Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: gLQM48Jk7GmWzzWJ5KT6xBo9uu7jrmIIENrNW5upUxc=
Subject key identifier: FB:0B:18:21:55:ED:B1:B8:89:1C:C3:A0:93:ED:26:AE:81:D5:A5:AA
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 653FEA56AAB84923F9B2873E8490C430475803B0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
Signing time: Mon 26 Oct 2026 08:49:38 +0000
ROA not before: Mon 26 Oct 2026 08:44:38 +0000
ROA not after: Mon 25 Oct 2027 08:49:38 +0000
asID: 54252
IP address blocks: 147.78.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3f:ea:56:aa:b8:49:23:f9:b2:87:3e:84:90:c4:30:47:58:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 26 08:44:38 2026 GMT
Not After : Oct 25 08:49:38 2027 GMT
Subject: CN=FB0B182155EDB1B8891CC3A093ED26AE81D5A5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:9b:12:99:cc:ae:68:7d:5a:95:7c:23:1a:
a1:62:51:0e:7c:7e:3c:9a:38:4e:30:c4:99:28:0d:
d9:86:cb:31:02:36:2f:ce:83:ad:51:11:e6:bc:1b:
c9:d8:af:5f:db:65:b0:b5:e9:80:3a:f0:e5:d4:fa:
06:ec:74:49:b3:6e:30:9d:4d:13:d0:96:a8:e2:c3:
34:05:2f:14:9e:81:fc:4a:5b:30:24:f1:04:e6:18:
bb:7f:17:de:79:69:f5:f9:25:03:2c:b4:27:c2:f2:
4f:a5:be:dc:2f:a8:b2:d7:c5:de:86:53:e1:c9:56:
51:c8:e9:15:08:9f:f6:50:4b:4c:54:76:a9:52:9b:
09:ef:9c:a6:b3:a2:bb:4d:9f:36:de:79:b6:16:e3:
86:d7:16:1f:65:e3:09:f3:d4:4a:a7:86:f1:72:70:
b1:b2:aa:16:bd:b8:e0:ad:93:6d:00:05:69:fe:ae:
ce:4c:a5:c2:2f:26:27:6e:64:f2:03:66:a7:44:c5:
67:47:0c:99:03:7f:39:d5:ee:58:e0:01:73:6b:77:
95:8d:00:b4:2e:54:1f:77:7e:07:72:77:c5:29:52:
7b:01:9b:a4:82:4b:46:99:85:c0:4c:5e:b1:a9:49:
0f:88:24:68:54:f6:8a:04:e0:d7:e6:0e:8f:b6:9f:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:18:21:55:ED:B1:B8:89:1C:C3:A0:93:ED:26:AE:81:D5:A5:AA
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:44:f5:bd:b9:44:c9:9b:12:84:43:73:03:10:e4:aa:23:79:
10:0d:4a:7b:95:f5:26:5d:67:83:56:ba:3d:b2:e9:8b:7f:58:
2b:e9:23:0b:4b:d4:e6:cc:b5:a2:16:48:69:f8:26:c7:5e:dc:
91:ad:7a:e8:55:47:1c:9b:ed:80:c7:3e:43:f7:dd:02:18:02:
52:36:5f:35:47:93:92:67:52:ce:a5:3f:ee:1a:f2:b4:22:fb:
ea:91:c2:67:80:9f:df:d4:ab:25:5c:57:c7:35:d8:87:36:08:
4a:8f:04:29:d5:16:35:e3:28:9c:79:18:29:44:81:b6:a9:2a:
6b:fe:c3:2e:9c:99:9e:d5:76:93:dd:0f:2f:3c:c7:51:d3:47:
0e:09:95:11:d6:0a:2a:c3:3e:4b:a3:77:7b:57:a9:05:fb:0a:
2a:8f:9b:d6:ce:66:5c:fd:6d:d5:71:a9:b9:47:e3:1b:1c:06:
ec:dd:0d:f3:12:7a:28:62:cb:dd:4a:10:8b:2b:18:64:cd:08:
10:28:1b:8a:d2:b1:03:96:ce:54:7c:0d:16:69:1b:f4:fc:09:
43:da:20:dc:4d:2e:55:d4:1a:fc:0f:57:20:45:60:22:d0:ae:
94:76:57:9c:f2:18:68:38:ae:8b:95:ee:a9:1e:00:8e:45:01:
8d:f5:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:23:53 2026 by rpki-client