Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: X2SNgLwTmTyqtqzHWfS6j8ItXZJJVfPddlqzEmvLlAc=
Subject key identifier: B1:6A:4E:FE:99:1D:F1:44:8E:52:FB:79:07:27:3B:3C:61:6D:26:98
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5C3C1373A6AB0CFFF75A40BB7A132C084DC8C2F4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54252.roa
Signing time: Mon 15 Jun 2026 00:04:51 +0000
ROA not before: Sun 14 Jun 2026 23:59:51 +0000
ROA not after: Mon 14 Jun 2027 00:04:51 +0000
asID: 54252
IP address blocks: 143.20.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3c:13:73:a6:ab:0c:ff:f7:5a:40:bb:7a:13:2c:08:4d:c8:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 14 23:59:51 2026 GMT
Not After : Jun 14 00:04:51 2027 GMT
Subject: CN=B16A4EFE991DF1448E52FB7907273B3C616D2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:9d:4e:ed:a7:e6:8a:b7:fe:1a:bc:65:02:
d3:7a:f9:6f:30:9a:cb:43:3b:00:64:24:d3:be:98:
ff:cd:dd:56:8e:39:0a:14:08:d3:8f:8a:e2:87:65:
8e:31:9f:49:d5:47:b8:26:bf:b9:7e:57:99:6c:bf:
1b:fe:be:37:de:cd:8b:6c:1a:1d:68:7f:71:75:1f:
8a:e1:98:92:26:7b:08:eb:86:b9:df:e8:71:db:ce:
6c:26:da:fe:7e:74:44:2b:c2:23:ad:d7:44:53:7c:
e9:80:96:e3:9b:3e:03:26:8c:5d:10:cc:9b:d3:d4:
e9:70:28:07:be:8b:c2:7c:27:cb:7c:e9:36:63:8e:
44:53:73:7e:14:18:cd:5a:ef:b7:c9:4c:53:0b:7a:
2f:78:d0:ca:59:08:aa:1d:6e:b1:ea:aa:a3:ff:81:
a2:54:8d:6a:d4:43:5b:f6:70:9a:bc:f4:8f:bf:c7:
69:ee:d5:89:4a:63:af:be:bc:0d:dd:d5:bd:19:d7:
3d:73:aa:ed:c7:36:cb:f0:c7:c1:dc:12:bb:6d:96:
75:1c:8b:e9:56:41:cf:d4:84:81:06:72:cf:1d:05:
ed:32:a0:82:6a:f4:b6:d2:81:b0:16:a0:ee:8c:2f:
e3:4d:59:94:6f:aa:dd:d1:1e:d1:e3:9b:71:3d:e2:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:4E:FE:99:1D:F1:44:8E:52:FB:79:07:27:3B:3C:61:6D:26:98
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.19.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7e:32:b6:4a:bf:00:c6:6e:66:d8:56:f0:54:3e:14:3c:58:
ba:5a:3c:63:f5:b6:58:76:3b:0a:8c:cd:84:aa:6f:d2:f1:b9:
40:75:44:0c:4d:19:d4:88:f4:28:e0:7f:d9:54:46:08:ce:5f:
62:3f:f6:1a:de:9e:dc:c8:d6:a7:85:99:b9:b9:75:4e:85:17:
71:90:30:8d:a1:72:c2:09:88:b9:90:f8:d0:29:41:69:56:03:
5a:c4:9e:db:a3:c0:a8:fe:de:ee:7e:77:b4:a0:5c:78:ef:85:
08:1e:86:14:ac:28:c7:00:f7:6b:99:13:f0:2c:56:56:41:d0:
26:8c:3d:1f:6b:50:e2:d0:bd:59:46:72:9e:19:4e:2c:ce:d2:
82:d4:98:b0:ab:48:48:44:20:76:72:23:90:7e:7b:96:99:38:
8d:e6:3d:46:5a:52:bd:2a:a4:90:cb:fd:07:8e:16:ad:5c:76:
88:b0:b1:fe:0a:08:21:f1:54:3c:9b:64:b9:de:43:80:45:72:
b3:c9:7c:f7:3d:65:8c:d6:79:cf:b4:20:da:5c:4c:95:f9:11:
fd:56:30:42:62:c7:c4:bc:ff:4c:4f:fa:bd:dd:1b:10:c5:b5:
ec:d5:97:a9:26:f0:c9:a7:18:c7:25:74:14:a9:4e:f0:1a:a6:
ff:c9:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:59:09 2026 by rpki-client