Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: ijK0H0Dq3cjJlZB2UcHDPZAniXyS/ioDbWbyLb8esWQ=
Subject key identifier: 1A:07:D8:E4:93:68:08:FB:C7:19:D9:5A:62:3D:D8:FF:B1:81:11:25
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 36EF9F70BA391E9CD0EE2B8B8CEA373671F59D2D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
Signing time: Mon 15 Jun 2026 00:05:45 +0000
ROA not before: Mon 15 Jun 2026 00:00:45 +0000
ROA not after: Mon 14 Jun 2027 00:05:45 +0000
asID: 54252
IP address blocks: 92.112.141.0/24 maxlen: 24
95.135.12.0/24 maxlen: 24
95.135.19.0/24 maxlen: 24
95.135.25.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.158.0/24 maxlen: 24
178.92.195.0/24 maxlen: 24
178.92.219.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ef:9f:70:ba:39:1e:9c:d0:ee:2b:8b:8c:ea:37:36:71:f5:9d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 15 00:00:45 2026 GMT
Not After : Jun 14 00:05:45 2027 GMT
Subject: CN=1A07D8E4936808FBC719D95A623DD8FFB1811125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:26:5d:ba:1d:87:25:a2:2d:36:64:1d:6b:
3f:47:1f:b2:1b:ba:11:c3:94:0b:ae:5a:43:34:d6:
d9:37:9f:23:ef:3a:83:d3:1b:e6:85:df:66:f1:6f:
7c:25:9e:98:85:a0:1a:e6:f5:b6:09:05:e3:72:e9:
e1:ef:ef:ba:df:1d:98:8a:da:bd:69:97:94:5d:b0:
ab:1b:49:96:51:e0:fb:d6:4d:1d:55:2e:78:63:c8:
51:f1:ea:90:59:18:fe:39:de:78:7b:93:e2:fd:2a:
c0:03:e8:9f:dc:1a:61:32:dd:84:dd:96:21:fa:35:
14:9d:2b:9e:ea:4a:a3:e9:a9:24:ca:1b:42:de:0c:
d8:41:6b:9e:d5:93:3b:d0:56:ce:5f:84:25:18:06:
c7:dd:6e:93:c4:33:64:eb:2d:8b:f2:2f:c5:fb:96:
3a:74:db:ae:ee:9e:50:5b:89:37:b3:9f:26:c5:36:
a6:d5:2c:f5:cb:b4:50:7b:70:cf:19:4c:b8:e9:4e:
b4:b4:39:60:8e:4a:9d:28:f0:95:3f:84:b6:bb:ff:
f7:fd:4e:90:fe:a5:2a:bc:d1:7d:11:5a:75:67:88:
66:10:c6:e1:e0:5e:22:30:1b:50:5c:cd:00:72:09:
0e:25:60:1c:ac:a2:cf:d3:90:b8:00:74:18:e1:63:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:07:D8:E4:93:68:08:FB:C7:19:D9:5A:62:3D:D8:FF:B1:81:11:25
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.141.0/24
95.135.12.0/24
95.135.19.0/24
95.135.25.0/24
95.135.183.0/24
178.92.158.0/24
178.92.195.0/24
178.92.219.0/24
178.92.246.0/24
178.93.30.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:8c:dd:a0:12:89:6f:44:14:1b:1c:b9:03:2f:d9:f3:ef:
f0:69:e0:10:2f:57:9a:46:d2:97:f7:be:fc:52:3b:fb:29:a9:
84:74:48:0e:3c:55:9f:0a:9e:7b:f8:42:1f:ac:4a:b3:4d:23:
9f:05:16:f9:a8:ec:64:d7:c8:e3:d2:69:94:52:7d:1e:a7:e9:
67:5f:b2:43:93:67:f8:80:14:9b:09:1c:e8:0d:98:6e:c7:b1:
f6:28:2f:22:2a:7e:e3:82:0f:c3:19:47:f2:ab:a3:c7:67:b5:
c8:76:08:52:1b:54:02:18:32:d8:da:57:33:7f:c0:4c:db:98:
14:8c:f4:89:e8:5c:81:5d:9e:c9:92:fb:41:b9:49:87:cb:b6:
bd:80:77:e5:04:4e:40:30:20:2b:c9:d2:c1:16:66:07:6f:6b:
89:98:0b:d7:ab:d1:c9:9c:31:e4:7b:78:e0:d9:2b:64:cf:db:
47:a3:f9:67:92:17:d6:af:a3:f8:4d:a0:ba:45:26:03:b4:40:
e5:49:b7:6d:56:7c:72:8c:97:e8:0e:bb:e4:dc:a2:55:a7:84:
f2:9c:4e:34:46:f4:e8:43:91:81:f9:ff:bd:fb:55:19:49:f6:
67:e3:7d:1f:e6:fa:eb:66:49:c8:e3:0d:4f:3a:9d:7c:8f:37:
40:39:08:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 06:45:02 2026 by rpki-client