Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: 2xqf1TpPamCwQpfDz3LN5y+pEmLfa8XDLambwj2pqjk=
Subject key identifier: 7C:0B:20:4E:41:5B:BF:F6:C1:D2:70:A9:B3:0E:A3:13:A5:93:F7:5A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 74EA00135ACDACFFD943521309E084DFC0EDADF6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
Signing time: Fri 10 Oct 2025 12:27:00 +0000
ROA not before: Fri 10 Oct 2025 12:22:00 +0000
ROA not after: Fri 09 Oct 2026 12:27:00 +0000
asID: 54252
IP address blocks: 91.124.36.0/24 maxlen: 24
92.112.141.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.94.149.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ea:00:13:5a:cd:ac:ff:d9:43:52:13:09:e0:84:df:c0:ed:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 10 12:22:00 2025 GMT
Not After : Oct 9 12:27:00 2026 GMT
Subject: CN=7C0B204E415BBFF6C1D270A9B30EA313A593F75A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:f6:2f:43:53:71:a4:d1:eb:9c:d3:fd:57:
95:a4:7d:7d:50:8c:82:b0:26:65:40:8b:c5:f3:d8:
90:9f:ce:62:02:23:ff:41:d0:d2:7a:b4:4f:c9:fb:
df:61:bc:29:3d:b6:5a:bf:5f:d2:e1:e0:34:f1:ff:
f2:39:23:e9:32:f9:81:52:6b:b2:8c:89:ff:2a:0d:
22:09:77:2d:84:87:67:28:b3:c3:d6:9a:4c:7a:3a:
0e:35:64:a0:6c:3a:5a:e9:7c:4f:94:b0:b4:b2:79:
1b:0b:c4:1b:72:a2:77:bc:3d:ac:0a:88:9d:2c:7b:
e8:6e:94:83:41:4f:c9:1a:cd:d7:b4:7e:9a:7a:12:
2a:25:bb:fe:ff:e5:4a:83:f1:10:68:19:47:65:6f:
c5:6d:72:f5:bc:2d:cc:b5:74:4a:98:41:ca:35:37:
15:5c:1c:72:08:e3:37:8e:1e:0a:89:f9:ee:ba:8f:
f9:56:1a:4a:6a:d1:f5:1f:6e:40:64:a5:5d:71:c5:
22:c2:57:c6:d9:21:c7:72:66:7e:42:a1:f1:cc:d2:
36:0a:7e:74:31:7a:77:b0:13:f7:b3:54:10:97:c0:
51:af:bf:77:e8:50:91:fd:63:6e:22:ea:d4:82:c4:
d5:08:10:39:81:06:cd:73:f1:e7:56:94:9d:50:79:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:20:4E:41:5B:BF:F6:C1:D2:70:A9:B3:0E:A3:13:A5:93:F7:5A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.36.0/24
92.112.141.0/24
95.135.183.0/24
178.92.246.0/24
178.93.30.0/24
178.94.149.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
77:93:10:27:0a:de:44:50:cc:75:3e:39:32:db:b3:05:23:17:
ad:b6:4c:cd:b5:cc:03:f0:29:1b:3c:66:e7:02:14:c5:99:fe:
96:31:8e:f6:b9:d3:dd:a2:a8:2d:5b:d8:be:67:c6:c9:42:42:
09:f1:52:77:0a:8a:47:34:e0:2e:4b:bd:cf:f6:a2:16:79:04:
d4:00:ab:83:fc:e0:ca:42:1c:6d:7c:2f:7a:ec:19:3f:e8:b6:
e8:bf:70:93:0d:7f:51:19:39:d1:60:24:49:72:4f:47:d1:bc:
d3:1f:f1:8c:6a:93:7c:5b:b6:ad:56:4a:d5:34:64:3a:45:f8:
e7:00:02:0b:c3:da:99:77:b7:c4:3c:54:5b:0b:b6:4b:bd:45:
e9:1a:62:9d:80:6c:7b:38:29:68:fc:7a:b0:7a:f7:d8:80:0e:
f1:f1:8d:04:c6:a2:de:82:23:ab:fd:32:d6:01:8b:7e:7c:e5:
99:bd:98:da:c2:49:24:42:98:4e:cc:fc:bd:4d:3c:a3:91:06:
1f:1c:fb:e3:56:0a:d7:e4:0c:4f:1a:58:18:d5:0e:4a:9c:06:
74:6a:8a:0f:12:07:78:07:65:23:fb:4c:fb:4e:10:fe:fb:0e:
ca:eb:af:eb:bf:dc:34:08:ae:9e:9a:ec:a3:b4:4f:15:35:69:
78:11:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:27:50 2025 by rpki-client