Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS54113.roa
File: AS54113.roa (raw, json)
Hash identifier: /LBUDVcUF0cGm8wC5mImwhHPh17bfanukOtZKeRvtnI=
Subject key identifier: BE:96:A1:4B:4D:96:95:A8:CF:D9:54:4F:8E:2F:60:B5:5D:A1:33:4A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6AA84B6FACF7CDE3DB3316C54A2E8AD8BE06074D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS54113.roa
Signing time: Tue 02 Jun 2026 19:04:02 +0000
ROA not before: Tue 02 Jun 2026 18:59:02 +0000
ROA not after: Tue 01 Jun 2027 19:04:02 +0000
asID: 54113
IP address blocks: 87.81.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a8:4b:6f:ac:f7:cd:e3:db:33:16:c5:4a:2e:8a:d8:be:06:07:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 2 18:59:02 2026 GMT
Not After : Jun 1 19:04:02 2027 GMT
Subject: CN=BE96A14B4D9695A8CFD9544F8E2F60B55DA1334A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:cc:9f:d2:2e:d9:6c:10:99:46:4c:e0:7f:
ca:f5:f6:cb:ab:80:2f:2a:24:e0:59:f8:c6:c7:e5:
50:fe:58:8c:23:09:70:e9:19:23:08:64:71:2c:5a:
48:62:e9:1d:00:3a:73:2c:63:ab:e4:53:f3:76:2b:
e8:ee:45:88:e0:b2:52:50:2b:e3:21:a6:85:c8:38:
c8:1d:56:82:f9:c8:c7:2c:fd:43:8f:38:dd:66:ce:
7e:4e:9f:f6:6e:e9:81:27:29:a6:8c:66:ec:75:2b:
11:77:a6:ef:4d:13:d9:2a:8b:a0:76:8c:09:93:da:
53:d1:d6:65:e5:e1:6d:a3:0a:62:ae:5e:a3:ba:c6:
e6:1c:e4:f3:cf:1b:30:75:ef:4a:ef:e7:de:7a:a3:
10:17:b2:2c:aa:2b:2b:3b:05:cb:86:da:36:16:72:
0b:ac:4f:75:23:58:ee:95:3a:a1:0e:e2:ff:71:63:
24:b5:20:5a:01:99:f5:07:b8:3f:b3:7f:b7:d3:d5:
38:8d:5a:26:36:69:f3:03:5f:2b:43:52:97:c6:81:
72:0f:5b:df:95:f4:b5:7a:72:61:6a:ab:10:ec:42:
43:99:25:d6:ce:75:41:7b:ff:67:1e:01:5e:50:aa:
46:ae:0c:c1:4e:01:50:45:13:1b:d0:05:94:44:f8:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:A1:4B:4D:96:95:A8:CF:D9:54:4F:8E:2F:60:B5:5D:A1:33:4A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS54113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.81.224.0/19
Signature Algorithm: sha256WithRSAEncryption
48:fe:02:b2:ab:a2:4b:0a:00:ca:96:e6:e9:a2:33:46:a7:fc:
55:9d:0a:cb:e7:87:36:33:ae:4d:d7:c2:57:aa:e1:57:21:23:
bd:e6:47:3e:15:0f:24:12:36:17:ad:45:8d:4a:ba:65:17:0f:
91:58:d7:de:87:02:73:10:b5:92:d3:10:80:c4:82:42:50:ea:
98:34:4e:f0:bb:8d:96:e7:b1:10:e8:0a:f3:05:bf:55:37:79:
4a:a3:b3:ea:83:25:2e:32:c1:47:25:29:f4:1c:72:31:ea:40:
bb:c5:84:2f:31:a6:7a:58:7e:2b:3f:ad:05:5b:3a:cf:41:f9:
fe:e7:6f:f7:84:69:6c:4e:c9:f9:a8:bf:e4:af:28:b5:fd:e3:
82:76:f3:60:24:56:21:d2:19:4b:c0:00:3a:05:5e:a7:be:03:
f7:e8:f8:19:ba:a0:d2:bc:f7:0e:7a:51:ca:60:72:53:2e:e8:
ca:94:fe:94:52:90:f0:44:0d:a3:e5:b4:64:7f:4d:e5:77:35:
6f:61:ed:64:3c:4a:81:bc:74:92:6a:ec:51:5d:4e:72:15:d4:
59:67:f2:70:c3:5a:c6:f7:7e:3d:0c:ce:30:ad:5b:4a:c2:f3:
05:ca:c0:7d:36:86:b2:c9:05:72:9e:b4:34:1d:8f:19:26:67:
51:15:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:17 2026 by rpki-client