Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61112.roa
File: AS61112.roa (raw, json)
Hash identifier: W6EuW7nxTv4AIbvqU1l5SJaAYYOhV6hg9y11UiXd8tM=
Subject key identifier: 72:2D:9F:76:9E:37:60:E8:A6:A8:2B:D0:B8:3C:AC:A2:39:35:9E:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 8D48D5122321F46A50ACE07E362B071F77A3CE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61112.roa
Signing time: Sun 13 Sep 2026 02:14:55 +0000
ROA not before: Sun 13 Sep 2026 02:09:55 +0000
ROA not after: Sun 12 Sep 2027 02:14:55 +0000
asID: 61112
IP address blocks: 140.233.172.0/24 maxlen: 24
168.222.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8d:48:d5:12:23:21:f4:6a:50:ac:e0:7e:36:2b:07:1f:77:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 13 02:09:55 2026 GMT
Not After : Sep 12 02:14:55 2027 GMT
Subject: CN=722D9F769E3760E8A6A82BD0B83CACA239359E77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:2a:a7:fe:8f:a1:39:b1:47:17:30:3c:bd:
ad:3f:f9:55:d4:3b:ba:aa:7a:9a:1e:23:dd:64:d7:
4a:c4:84:8e:5c:00:81:5b:91:d5:c0:57:cb:a7:30:
74:da:84:ad:24:b4:d0:13:48:b9:2a:cb:a5:f1:9a:
c3:9f:75:92:09:87:b4:cb:f1:57:7e:b5:ca:b2:33:
a1:ed:f3:c6:06:cb:06:54:3a:de:8c:e5:84:f8:5b:
2f:bb:9c:22:f5:41:db:f4:a3:33:e2:43:0a:65:f2:
f0:3e:69:b4:a1:a0:fd:84:0e:a6:8a:e4:4f:33:62:
e2:94:02:7f:dd:b1:10:5a:44:3b:50:e6:64:7c:12:
7a:40:fb:db:43:cb:7b:66:73:89:b7:12:2a:11:f9:
74:53:2d:10:a8:3b:2f:39:9f:16:f6:7c:f8:70:9d:
9a:49:97:27:44:97:10:ac:f5:b5:5f:60:10:35:fd:
2e:34:97:e8:fb:9f:64:35:de:9c:70:c3:be:af:34:
4b:8d:54:98:f0:6e:69:52:29:49:60:e0:85:07:62:
5b:ab:01:0e:b7:1e:cf:ed:b7:87:3e:8e:1b:e9:5f:
1d:6d:74:cb:5e:ad:27:6f:49:bc:e5:29:cb:31:d8:
91:33:db:36:15:cd:25:6a:35:c7:75:e6:d0:79:88:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:9F:76:9E:37:60:E8:A6:A8:2B:D0:B8:3C:AC:A2:39:35:9E:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.172.0/24
168.222.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cb:bb:35:1d:b9:a2:c2:b8:9b:0f:bf:79:e9:a3:59:e2:e3:
65:2a:eb:a7:6f:a1:fe:f0:29:3d:33:90:00:d1:13:8f:51:1d:
26:85:0f:6b:bb:49:f3:38:e3:ff:3a:08:ea:0b:3f:b3:4a:d1:
93:94:29:d4:0c:b5:59:1d:6f:d3:6b:85:8f:cd:9f:e7:c0:64:
18:86:31:30:48:76:0f:fc:9a:c9:93:a0:6d:d7:e7:e9:b4:69:
9d:56:02:c9:42:20:bc:30:37:63:1c:f2:6f:a7:b6:ef:ff:6a:
6f:83:e6:bb:73:0b:c7:39:6a:f6:8a:7a:09:19:83:a3:c1:5c:
d5:1a:86:4b:e9:7b:90:4b:35:5d:91:a8:c0:13:09:ca:45:d8:
10:62:a8:a6:99:af:5d:81:39:fc:4e:85:cc:ab:57:e4:41:59:
07:2e:53:75:ca:a6:34:16:57:35:c0:f2:00:59:37:a9:4b:22:
ad:38:06:c5:96:96:47:94:b1:f5:83:4d:e8:4a:8f:a9:79:f1:
9c:c2:9d:b3:51:48:7d:8e:4b:ec:ef:c1:ab:c4:d1:b0:ad:e1:
89:63:d2:1f:70:c8:7e:c6:e7:7f:d1:d5:8f:80:76:e8:f7:2f:
d0:70:4a:08:42:c1:25:a8:7d:fe:48:d8:73:07:32:e5:ab:3c:
83:a6:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:54:40 2026 by rpki-client