c:cd:ad:de:5d:72:04:91:b7:3c:30:
82:e8:4a:1a:c2:f7:29:fb:f5:f7:6e:0e:e6:8d:04:
e8:1d:7e:75:b3:bd:77:9f:9a:36:db:d3:ce:65:db:
7b:92:47:47:53:15:7b:bc:c8:2a:25:ad:24:de:44:
3a:4c:c0:27:a8:09:00:69:01:b0:e1:90:20:79:48:
d8:99:a2:b5:19:6e:9a:4c:d1:0c:86:83:7e:f3:7d:
70:92:03:68:06:df:e1:4d:2b:60:66:f2:b0:13:fe:
16:c7:db:a7:e0:83:8b:8d:bf:d5:a2:7c:91:00:d7:
51:48:4a:4d:75:45:7a:9e:7b:9a:ec:b9:45:4f:c1:
17:71:c8:dc:88:0a:90:3d:4d:a2:95:ce:31:b6:67:
de:0f:06:5a:0d:d2:f2:27:e4:c9:fd:16:09:eb:4b:
16:37:b5:ec:33:6f:63:9d:f8:4a:fa:a3:8c:74:24:
d2:ae:2a:a6:85:2f:e1:a4:34:e4:b1:b7:50:2d:fc:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:BE:A6:B7:A6:E4:DB:B1:85:BF:59:7E:5D:DE:3B:96:77:73:17
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS52053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e7::/48
Signature Algorithm: sha256WithRSAEncryption
0f:a0:a6:4c:dd:d8:c8:4c:d7:5e:59:b5:e1:b9:88:aa:58:83:
65:9c:6a:8d:78:36:2a:78:05:0d:85:ed:e7:5f:e1:da:5a:0a:
1a:dc:5e:37:cd:5d:55:b0:60:86:ea:2f:8e:d8:e9:2f:0f:67:
14:a6:2a:a4:18:09:56:d2:72:62:ae:47:86:e5:be:7a:b9:7b:
20:62:cf:91:73:e8:91:2f:2d:3f:c6:6e:cf:0e:98:e6:9e:bd:
90:db:bf:8d:ad:15:92:12:20:d2:97:26:c5:4c:29:d4:2a:8c:
4c:2f:89:d7:60:4b:32:f3:e7:2b:f2:72:74:4d:94:e0:b0:a7:
89:e4:b1:37:6d:4d:e3:54:36:5d:9a:57:47:75:f5:42:e6:e5:
dc:94:4a:19:70:4a:83:3d:7d:19:c3:d9:3a:b2:c0:83:02:c1:
8a:3f:95:37:83:51:41:3d:61:fb:7b:7a:25:1f:c3:3e:77:52:
10:a9:85:d4:e4:f8:c3:17:47:8e:2b:c7:1e:38:95:21:f1:36:
1e:e0:58:e7:c4:3f:71:50:46:f1:77:4f:f7:5f:6c:36:0c:53:
88:f3:56:1e:16:db:d1:1f:ac:80:3f:f4:24:f1:0f:de:20:29:
3b:02:fa:fc:f1:9f:42:d9:43:75:5e:22:98:fa:8b:03:5a:18:
95:46:e0:f1
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUcQE5hjOxhutevQxxt6f/rYsoNLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MjMxMzQ0MzBaFw0yNzA4MjIxMzQ5MzBaMDMxMTAvBgNV
BAMTKDUyMDJCRUE2QjdBNkU0REJCMTg1QkY1OTdFNURERTNCOTY3NzczMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiENBR8G1o0Vtl0t3gBFxu5Kg
djK00p+7Y+bHh7FXBdhCx1ZTEkCNXhdNoSzbrOsJIdHArTPmb8Co7DkAuO5Mza3e
XXIEkbc8MILoShrC9yn79fduDuaNBOgdfnWzvXefmjbb085l23uSR0dTFXu8yCol
rSTeRDpMwCeoCQBpAbDhkCB5SNiZorUZbppM0QyGg37zfXCSA2gG3+FNK2Bm8rAT
/hbH26fgg4uNv9WifJEA11FISk11RXqee5rsuUVPwRdxyNyICpA9TaKVzjG2Z94P
BloN0vIn5Mn9FgnrSxY3tewzb2Od+Er6o4x0JNKuKqaFL+GkNOSxt1At/GSvAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUUgK+prem5Nuxhb9Zfl3eO5Z3cxcwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTIwNTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA
AOcwDQYJKoZIhvcNAQELBQADggEBAA+gpkzd2MhM115ZteG5iKpYg2Wcao14Nip4
BQ2F7edf4dpaChrcXjfNXVWwYIbqL47Y6S8PZxSmKqQYCVbScmKuR4blvnq5eyBi
z5Fz6JEvLT/Gbs8OmOaevZDbv42tFZISINKXJsVMKdQqjEwviddgSzLz5yvycnRN
lOCwp4nksTdtTeNUNl2aV0d19ULm5dyUShlwSoM9fRnD2TqywIMCwYo/lTeDUUE9
Yft7eiUfwz53UhCphdTk+MMXR44rxx44lSHxNh7gWOfEP3FQRvF3T/dfbDYMU4jz
Vh4W29EfrIA/9CTxD94gKTsC+vzxn0LZQ3VeIpj6iwNaGJVG4PE=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:40 2026 by rpki-client