Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: iQXJnT80AoCpjsGvDLcxUwJpa7yXWokpf00DV4i88Jo=
Subject key identifier: E4:67:9A:97:EB:0C:A0:BE:C2:1A:AE:85:E9:92:88:04:1A:F2:79:FC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7B2C3E5AD59F6900B0EB2B71608E6AFFEDE5657E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
Signing time: Fri 10 Oct 2025 12:26:54 +0000
ROA not before: Fri 10 Oct 2025 12:21:54 +0000
ROA not after: Fri 09 Oct 2026 12:26:54 +0000
asID: 54252
IP address blocks: 179.61.208.0/24 maxlen: 24
181.215.219.0/24 maxlen: 24
181.215.250.0/24 maxlen: 24
191.96.9.0/24 maxlen: 24
191.101.21.0/24 maxlen: 24
191.101.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2c:3e:5a:d5:9f:69:00:b0:eb:2b:71:60:8e:6a:ff:ed:e5:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 10 12:21:54 2025 GMT
Not After : Oct 9 12:26:54 2026 GMT
Subject: CN=E4679A97EB0CA0BEC21AAE85E99288041AF279FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:37:86:86:60:dc:67:63:39:b7:74:1c:11:
1a:6f:21:cb:a1:09:44:61:d4:88:f3:d8:2f:86:9a:
ba:c4:ee:09:64:e7:2b:15:69:bb:6b:e6:46:60:bb:
d3:89:00:8e:a3:0a:aa:13:14:ee:67:5c:d6:cf:93:
98:f1:62:72:c5:2f:5d:e6:bc:39:01:37:59:f7:19:
1c:ce:db:68:1e:75:8f:5a:38:ed:8c:38:e5:f2:da:
2d:3d:7c:9e:10:3f:ca:60:04:e3:ff:c0:ab:29:a1:
d5:bf:be:94:42:b6:aa:a2:13:6c:c0:70:f4:2f:b6:
2b:c6:0e:24:14:7d:a6:dd:77:ea:0b:f6:a5:aa:2d:
38:76:56:e0:e9:b5:e3:c1:13:46:f8:77:b4:19:5c:
49:20:cc:e9:38:a1:93:be:cf:3e:1e:7e:4e:e5:f1:
58:f9:3a:fb:3d:ba:d0:6d:d9:22:26:05:6e:ea:ed:
4b:bf:23:ef:21:8d:89:ed:e5:6c:02:54:02:65:7c:
08:d1:ce:c1:40:dc:52:fd:0b:e9:3a:a9:e8:b2:e6:
af:27:84:dd:8f:3c:6d:d9:35:d4:63:0f:21:1c:07:
c6:bb:f3:a4:84:75:af:50:3d:57:35:12:c6:6a:1a:
44:00:5c:0a:ef:18:27:13:b7:63:d1:91:7a:53:61:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:9A:97:EB:0C:A0:BE:C2:1A:AE:85:E9:92:88:04:1A:F2:79:FC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.208.0/24
181.215.219.0/24
181.215.250.0/24
191.96.9.0/24
191.101.21.0/24
191.101.218.0/24
Signature Algorithm: sha256WithRSAEncryption
78:05:70:52:c3:8f:ce:0f:49:cc:a3:52:94:25:2a:e4:08:05:
35:3c:ef:e7:9e:b2:59:d0:78:7c:ca:27:91:32:85:94:14:3e:
d0:42:bd:2d:b9:4a:5b:20:e6:59:83:dd:7c:39:2e:02:7a:26:
d3:6d:1d:26:d5:fb:c4:15:ca:e2:d9:c2:d6:ab:e9:cd:a7:07:
61:81:a0:60:93:f7:46:fc:7e:f3:18:b2:71:81:32:86:2e:18:
1d:f7:05:3b:db:9d:49:5a:f9:e6:ec:dc:ba:9f:d6:3f:96:9a:
5e:d8:aa:8c:da:63:94:14:d2:00:a2:78:86:30:0b:12:53:a2:
aa:67:fb:c3:4a:b4:52:a7:d2:06:c1:3b:95:f9:d3:a6:bb:4e:
e2:8c:8d:50:de:f8:85:27:a6:8b:f5:b9:bd:2c:23:57:a2:98:
ea:d4:06:fb:f6:ff:43:be:11:07:35:0a:22:b2:4c:f8:72:a2:
02:72:37:6f:e4:77:54:71:0d:91:ae:5f:c9:1b:d2:4d:7c:7d:
da:f4:85:2a:fe:9b:65:72:15:e9:b2:fd:05:9c:6f:07:6c:e3:
22:83:6b:bb:e9:b9:d8:3e:08:01:a3:f3:1a:08:7f:6a:4e:7f:
74:31:6f:88:9b:07:2b:f7:81:7e:c0:e9:ba:12:7c:2e:65:d6:
e3:fc:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:26 2025 by rpki-client