Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54004.roa
File: AS54004.roa (raw, json)
Hash identifier: 1AX7PJy2gl0nPvqxBEvGBdr0sfpydrEKO0qqMUGyv8w=
Subject key identifier: 37:00:7C:37:B4:4B:17:FF:C6:25:56:2C:65:A8:0C:5F:F3:0E:91:7A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 74DB626D0AA8DBC4E158855F98D27382F32554C2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54004.roa
Signing time: Fri 18 Sep 2026 13:26:20 +0000
ROA not before: Fri 18 Sep 2026 13:21:20 +0000
ROA not after: Fri 17 Sep 2027 13:26:20 +0000
asID: 54004
IP address blocks: 90.96.0.0/22 maxlen: 24
90.96.12.0/22 maxlen: 24
90.96.32.0/22 maxlen: 24
90.96.36.0/22 maxlen: 24
90.96.40.0/22 maxlen: 24
90.96.128.0/22 maxlen: 24
90.96.136.0/22 maxlen: 24
90.96.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:db:62:6d:0a:a8:db:c4:e1:58:85:5f:98:d2:73:82:f3:25:54:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 18 13:21:20 2026 GMT
Not After : Sep 17 13:26:20 2027 GMT
Subject: CN=37007C37B44B17FFC625562C65A80C5FF30E917A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:51:d1:2b:b9:97:4f:67:2c:5b:ba:11:e4:
92:0a:1c:42:41:b6:86:1b:32:23:cf:78:8d:86:33:
54:8f:72:32:07:f5:33:ce:e4:c1:bd:35:96:26:c8:
99:11:0d:12:1a:74:41:eb:c0:77:72:ed:94:2d:93:
ea:3f:08:e5:33:a0:bd:bb:6d:59:20:c7:02:d1:36:
55:2a:f7:65:5c:bb:2d:f1:b6:b6:40:f1:93:10:83:
c2:97:d5:c4:1e:09:a1:78:5d:5c:7c:3a:2c:89:11:
47:05:a1:d9:31:60:cb:66:87:c7:4c:4a:9d:03:2f:
93:de:1d:22:fd:2a:60:ea:95:d1:8f:2d:82:bd:de:
84:67:83:ca:d8:9b:77:aa:86:a8:ee:8a:60:f4:b7:
06:38:eb:1e:b1:81:59:0b:8b:d9:bb:93:98:a8:da:
e4:1b:c7:0a:8b:8c:28:e0:24:94:09:9e:8e:75:f2:
b1:41:d7:01:4e:94:c3:b6:fd:60:20:57:b6:2f:57:
01:fb:12:76:8b:7f:b8:34:c6:99:21:70:dc:61:a1:
18:83:54:ff:b1:73:b9:5d:33:2e:e7:79:70:a7:39:
71:ff:92:69:21:07:06:1e:9c:82:e4:af:26:73:56:
33:a9:35:97:44:cf:90:9a:90:76:d5:c1:97:a2:84:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:7C:37:B4:4B:17:FF:C6:25:56:2C:65:A8:0C:5F:F3:0E:91:7A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS54004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.0.0/22
90.96.12.0/22
90.96.32.0-90.96.43.255
90.96.128.0/22
90.96.136.0/22
90.96.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d9:5a:79:36:8e:b9:29:33:ab:4f:e6:14:9c:b3:cc:a3:9e:
5c:33:6f:7c:4a:05:93:f0:a5:a5:f6:e7:5c:99:5f:51:53:2a:
ac:0b:09:b2:bf:14:ff:fc:1d:a5:14:29:05:4c:00:d5:6c:55:
b5:a7:85:ec:47:0b:9b:24:40:a9:f0:bf:9d:96:dc:55:75:4d:
fb:57:1b:59:20:2a:25:27:a3:c3:33:0d:90:a6:54:f4:25:2f:
91:ed:7e:d1:a3:48:09:89:9f:2a:e9:a5:a0:bd:80:84:1f:29:
02:a5:38:c0:a2:aa:11:ac:e6:0d:ba:69:17:38:a9:29:b8:72:
29:6c:7e:c1:46:28:29:81:1c:30:18:df:3b:dc:81:45:02:16:
21:15:83:54:2e:e6:92:8f:1e:64:17:a4:cc:98:a1:dc:ed:ac:
d9:9f:81:69:74:b3:6e:a1:c8:06:c6:dc:60:a8:ac:7a:6d:fa:
b3:d3:39:89:39:50:1f:e8:b0:67:fe:d8:f5:dd:fc:2e:5e:fd:
48:fa:a6:b9:ca:6c:64:d7:2c:fd:76:4c:16:87:c3:cc:d6:64:
21:39:f7:27:8d:ac:d9:58:fa:8c:4a:2d:87:e8:d4:f3:8d:54:
b1:35:55:de:e7:16:23:fe:fe:13:02:50:4e:ca:41:05:2d:c3:
14:76:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:37 2026 by rpki-client