Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: J+vRpbKCBrJeu4RD8NjUoSOudfax5BQ6OlZ+UgYA6cM=
Subject key identifier: 32:54:28:E2:CF:CF:75:1D:E6:55:4C:28:BD:91:ED:30:73:D5:3C:AA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0435062F910F9D97E4639488ECEBA406DB23016C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54252.roa
Signing time: Fri 11 Sep 2026 12:49:34 +0000
ROA not before: Fri 11 Sep 2026 12:44:34 +0000
ROA not after: Fri 10 Sep 2027 12:49:34 +0000
asID: 54252
IP address blocks: 141.11.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:35:06:2f:91:0f:9d:97:e4:63:94:88:ec:eb:a4:06:db:23:01:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 11 12:44:34 2026 GMT
Not After : Sep 10 12:49:34 2027 GMT
Subject: CN=325428E2CFCF751DE6554C28BD91ED3073D53CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:32:0e:77:f5:f4:f3:99:91:b8:52:70:e4:
09:3a:a4:66:fc:e0:6e:bc:c6:70:d3:59:54:21:2d:
ad:6c:10:ad:0e:c5:64:27:34:36:df:72:74:0e:de:
40:c0:50:5b:cd:0c:31:c3:27:a6:86:0d:e8:63:70:
83:0b:98:67:c1:1d:ac:22:71:c5:a4:5f:61:28:65:
bf:8c:49:ec:bc:e1:5e:da:b3:1e:20:a1:9d:13:bd:
2c:ba:8e:2d:fb:a8:1d:18:d5:dc:e8:3e:ee:2c:1f:
c5:07:05:36:31:23:95:e0:72:99:48:ac:b9:45:ee:
da:3e:9e:de:40:26:aa:89:e1:55:8c:96:7d:59:39:
9c:a6:19:d0:2c:e0:db:7c:83:e8:72:96:14:44:f7:
3d:35:f6:99:5e:c1:b7:98:8c:9d:0b:18:4a:4e:97:
86:c9:d7:91:c8:e9:8c:5e:01:11:ad:7e:87:b1:c7:
53:3d:83:d7:1a:33:83:41:e3:4f:99:dc:c9:81:25:
97:fd:6a:fe:26:ec:6b:9b:6a:03:e6:e7:be:66:7b:
5d:c7:35:46:46:4c:8a:e2:db:84:56:ec:09:24:1f:
39:b3:26:80:f5:3e:a9:d2:86:26:35:c9:71:d0:99:
c7:6b:e5:a2:29:38:9b:e4:9e:ec:d1:30:c6:f3:8b:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:28:E2:CF:CF:75:1D:E6:55:4C:28:BD:91:ED:30:73:D5:3C:AA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:af:46:e2:4e:2b:05:2b:91:cd:27:32:a4:0d:68:cd:37:72:
bb:98:8a:ab:9f:33:22:72:4e:b9:ce:6a:81:c4:2b:ff:e7:65:
a9:dc:70:89:fd:a5:08:e5:d2:09:2a:e3:27:a3:4b:3b:1f:65:
44:f6:44:8c:5a:a3:1a:a1:d5:6b:e3:64:dc:bf:8f:0f:be:4f:
7a:db:a8:14:70:1f:56:70:c8:d3:a0:1c:3d:53:e2:73:de:82:
46:58:14:5f:16:88:57:9e:06:9c:b8:a2:e9:3d:61:03:d8:0e:
9c:63:eb:bd:75:07:d7:2f:19:9d:97:28:62:b1:63:73:c5:ed:
39:e8:aa:23:b6:a0:7e:ff:20:1c:fd:18:3e:d2:26:cb:33:8c:
78:4e:d9:f4:84:c7:72:00:fa:bb:2b:0e:db:53:55:0d:2f:8a:
07:cc:b2:d2:f7:b7:92:ba:a1:31:a5:2b:be:6c:dd:c5:3e:05:
a2:78:3b:8f:a3:ab:a4:e8:2e:a4:f3:3f:db:82:1c:8b:b5:51:
03:39:ea:7f:9d:0a:47:6d:ca:14:8b:8c:da:cc:2d:cc:b4:e2:
35:7d:7a:79:21:9b:a7:d6:84:92:66:a6:f4:3e:44:df:5b:2e:
47:25:f6:50:0b:6d:dc:bb:66:44:30:45:cf:01:c7:f5:f1:b9:
f1:80:3e:ca
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUBDUGL5EPnZfkY5SI7OukBtsjAWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA5MTExMjQ0MzRaFw0yNzA5MTAxMjQ5MzRaMDMxMTAvBgNV
BAMTKDMyNTQyOEUyQ0ZDRjc1MURFNjU1NEMyOEJEOTFFRDMwNzNENTNDQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbwjIOd/X085mRuFJw5Ak6pGb8
4G68xnDTWVQhLa1sEK0OxWQnNDbfcnQO3kDAUFvNDDHDJ6aGDehjcIMLmGfBHawi
ccWkX2EoZb+MSey84V7asx4goZ0TvSy6ji37qB0Y1dzoPu4sH8UHBTYxI5XgcplI
rLlF7to+nt5AJqqJ4VWMln1ZOZymGdAs4Nt8g+hylhRE9z019plewbeYjJ0LGEpO
l4bJ15HI6YxeARGtfoexx1M9g9caM4NB40+Z3MmBJZf9av4m7GubagPm575me13H
NUZGTIri24RW7AkkHzmzJoD1PqnShiY1yXHQmcdr5aIpOJvknuzRMMbzixBdAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUMlQo4s/PdR3mVUwovZHtMHPVPKowHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTQyNTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC+Yw
DQYJKoZIhvcNAQELBQADggEBAF2vRuJOKwUrkc0nMqQNaM03cruYiqufMyJyTrnO
aoHEK//nZanccIn9pQjl0gkq4yejSzsfZUT2RIxaoxqh1WvjZNy/jw++T3rbqBRw
H1ZwyNOgHD1T4nPegkZYFF8WiFeeBpy4ouk9YQPYDpxj6711B9cvGZ2XKGKxY3PF
7TnoqiO2oH7/IBz9GD7SJsszjHhO2fSEx3IA+rsrDttTVQ0vigfMstL3t5K6oTGl
K75s3cU+BaJ4O4+jq6ToLqTzP9uCHIu1UQM56n+dCkdtyhSLjNrMLcy04jV9enkh
m6fWhJJmpvQ+RN9bLkcl9lALbdy7ZkQwRc8Bx/XxufGAPso=
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:17:41 2026 by rpki-client