Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: ujXC/lZlcKEtiBDKrWFxblIL3uc2Uxjn1V08ES/93kQ=
Subject key identifier: C4:44:36:09:C2:6A:38:2C:F9:83:D5:0F:F7:5E:B4:BB:D4:55:00:90
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7F3DCEE267F65A546B0163BAAEE00AB0FDA33AC5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
Signing time: Tue 21 Jul 2026 14:10:05 +0000
ROA not before: Tue 21 Jul 2026 14:05:05 +0000
ROA not after: Tue 20 Jul 2027 14:10:05 +0000
asID: 54252
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
150.241.251.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3d:ce:e2:67:f6:5a:54:6b:01:63:ba:ae:e0:0a:b0:fd:a3:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 14:05:05 2026 GMT
Not After : Jul 20 14:10:05 2027 GMT
Subject: CN=C4443609C26A382CF983D50FF75EB4BBD4550090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:74:f0:4f:0b:4c:ad:d5:b5:65:e3:08:6f:
dc:c5:dc:1e:69:f3:5b:cc:a1:90:3b:d7:7a:97:00:
b9:92:93:4e:bd:ec:fb:cb:ee:d9:eb:be:54:7a:a0:
d4:0c:5e:c1:00:66:12:02:90:57:43:65:f8:b0:c6:
2a:c5:03:5f:91:d4:5d:96:98:76:18:1e:bd:c5:d3:
71:ae:19:e2:bc:5e:5b:c0:b7:46:25:f3:e1:6e:ff:
8a:e2:9c:b9:85:67:5e:d2:5f:bb:ba:9a:a0:b2:fb:
ca:de:8a:19:65:e6:22:7b:6b:a6:4c:57:14:70:3f:
e0:2e:e1:5d:5b:d8:48:a7:ba:73:b3:25:9c:e0:6a:
b5:78:86:0e:c2:b7:dc:a1:54:16:13:8b:48:0c:e8:
42:87:8d:e2:1a:31:40:a7:ee:d5:67:16:33:76:bb:
55:52:bb:81:77:f3:92:8b:44:a2:d7:c6:83:2c:a8:
fd:97:f0:11:5a:08:2b:68:00:76:d2:bd:7b:29:37:
2d:20:65:20:5d:30:ba:3e:16:e2:13:a5:45:53:56:
e9:a2:4b:5d:5f:1c:4e:45:2f:76:e7:9a:37:7f:89:
04:cd:48:1c:15:ec:75:4d:ba:e9:33:31:2a:1a:d6:
98:5c:f1:8d:a0:30:84:42:f3:48:ad:e3:57:d6:88:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:36:09:C2:6A:38:2C:F9:83:D5:0F:F7:5E:B4:BB:D4:55:00:90
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.174.0/24
150.241.234.0/24
150.241.251.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:75:95:23:56:bf:c3:9e:28:8b:2d:a1:09:a8:e6:d5:54:
fd:05:55:38:d0:d3:30:de:aa:34:15:45:8f:5f:a2:fc:94:ab:
4d:ed:de:2f:12:fc:ba:4a:5e:9f:04:2a:bb:8b:50:51:c2:da:
9b:33:d1:ec:aa:64:a6:38:09:0f:16:f4:01:2f:fe:70:a5:25:
e4:28:18:fa:1c:c6:82:d3:f9:6d:fc:9e:20:c3:dc:54:be:95:
c4:58:f3:41:64:ff:f6:6f:d3:82:1e:0f:40:44:a8:e8:8b:13:
fe:15:84:d1:50:78:ec:54:23:1c:ee:e4:ca:71:ee:de:30:21:
b8:1f:3d:a7:62:e6:f9:ba:a7:1f:46:f7:a1:f4:5c:60:26:38:
03:53:63:1b:95:70:bb:06:1e:4c:82:c8:69:43:1e:92:23:c3:
6c:6b:2c:b7:4f:cb:d3:af:c2:67:a6:90:b5:d4:a3:21:03:43:
9e:12:e7:8c:b8:20:d9:fa:ff:12:fd:aa:da:32:03:60:c2:20:
8f:cd:fb:d9:8d:56:47:54:0d:3d:67:31:5d:79:9f:ca:5f:0e:
8d:d9:37:ab:98:21:d6:13:9d:e6:a8:2a:fb:ba:92:ac:24:84:
f6:a4:cc:06:a4:06:b3:20:a4:ea:a8:66:02:ac:5d:49:2f:9b:
09:1c:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:36 2026 by rpki-client