Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS54004.roa
File: AS54004.roa (raw, json)
Hash identifier: sgJRe55WL+FT9NXkOyu93NdM96/hUBcumISzHEvRY0I=
Subject key identifier: 53:52:96:42:30:AD:D5:E7:3A:A6:1E:AF:CD:19:08:1D:BB:ED:AE:22
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 23E9E0105A57BDFE33D2972FB0D379A72D7C0F11
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS54004.roa
Signing time: Wed 23 Sep 2026 06:14:56 +0000
ROA not before: Wed 23 Sep 2026 06:09:56 +0000
ROA not after: Wed 22 Sep 2027 06:14:56 +0000
asID: 54004
IP address blocks: 94.116.36.0/22 maxlen: 24
94.116.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e9:e0:10:5a:57:bd:fe:33:d2:97:2f:b0:d3:79:a7:2d:7c:0f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 06:09:56 2026 GMT
Not After : Sep 22 06:14:56 2027 GMT
Subject: CN=5352964230ADD5E73AA61EAFCD19081DBBEDAE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:d7:2a:d1:1a:2b:0a:03:07:2d:b5:04:42:
f9:79:f2:91:36:2a:4c:1f:dd:3e:81:cb:85:99:0e:
d5:09:61:57:92:62:58:93:a2:39:24:58:b1:ab:c0:
00:6c:69:61:e1:96:17:2e:a5:59:3e:ce:60:bc:26:
a4:85:92:dd:f9:49:1c:f5:ce:74:f9:1e:81:8a:37:
29:0d:cf:f7:d6:4f:3f:ed:f8:48:73:0e:af:06:79:
b0:dc:59:24:66:ea:18:e1:d5:65:49:57:ee:34:37:
2b:2b:ba:bc:54:d7:eb:ba:b3:09:e2:3a:76:47:ed:
7d:8c:cb:39:67:ed:8f:85:47:17:72:d5:58:72:a1:
60:59:2a:f0:ee:d6:a9:7b:e9:ae:fb:dd:cb:56:e1:
1a:7c:3e:bf:6d:87:1b:6b:89:d1:e6:65:c2:52:39:
87:7f:92:43:f5:92:cd:b5:27:a1:8c:b3:47:f9:77:
18:dd:10:f3:72:f4:9a:dc:63:a1:53:de:90:fd:56:
e4:a0:5e:30:18:39:21:01:41:18:8f:f8:e2:35:44:
8d:76:fd:dd:10:c2:67:18:e6:b3:47:79:96:de:67:
0f:ec:c0:ee:ff:85:a3:fd:98:3b:9f:ca:66:bf:be:
53:18:d1:d2:48:12:76:f9:62:9b:a0:f5:f4:0a:1e:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:96:42:30:AD:D5:E7:3A:A6:1E:AF:CD:19:08:1D:BB:ED:AE:22
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS54004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.36.0/22
94.116.72.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d2:74:dd:63:05:97:ed:04:69:ff:53:40:a1:29:d1:64:90:
cb:68:cb:ab:50:f4:e5:cc:8b:fe:d7:d1:9e:ac:ee:bc:05:a7:
48:80:01:91:51:10:49:dd:a4:6c:60:49:c5:f0:e8:f9:52:8d:
a7:1b:a8:97:c7:9f:44:0b:e3:fb:8f:cb:54:e4:4b:ba:16:88:
b9:81:69:c2:3d:27:db:87:9e:aa:76:bc:7c:a6:a4:bf:b1:0b:
24:5c:08:fe:ef:0f:8d:d4:95:70:bb:a0:77:a6:d7:a4:7d:57:
0e:da:69:de:46:9e:eb:5b:2b:e4:4a:72:0d:85:7a:8b:2a:54:
65:4f:d7:2e:62:67:6b:ac:88:ad:8d:fc:51:a2:4f:42:60:ad:
d3:bf:b8:8e:7a:c8:4a:a9:0c:5a:30:06:ee:12:d3:3c:b1:61:
ce:d9:ed:74:ac:1d:da:10:2f:11:da:01:75:3c:9c:7f:64:6a:
a2:8c:f6:23:78:3c:fd:30:8d:20:3b:2e:7b:bc:1e:bc:10:e5:
d2:a4:c9:ad:4f:78:ab:0f:28:59:ef:ec:25:4c:fc:63:22:ee:
eb:a6:2c:3e:ac:b3:3e:f9:05:45:47:0d:ca:bf:77:7b:eb:8d:
00:5c:20:9f:5d:21:1c:1d:82:5c:01:e2:89:38:99:53:92:93:
2e:17:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:51:08 2026 by rpki-client