Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: 4BfYxXFqCB+nZbszB9thtdqhrIs9WAxsEqvRCSha0PM=
Subject key identifier: B4:72:07:C2:66:56:E9:CF:E7:89:68:C3:56:23:B1:E2:28:68:3A:A2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: B42726B39D317667D776FBEE4BD1BCC432F09D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61317.roa
Signing time: Wed 09 Sep 2026 00:04:54 +0000
ROA not before: Tue 08 Sep 2026 23:59:54 +0000
ROA not after: Wed 08 Sep 2027 00:04:54 +0000
asID: 61317
IP address blocks: 2.57.22.0/24 maxlen: 24
2.57.23.0/24 maxlen: 24
2.58.28.0/24 maxlen: 24
2.58.173.0/24 maxlen: 24
5.45.36.0/24 maxlen: 24
5.45.37.0/24 maxlen: 24
5.181.131.0/24 maxlen: 24
5.252.68.0/24 maxlen: 24
5.252.69.0/24 maxlen: 24
5.252.70.0/24 maxlen: 24
5.252.71.0/24 maxlen: 24
5.252.73.0/24 maxlen: 24
5.252.79.0/24 maxlen: 24
5.252.161.0/24 maxlen: 24
37.143.60.0/22 maxlen: 24
37.143.62.0/23 maxlen: 23
45.87.186.0/24 maxlen: 24
45.89.241.0/24 maxlen: 24
45.95.39.0/24 maxlen: 24
45.133.170.0/24 maxlen: 24
45.137.28.0/22 maxlen: 24
85.208.74.0/23 maxlen: 24
89.19.48.0/24 maxlen: 24
141.98.88.0/22 maxlen: 24
141.98.88.0/24 maxlen: 24
141.98.90.0/24 maxlen: 24
149.62.41.0/24 maxlen: 24
179.61.143.0/24 maxlen: 24
179.61.156.0/24 maxlen: 24
179.61.158.0/24 maxlen: 24
179.61.195.0/24 maxlen: 24
179.61.204.0/24 maxlen: 24
179.61.205.0/24 maxlen: 24
181.41.213.0/24 maxlen: 24
181.41.222.0/23 maxlen: 24
181.214.34.0/24 maxlen: 24
181.214.35.0/24 maxlen: 24
181.214.36.0/24 maxlen: 24
181.214.42.0/24 maxlen: 24
181.214.52.0/24 maxlen: 24
181.214.89.0/24 maxlen: 24
181.214.117.0/24 maxlen: 24
181.214.123.0/24 maxlen: 24
181.214.176.0/24 maxlen: 24
181.214.179.0/24 maxlen: 24
181.214.181.0/24 maxlen: 24
181.214.184.0/24 maxlen: 24
181.214.242.0/24 maxlen: 24
181.215.9.0/24 maxlen: 24
181.215.10.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
181.215.16.0/24 maxlen: 24
181.215.37.0/24 maxlen: 24
181.215.44.0/24 maxlen: 24
181.215.46.0/24 maxlen: 24
181.215.48.0/24 maxlen: 24
181.215.71.0/24 maxlen: 24
181.215.89.0/24 maxlen: 24
181.215.152.0/24 maxlen: 24
181.215.165.0/24 maxlen: 24
181.215.181.0/24 maxlen: 24
181.215.183.0/24 maxlen: 24
181.215.231.0/24 maxlen: 24
185.34.40.0/24 maxlen: 24
185.34.41.0/24 maxlen: 24
185.130.204.0/22 maxlen: 22
185.130.206.0/23 maxlen: 23
185.135.8.0/22 maxlen: 24
185.135.8.0/24 maxlen: 24
185.137.12.0/22 maxlen: 24
185.139.236.0/22 maxlen: 24
185.141.164.0/23 maxlen: 24
185.142.26.0/24 maxlen: 24
185.142.27.0/24 maxlen: 24
185.145.36.0/22 maxlen: 24
185.158.100.0/22 maxlen: 24
185.158.104.0/24 maxlen: 24
185.158.106.0/24 maxlen: 24
185.158.148.0/24 maxlen: 24
185.172.58.0/23 maxlen: 23
185.173.24.0/23 maxlen: 23
185.173.26.0/24 maxlen: 24
185.173.32.0/23 maxlen: 23
185.174.62.0/24 maxlen: 24
191.96.42.0/23 maxlen: 23
191.96.42.0/23 maxlen: 24
191.96.50.0/23 maxlen: 23
191.96.50.0/23 maxlen: 24
191.96.70.0/23 maxlen: 23
191.96.70.0/23 maxlen: 24
191.96.73.0/24 maxlen: 24
191.96.95.0/24 maxlen: 24
191.96.97.0/24 maxlen: 24
191.96.98.0/24 maxlen: 24
191.96.109.0/24 maxlen: 24
191.96.125.0/24 maxlen: 24
191.96.167.0/24 maxlen: 24
191.96.188.0/24 maxlen: 24
191.96.189.0/24 maxlen: 24
191.96.192.0/24 maxlen: 24
191.96.252.0/24 maxlen: 24
191.101.52.0/22 maxlen: 22
191.101.52.0/22 maxlen: 24
191.101.62.0/24 maxlen: 24
191.101.65.0/24 maxlen: 24
191.101.73.0/24 maxlen: 24
191.101.92.0/24 maxlen: 24
191.101.93.0/24 maxlen: 24
191.101.106.0/24 maxlen: 24
191.101.109.0/24 maxlen: 24
191.101.110.0/24 maxlen: 24
191.101.114.0/24 maxlen: 24
191.101.118.0/24 maxlen: 24
191.101.134.0/24 maxlen: 24
191.101.142.0/23 maxlen: 24
191.101.164.0/23 maxlen: 23
191.101.164.0/23 maxlen: 24
191.101.168.0/24 maxlen: 24
191.101.173.0/24 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.224.0/24 maxlen: 24
191.101.250.0/24 maxlen: 24
193.31.40.0/24 maxlen: 24
193.58.104.0/24 maxlen: 24
193.107.208.0/22 maxlen: 24
194.53.140.0/22 maxlen: 24
194.53.140.0/24 maxlen: 24
194.110.12.0/22 maxlen: 24
213.109.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b4:27:26:b3:9d:31:76:67:d7:76:fb:ee:4b:d1:bc:c4:32:f0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 23:59:54 2026 GMT
Not After : Sep 8 00:04:54 2027 GMT
Subject: CN=B47207C26656E9CFE78968C35623B1E228683AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:3e:05:6b:bd:00:ea:45:e2:2d:0e:9e:94:
e9:40:8a:16:b8:be:5d:07:49:dc:0f:f6:83:a2:c5:
58:eb:e9:b3:0e:2a:ef:ca:3a:cf:e2:f2:35:86:ce:
5c:10:83:9f:cc:ff:b5:0d:9c:ab:9c:be:c8:e6:dd:
a6:3c:9b:08:6e:4d:c6:94:8f:f1:58:b6:12:1d:79:
6f:85:6d:51:da:ec:de:f4:3a:19:2c:36:7b:ed:c8:
86:79:59:0d:7b:16:7a:c5:cb:7a:cb:2f:d6:1d:5d:
6f:67:3b:9a:03:3d:53:bf:e5:ec:f0:fc:4f:2d:a6:
9b:28:db:26:0c:c8:ef:b3:9e:5a:02:80:18:a7:2e:
0a:46:47:39:03:16:62:61:5e:47:82:be:21:63:9a:
d7:36:17:d4:7a:34:88:c5:24:09:c1:d4:8d:39:66:
53:46:a7:d6:5c:dc:5f:db:43:51:4c:64:27:2c:d4:
0c:1f:45:1f:b0:ed:dc:b9:a8:fe:03:0f:bc:32:56:
a4:47:8c:c1:26:55:ea:de:f3:c1:36:b6:e3:88:b5:
31:d8:fd:55:16:08:e3:69:8e:89:a4:6c:e4:da:8f:
54:6d:1e:da:69:d1:f6:38:ed:44:c7:b5:35:20:fc:
44:ff:83:84:1b:c5:77:40:61:18:24:b9:2e:0b:a4:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:07:C2:66:56:E9:CF:E7:89:68:C3:56:23:B1:E2:28:68:3A:A2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.22.0/23
2.58.28.0/24
2.58.173.0/24
5.45.36.0/23
5.181.131.0/24
5.252.68.0/22
5.252.73.0/24
5.252.79.0/24
5.252.161.0/24
37.143.60.0/22
45.87.186.0/24
45.89.241.0/24
45.95.39.0/24
45.133.170.0/24
45.137.28.0/22
85.208.74.0/23
89.19.48.0/24
141.98.88.0/22
149.62.41.0/24
179.61.143.0/24
179.61.156.0/24
179.61.158.0/24
179.61.195.0/24
179.61.204.0/23
181.41.213.0/24
181.41.222.0/23
181.214.34.0-181.214.36.255
181.214.42.0/24
181.214.52.0/24
181.214.89.0/24
181.214.117.0/24
181.214.123.0/24
181.214.176.0/24
181.214.179.0/24
181.214.181.0/24
181.214.184.0/24
181.214.242.0/24
181.215.9.0-181.215.11.255
181.215.16.0/24
181.215.37.0/24
181.215.44.0/24
181.215.46.0/24
181.215.48.0/24
181.215.71.0/24
181.215.89.0/24
181.215.152.0/24
181.215.165.0/24
181.215.181.0/24
181.215.183.0/24
181.215.231.0/24
185.34.40.0/23
185.130.204.0/22
185.135.8.0/22
185.137.12.0/22
185.139.236.0/22
185.141.164.0/23
185.142.26.0/23
185.145.36.0/22
185.158.100.0-185.158.104.255
185.158.106.0/24
185.158.148.0/24
185.172.58.0/23
185.173.24.0-185.173.26.255
185.173.32.0/23
185.174.62.0/24
191.96.42.0/23
191.96.50.0/23
191.96.70.0/23
191.96.73.0/24
191.96.95.0/24
191.96.97.0-191.96.98.255
191.96.109.0/24
191.96.125.0/24
191.96.167.0/24
191.96.188.0/23
191.96.192.0/24
191.96.252.0/24
191.101.52.0/22
191.101.62.0/24
191.101.65.0/24
191.101.73.0/24
191.101.92.0/23
191.101.106.0/24
191.101.109.0-191.101.110.255
191.101.114.0/24
191.101.118.0/24
191.101.134.0/24
191.101.142.0/23
191.101.164.0/23
191.101.168.0/24
191.101.173.0/24
191.101.205.0/24
191.101.224.0/24
191.101.250.0/24
193.31.40.0/24
193.58.104.0/24
193.107.208.0/22
194.53.140.0/22
194.110.12.0/22
213.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
48:f3:9d:ce:fa:81:e1:81:4d:2a:37:40:f5:36:e6:bd:c3:bc:
94:38:06:16:e8:cb:40:d9:fc:3d:ea:1d:6c:d7:b3:3c:e3:5b:
83:95:32:1f:c0:15:7d:39:49:cc:13:0a:e5:62:d3:b1:71:54:
85:80:09:9c:50:63:1b:11:2a:35:c2:f2:3b:d6:e7:e5:8d:59:
a3:a8:7f:28:1c:fe:46:2a:eb:c7:17:ca:fd:2b:ae:8b:79:da:
23:bf:f7:ee:60:64:f7:6f:43:36:77:d9:57:85:04:33:4a:28:
cd:92:01:84:c9:d0:b8:69:7a:57:75:18:a7:2f:b5:64:b6:68:
15:5c:dd:ab:66:78:f9:ab:89:bc:92:3e:ee:02:a9:1e:08:f0:
0c:89:b7:c4:ad:e6:58:9c:f0:04:e5:68:9a:62:3a:06:37:be:
0b:f5:da:c6:f1:90:42:5c:05:ee:0f:c3:b0:51:40:d9:29:a0:
99:52:22:2b:b6:e4:de:b3:dd:cf:c4:cc:29:2a:78:8b:fb:a8:
2d:78:ff:97:c5:a4:92:dd:96:fc:f6:d5:d7:86:0d:5c:af:79:
56:39:38:b7:a8:19:35:1d:81:56:99:5b:99:c0:46:44:dc:30:
df:b6:b1:99:30:48:f3:e2:ff:79:02:2c:5f:29:74:8b:70:d0:
54:38:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:04:12 2026 by rpki-client