Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57511.roa
File: AS57511.roa (raw, json)
Hash identifier: b58EiMgq/2P8CSe5MIGd6N6Gnj24W36UVtnug7Gytxc=
Subject key identifier: DC:A1:B6:BA:5D:FC:1B:50:AC:0C:83:F5:66:AF:64:AE:77:7B:F3:83
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7708F6722D6119248B9611C5BD192706DEDFA95C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57511.roa
Signing time: Wed 16 Sep 2026 14:49:35 +0000
ROA not before: Wed 16 Sep 2026 14:44:35 +0000
ROA not after: Wed 15 Sep 2027 14:49:35 +0000
asID: 57511
IP address blocks: 181.41.216.0/24 maxlen: 24
181.214.115.0/24 maxlen: 24
185.135.156.0/24 maxlen: 24
194.110.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:08:f6:72:2d:61:19:24:8b:96:11:c5:bd:19:27:06:de:df:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 16 14:44:35 2026 GMT
Not After : Sep 15 14:49:35 2027 GMT
Subject: CN=DCA1B6BA5DFC1B50AC0C83F566AF64AE777BF383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:07:b4:17:b9:38:17:0f:e0:1f:0f:c3:32:
ec:34:a5:87:53:1f:10:11:d9:6e:b0:51:42:6c:6d:
80:27:67:e2:10:48:49:7a:38:c7:4b:d4:0a:87:e6:
70:be:1f:f3:3f:49:51:a9:ed:9e:53:2b:e4:3c:32:
c8:98:bc:e9:0a:d2:33:cf:ac:27:46:75:82:de:97:
57:2d:56:9f:27:7d:f3:c6:a3:59:61:cf:27:c0:04:
0d:4f:ee:bd:17:56:1d:f8:51:fc:4f:bd:92:54:7d:
73:9c:7c:f0:19:15:c8:48:9d:84:72:e8:aa:98:31:
7f:0b:fc:04:cf:ec:6b:4f:56:1c:c7:f8:9e:f1:3b:
3c:44:5c:fc:f7:f5:36:f1:de:7b:a3:b3:7b:22:30:
2b:c0:bb:96:28:b1:c6:4b:e5:39:69:ea:fa:a6:b5:
4d:a0:8f:cb:b3:31:6c:34:78:74:25:fa:ab:51:c5:
3e:cc:4c:48:83:7d:fe:0e:cf:38:15:33:36:ca:3b:
c3:99:cf:92:f3:83:1c:d9:fd:34:f2:b6:92:13:cb:
a4:a4:51:bb:72:ac:76:99:0d:74:68:f7:46:5e:d8:
c4:7e:4b:25:71:1c:04:97:2b:7a:91:b0:ba:46:3f:
f9:f3:8e:6b:eb:79:b4:33:20:5f:9a:6d:7c:a5:4c:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:B6:BA:5D:FC:1B:50:AC:0C:83:F5:66:AF:64:AE:77:7B:F3:83
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.216.0/24
181.214.115.0/24
185.135.156.0/24
194.110.242.0/24
Signature Algorithm: sha256WithRSAEncryption
85:aa:30:29:96:12:8c:26:89:43:78:7c:25:b9:ee:8e:0b:a0:
1b:0e:72:02:fc:69:e3:08:01:1d:6e:22:2c:05:3f:16:80:ee:
e9:8c:8e:66:0b:d7:13:d8:fc:9b:13:d9:33:58:e5:fd:c4:c2:
e6:b2:bc:e0:b5:43:9b:14:5f:6b:c1:d1:16:9f:28:a0:f8:d5:
1d:1e:31:67:fd:92:4c:76:fd:dc:ea:4e:7d:ce:b4:35:2a:8a:
86:c8:b5:50:86:de:42:a5:94:8f:df:f6:9a:2b:c1:8a:62:96:
4e:ce:ae:9e:d2:25:3d:8e:6b:ff:43:44:05:5c:7d:f5:98:19:
33:9d:fd:5c:83:69:14:49:48:99:d2:a5:f5:c1:e2:8c:c0:56:
b3:e9:e3:1e:30:92:cb:fb:c7:b7:f6:6f:ed:3a:9b:69:dd:ee:
46:91:55:9b:bb:77:68:8b:73:fc:ff:fb:aa:db:49:53:7b:4e:
31:40:26:83:9d:41:eb:a5:03:ce:da:31:f9:e4:50:d9:1c:66:
cf:a0:c6:31:91:6f:37:0c:2f:e4:70:0e:0f:b0:72:5b:d4:29:
b9:37:c6:ce:6b:3f:79:8c:71:de:5c:c1:3f:c2:27:42:ba:bf:
50:f6:a8:51:92:8f:ed:15:0b:13:8a:ab:27:6c:6b:5e:ef:59:
3b:26:5c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:23:36 2026 by rpki-client