Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52053.roa
File: AS52053.roa (raw, json)
Hash identifier: scxUjIL8+kX97RJsvzsmdYQ+gYc/DGvrauyqu+Bv4MM=
Subject key identifier: 9A:06:6F:4C:0C:E6:A3:F3:38:E7:0E:4C:5C:3C:3C:3B:87:B9:27:74
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5B208BD9BB98C5049CB5F01380F8B78EE14E0935
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52053.roa
Signing time: Wed 17 Sep 2025 04:55:07 +0000
ROA not before: Wed 17 Sep 2025 04:50:07 +0000
ROA not after: Wed 16 Sep 2026 04:55:07 +0000
asID: 52053
IP address blocks: 179.61.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:20:8b:d9:bb:98:c5:04:9c:b5:f0:13:80:f8:b7:8e:e1:4e:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 17 04:50:07 2025 GMT
Not After : Sep 16 04:55:07 2026 GMT
Subject: CN=9A066F4C0CE6A3F338E70E4C5C3C3C3B87B92774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:b5:10:bc:9a:af:47:81:27:93:f5:07:ba:
b2:34:c3:70:84:90:87:25:cd:ce:b6:da:61:f7:d2:
2e:5b:64:fd:46:bd:9a:66:6b:7d:4b:ba:ed:f1:77:
3d:eb:77:22:e9:95:65:e5:9b:26:16:45:41:09:1e:
fb:53:29:ba:30:fe:4f:0c:3b:15:2b:38:a9:3e:7a:
07:8f:98:ac:f2:5e:09:b9:75:0e:75:6b:c1:38:26:
af:1d:35:d6:50:0e:2c:c9:c3:4b:dc:89:d0:59:d6:
e9:81:89:6f:3c:c8:0d:2d:e0:96:cb:cb:6d:cc:80:
70:f9:00:67:1e:0b:f0:2b:f7:ae:3d:64:91:cf:3c:
d2:4a:c3:29:73:a0:ce:f8:80:f8:30:0c:99:26:e2:
97:ac:59:e7:63:08:db:d2:b3:66:40:4f:41:19:3f:
63:c3:52:ff:01:15:9b:6e:30:71:f4:0c:4f:84:5c:
2e:02:51:ac:d2:ef:72:51:82:07:0f:07:44:19:9c:
ab:11:48:5a:8d:7d:fd:1e:02:a2:3e:08:db:02:1d:
e4:27:c6:a7:53:78:6c:fb:57:39:b5:a0:ef:d7:b6:
e7:91:3e:f0:23:bf:26:82:17:1e:05:72:96:77:db:
d5:be:ff:d3:42:56:1d:ed:cb:bd:72:3d:c0:1c:40:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:06:6F:4C:0C:E6:A3:F3:38:E7:0E:4C:5C:3C:3C:3B:87:B9:27:74
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:58:b3:a4:36:e6:f1:89:af:d7:9a:57:52:29:9f:73:0d:e0:
2f:37:01:e0:2c:79:d4:81:86:22:b7:81:23:af:d9:4a:90:12:
2b:32:24:97:1f:f3:a3:9e:98:65:b7:fe:e9:e3:90:3b:79:a5:
64:20:27:1c:f8:3a:fc:6a:70:97:8e:0a:8d:fa:f6:1e:22:2c:
5b:cb:74:da:85:99:f9:dc:76:89:55:e7:22:5d:46:f6:45:d4:
50:2c:31:8c:86:4a:5c:ec:07:3d:97:75:26:63:7a:98:15:48:
8a:10:ad:d1:02:cd:66:ce:82:fb:e1:43:9f:2c:45:13:2e:b9:
37:ae:50:26:d5:00:46:13:cd:2e:e4:6b:23:f9:20:81:40:a0:
c5:d3:b3:b5:77:2b:45:bb:4b:9c:5d:c6:4c:da:43:e4:1b:ee:
43:11:72:7c:d7:2d:3b:c5:81:2e:95:69:73:d1:87:53:5e:e8:
7b:4e:f9:09:68:1e:8c:47:7f:c1:67:48:10:42:7f:47:e9:36:
eb:cf:0d:c9:18:9f:ae:02:f6:70:2c:ff:f1:c9:de:38:59:1c:
fc:47:e3:46:4b:75:92:23:17:30:0a:53:6a:79:0f:c8:91:00:
1e:46:a2:e6:5c:64:d3:1d:9b:28:32:24:0c:ab:0c:97:7f:f5:
03:68:3e:42
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUWyCL2buYxQSctfATgPi3juFOCTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA5MTcwNDUwMDdaFw0yNjA5MTYwNDU1MDdaMDMxMTAvBgNV
BAMTKDlBMDY2RjRDMENFNkEzRjMzOEU3MEU0QzVDM0MzQzNCODdCOTI3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrR7UQvJqvR4Enk/UHurI0w3CE
kIclzc622mH30i5bZP1GvZpma31Luu3xdz3rdyLplWXlmyYWRUEJHvtTKbow/k8M
OxUrOKk+egePmKzyXgm5dQ51a8E4Jq8dNdZQDizJw0vcidBZ1umBiW88yA0t4JbL
y23MgHD5AGceC/Ar9649ZJHPPNJKwylzoM74gPgwDJkm4pesWedjCNvSs2ZAT0EZ
P2PDUv8BFZtuMHH0DE+EXC4CUazS73JRggcPB0QZnKsRSFqNff0eAqI+CNsCHeQn
xqdTeGz7Vzm1oO/XtueRPvAjvyaCFx4FcpZ329W+/9NCVh3ty71yPcAcQDAVAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUmgZvTAzmo/M45w5MXDw8O4e5J3QwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTIwNTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzPaow
DQYJKoZIhvcNAQELBQADggEBAE9Ys6Q25vGJr9eaV1Ipn3MN4C83AeAsedSBhiK3
gSOv2UqQEisyJJcf86OemGW3/unjkDt5pWQgJxz4OvxqcJeOCo369h4iLFvLdNqF
mfncdolV5yJdRvZF1FAsMYyGSlzsBz2XdSZjepgVSIoQrdECzWbOgvvhQ58sRRMu
uTeuUCbVAEYTzS7kayP5IIFAoMXTs7V3K0W7S5xdxkzaQ+Qb7kMRcnzXLTvFgS6V
aXPRh1Ne6HtO+QloHoxHf8FnSBBCf0fpNuvPDckYn64C9nAs//HJ3jhZHPxH40ZL
dZIjFzAKU2p5D8iRAB5GouZcZNMdmygyJAyrDJd/9QNoPkI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:21 2025 by rpki-client