Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: 859YMonfcDPOV2vU5+yVrFDt4DXCEU8dupjdD3OUmVA=
Subject key identifier: 8B:E6:4A:08:50:CA:F1:9B:37:02:7C:91:88:4F:42:16:8C:67:32:EE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5AD44E6DC6035553740E0AC5B101543689D8F38D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
Signing time: Wed 29 Jul 2026 15:58:22 +0000
ROA not before: Wed 29 Jul 2026 15:53:22 +0000
ROA not after: Wed 28 Jul 2027 15:58:22 +0000
asID: 54252
IP address blocks: 92.112.141.0/24 maxlen: 24
95.135.12.0/24 maxlen: 24
95.135.19.0/24 maxlen: 24
95.135.25.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.158.0/24 maxlen: 24
178.92.195.0/24 maxlen: 24
178.92.219.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.94.162.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d4:4e:6d:c6:03:55:53:74:0e:0a:c5:b1:01:54:36:89:d8:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 29 15:53:22 2026 GMT
Not After : Jul 28 15:58:22 2027 GMT
Subject: CN=8BE64A0850CAF19B37027C91884F42168C6732EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:bb:0e:7c:06:b1:2e:76:69:92:c4:05:c4:
5e:42:8a:2b:a9:13:30:4a:71:91:08:dc:e8:23:34:
ba:4f:58:49:6b:4b:3d:d9:42:76:7a:7c:90:fc:8f:
77:74:c6:a8:64:b5:6a:50:1f:a6:6d:a4:de:c9:70:
76:52:1e:37:86:8b:11:b9:b1:9d:8b:fe:82:9b:1f:
f6:33:b2:e0:cb:ed:12:ef:e1:3f:98:6c:d0:9a:14:
cc:1f:39:ab:4a:51:47:93:76:9f:cb:73:8e:d1:f6:
1d:43:30:93:b9:2a:d1:33:69:55:e3:37:a2:f2:1f:
d5:f4:c6:79:a5:c0:57:f3:ae:b4:77:e0:78:5e:34:
91:f6:9e:b3:7e:09:bc:21:80:03:18:49:62:8e:8e:
2c:a6:0e:5e:bc:1c:11:d1:cb:60:c5:67:25:7c:78:
22:a4:ba:ca:5e:3d:9c:01:85:bd:33:01:92:41:1f:
9e:70:c8:78:9e:1b:10:03:1b:0d:23:5c:bd:90:6b:
f5:80:97:30:75:f1:93:a0:2f:56:e2:fc:93:cb:1a:
b8:ee:73:48:a5:fd:d1:98:16:c4:7a:3b:d1:6b:59:
4e:ab:27:d5:93:b3:bf:d3:d0:7e:80:de:ff:f1:c0:
50:03:bd:c6:1f:3a:16:a8:5c:20:4b:3c:2c:0b:e6:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:4A:08:50:CA:F1:9B:37:02:7C:91:88:4F:42:16:8C:67:32:EE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.141.0/24
95.135.12.0/24
95.135.19.0/24
95.135.25.0/24
95.135.183.0/24
178.92.158.0/24
178.92.195.0/24
178.92.219.0/24
178.92.246.0/24
178.93.30.0/24
178.94.162.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
73:78:d5:e3:79:7e:eb:8d:ae:c7:64:99:8e:65:20:42:ca:51:
94:03:50:9e:c2:92:1a:f5:e3:2f:ab:57:08:9b:10:d1:32:dd:
8f:7c:5a:e8:93:9c:18:99:26:8a:87:bd:5d:0a:2c:f5:dd:21:
d6:d3:e1:3a:d9:5d:37:f6:fb:87:7f:cb:53:19:c2:96:bf:3e:
36:37:e7:eb:80:9b:5b:80:67:aa:3f:44:2a:1a:70:7b:1e:d9:
40:e2:07:b1:32:9d:0a:b0:39:e7:94:54:d1:27:7c:95:51:63:
57:24:e7:4b:1e:32:7e:f6:ca:aa:97:cf:1e:15:8e:d0:53:0f:
1c:a3:a2:bf:28:f6:d9:68:e8:b6:c1:32:91:a2:3f:0b:6a:72:
cf:2d:84:93:ab:11:f9:d0:ff:65:b1:9a:44:92:82:2e:db:2f:
b5:98:fc:65:23:5b:f9:9c:8a:e9:4a:b1:af:a2:ee:02:9d:09:
b7:1d:59:86:2c:de:4b:5a:b6:72:3e:21:d0:7a:d2:c3:87:d5:
37:b6:a0:85:c9:6f:d4:06:85:26:fe:b2:52:38:08:b6:28:bd:
d6:e0:d2:a2:53:60:bc:d0:f9:ee:8d:e0:4c:1a:13:21:f6:de:
46:34:c7:67:de:70:7f:80:e9:2d:b9:9f:46:f1:33:35:30:38:
64:bb:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:25:43 2026 by rpki-client