
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54252.roa
File: AS54252.roa (raw, json)
Hash identifier: f9Ka2KtQjo/3uo6AA23DqYSU0Lm7W89lU6Ggel+Qumw=
Subject key identifier: 64:F2:62:96:5C:26:B1:AF:D7:25:E8:5A:F7:45:F7:2D:67:92:3E:D3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2A614EECBADC2F0A0A3F9372C943E97428E6A2FA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54252.roa
Signing time: Fri 10 Oct 2025 12:27:01 +0000
ROA not before: Fri 10 Oct 2025 12:22:01 +0000
ROA not after: Fri 09 Oct 2026 12:27:01 +0000
asID: 54252
IP address blocks: 141.11.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:61:4e:ec:ba:dc:2f:0a:0a:3f:93:72:c9:43:e9:74:28:e6:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 10 12:22:01 2025 GMT
Not After : Oct 9 12:27:01 2026 GMT
Subject: CN=64F262965C26B1AFD725E85AF745F72D67923ED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:3a:b1:c5:58:4e:66:8f:80:2d:27:ba:22:
2c:3f:38:f3:55:54:2b:15:9f:a6:22:2c:8a:5f:e9:
59:64:df:a7:83:d5:73:d3:12:d2:73:c8:fa:b0:a9:
d1:c6:d3:f0:44:f6:60:8f:4a:be:6b:55:c9:93:60:
79:37:0e:45:be:b8:48:8c:3f:09:d6:a9:ff:d6:6e:
be:95:c7:ac:e7:d8:89:5a:62:22:9e:98:6e:d1:73:
c9:f0:17:dd:c4:12:83:ed:98:99:df:b8:64:f2:1e:
a8:cc:99:45:b6:8d:ac:e1:9f:fc:ba:ea:c1:f0:df:
ed:83:99:04:ef:69:62:b6:67:f2:8d:50:8f:c0:11:
65:65:21:3c:22:14:60:d5:ef:38:4f:69:dd:58:52:
b5:b0:3e:1b:00:a1:59:62:cb:59:45:bb:d3:48:34:
90:c1:cd:b0:c9:1a:f6:35:67:fb:7b:f3:96:ad:eb:
20:f8:17:36:82:53:4f:c9:4a:20:1f:8b:e4:65:e6:
55:28:04:44:bb:a0:ea:72:6f:68:d1:27:db:2b:6b:
e0:e2:c5:ec:db:2b:c3:b8:cb:50:f6:b7:69:4f:8c:
eb:36:ce:8a:ad:b6:f2:46:32:31:a3:cf:fd:fe:03:
73:8c:e0:09:d1:73:50:cf:b5:ee:d3:1a:7e:f4:7b:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:62:96:5C:26:B1:AF:D7:25:E8:5A:F7:45:F7:2D:67:92:3E:D3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS54252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.230.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2f:e4:01:ee:c7:6b:90:c6:03:88:f6:26:4e:c1:45:ff:ad:
d0:ff:e8:fc:45:46:42:a3:da:90:9b:5c:88:3d:6c:9c:a4:83:
fc:d7:63:77:40:53:9b:ea:09:c7:98:8e:33:0c:9a:9d:84:d4:
e3:ba:07:95:3a:a8:3b:ca:5c:4c:5a:f2:ac:c3:69:d9:7d:dc:
53:dd:e0:bf:ed:6d:24:1c:ee:0c:b9:83:9a:ed:1f:2c:af:70:
d0:31:1f:d3:aa:eb:9b:2d:75:2a:f2:68:7d:5f:af:ce:09:c9:
64:2c:82:bd:c9:48:23:a5:6a:85:f2:db:8a:0b:d7:af:74:6f:
b4:7b:19:29:25:8b:86:f0:75:30:0e:df:ca:ab:5b:5e:a3:44:
28:d7:2d:91:0b:83:93:78:48:db:a4:d7:2e:e4:ef:c2:df:89:
d8:80:3c:dd:e8:bb:46:d4:f0:19:63:b6:29:f2:96:08:77:68:
10:6c:22:3d:5b:72:e4:33:6e:15:44:5b:e7:88:38:b8:25:82:
45:ce:98:b2:bd:af:47:88:45:36:cd:ca:91:69:c4:02:c6:45:
7c:1a:eb:9b:7b:84:ca:a3:ed:7a:6d:51:bd:65:79:3c:7b:b9:
22:68:c9:e8:c7:97:ef:b3:17:b8:22:b4:70:d4:25:53:e3:c6:
2b:4c:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:43 2025 by rpki-client