This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: P//v8X9Pqwk2yovxJZAMHaRSelQy4RCcjVBEdWwTnsY=
Subject key identifier: 73:78:02:19:56:99:7E:8A:9E:B5:EC:1B:C7:A4:07:F7:13:8B:C9:72
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4134F7FE35B9965932AA18DB34BF3C0F15B24058
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
Signing time: Mon 24 Nov 2025 07:55:12 +0000
ROA not before: Mon 24 Nov 2025 07:50:12 +0000
ROA not after: Mon 23 Nov 2026 07:55:12 +0000
asID: 54252
IP address blocks: 147.78.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:34:f7:fe:35:b9:96:59:32:aa:18:db:34:bf:3c:0f:15:b2:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 24 07:50:12 2025 GMT
Not After : Nov 23 07:55:12 2026 GMT
Subject: CN=7378021956997E8A9EB5EC1BC7A407F7138BC972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:5e:e5:f9:50:56:62:4e:23:47:36:91:37:
e9:ee:08:a7:d2:b2:eb:2b:09:7c:35:4f:d1:18:b5:
65:80:d6:cc:9c:dd:ec:81:30:f2:99:c0:f0:4a:1d:
f2:98:b3:3b:a9:f0:70:78:ed:e7:42:bb:0a:67:5e:
30:ea:fb:32:a0:77:7a:ab:aa:57:b8:63:2f:b6:e7:
09:b6:31:f1:f2:36:1f:3e:0f:3b:a6:68:85:ec:03:
c3:8a:d8:e5:c4:f7:2f:9d:8d:ed:03:36:14:18:b1:
2b:18:2e:c9:4f:ea:62:4d:49:90:50:bf:21:cd:55:
64:69:97:f5:a3:83:a9:a7:09:39:95:17:16:a2:65:
75:32:e2:32:35:a2:46:c2:75:91:0a:4a:27:2d:09:
df:0e:b4:80:7e:85:3d:f3:97:fc:12:98:1f:a7:d0:
a0:63:04:1f:3f:ea:8a:69:e1:eb:db:6d:2d:04:e1:
21:6f:73:dc:f3:b3:c8:19:49:e6:fb:29:a5:59:24:
b1:02:3b:16:ff:ba:e9:d2:b3:ca:e0:7d:0d:37:df:
a1:95:0f:31:d1:55:c5:c7:fb:64:ba:32:64:68:13:
80:82:55:df:e0:4c:f5:95:4a:52:41:fe:fb:0e:54:
15:c4:8e:5b:3b:38:7f:37:52:17:21:8d:b6:16:39:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:02:19:56:99:7E:8A:9E:B5:EC:1B:C7:A4:07:F7:13:8B:C9:72
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.122.0/24
Signature Algorithm: sha256WithRSAEncryption
72:66:88:d7:6f:2c:b5:e9:c1:d1:e0:82:c3:79:81:98:3c:a0:
90:62:c0:0d:c6:5a:fa:4d:92:13:44:72:65:1c:68:df:8f:59:
ea:89:9f:23:7b:20:91:87:77:5c:60:d6:e9:11:61:54:e5:07:
76:8b:01:32:64:84:53:55:03:42:4a:72:db:20:d3:6d:fb:29:
45:e3:6e:3e:2d:35:65:12:b9:34:0d:88:33:0f:5f:39:d6:00:
46:da:27:33:d5:d6:dc:3a:89:11:be:ec:ee:8e:8f:68:c7:4e:
eb:eb:6d:14:e6:35:61:e6:25:1c:4c:93:3c:f4:4f:97:10:48:
41:c9:4c:63:71:3f:3b:0b:f6:77:12:27:29:2f:33:e9:61:86:
7a:d1:d6:f7:3f:2c:35:14:55:18:48:3d:ce:82:ba:97:5d:20:
b5:0d:47:5b:d0:d6:03:54:09:21:5a:87:6c:78:f0:bd:44:b5:
95:d4:a4:06:5f:77:50:a8:bb:70:4a:67:cb:ef:ef:ee:a1:9f:
c0:f2:51:be:be:6f:9b:b1:d7:83:a0:70:17:17:8a:5a:e1:57:
c7:b5:67:e0:9f:76:a5:fd:a9:65:8a:ab:fa:4f:ba:f8:94:92:
4d:8e:2c:32:6d:74:7b:95:ff:38:30:6e:48:81:76:ee:d8:eb:
91:10:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:41:40 2025 by rpki-client