Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          zOeLMN3bOIyevRPKM7l6yiJqIJ8uQTcF71FECqAyDJs=
Subject key identifier:   60:24:6A:A1:F0:69:E9:39:AE:3D:30:0F:14:12:1B:46:69:D9:73:56
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       402E2E873F47123F96A2BDAAFA14197CAE61E2A6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61317.roa
Signing time:             Thu 26 Feb 2026 16:20:11 +0000
ROA not before:           Thu 26 Feb 2026 16:15:11 +0000
ROA not after:            Thu 25 Feb 2027 16:20:11 +0000
asID:                     61317
IP address blocks:        2.57.22.0/24 maxlen: 24
                          2.57.23.0/24 maxlen: 24
                          2.58.28.0/24 maxlen: 24
                          2.58.173.0/24 maxlen: 24
                          5.45.36.0/24 maxlen: 24
                          5.45.37.0/24 maxlen: 24
                          5.181.131.0/24 maxlen: 24
                          5.252.68.0/24 maxlen: 24
                          5.252.69.0/24 maxlen: 24
                          5.252.70.0/24 maxlen: 24
                          5.252.71.0/24 maxlen: 24
                          5.252.73.0/24 maxlen: 24
                          5.252.79.0/24 maxlen: 24
                          5.252.161.0/24 maxlen: 24
                          37.143.60.0/22 maxlen: 24
                          37.143.62.0/23 maxlen: 23
                          45.87.186.0/24 maxlen: 24
                          45.89.241.0/24 maxlen: 24
                          45.95.39.0/24 maxlen: 24
                          45.133.170.0/24 maxlen: 24
                          45.137.28.0/22 maxlen: 24
                          85.208.74.0/23 maxlen: 24
                          89.19.48.0/24 maxlen: 24
                          92.119.35.0/24 maxlen: 24
                          130.185.124.0/22 maxlen: 24
                          141.98.88.0/22 maxlen: 24
                          141.98.88.0/24 maxlen: 24
                          141.98.90.0/24 maxlen: 24
                          149.62.41.0/24 maxlen: 24
                          179.61.130.0/24 maxlen: 24
                          179.61.143.0/24 maxlen: 24
                          179.61.156.0/24 maxlen: 24
                          179.61.158.0/24 maxlen: 24
                          179.61.195.0/24 maxlen: 24
                          179.61.204.0/24 maxlen: 24
                          179.61.205.0/24 maxlen: 24
                          179.61.236.0/24 maxlen: 24
                          181.41.193.0/24 maxlen: 24
                          181.41.213.0/24 maxlen: 24
                          181.41.222.0/23 maxlen: 24
                          181.214.34.0/24 maxlen: 24
                          181.214.35.0/24 maxlen: 24
                          181.214.36.0/24 maxlen: 24
                          181.214.42.0/24 maxlen: 24
                          181.214.52.0/24 maxlen: 24
                          181.214.89.0/24 maxlen: 24
                          181.214.117.0/24 maxlen: 24
                          181.214.123.0/24 maxlen: 24
                          181.214.176.0/24 maxlen: 24
                          181.214.179.0/24 maxlen: 24
                          181.214.181.0/24 maxlen: 24
                          181.214.184.0/24 maxlen: 24
                          181.214.242.0/24 maxlen: 24
                          181.215.9.0/24 maxlen: 24
                          181.215.10.0/24 maxlen: 24
                          181.215.11.0/24 maxlen: 24
                          181.215.16.0/24 maxlen: 24
                          181.215.37.0/24 maxlen: 24
                          181.215.44.0/24 maxlen: 24
                          181.215.46.0/24 maxlen: 24
                          181.215.48.0/24 maxlen: 24
                          181.215.71.0/24 maxlen: 24
                          181.215.89.0/24 maxlen: 24
                          181.215.152.0/24 maxlen: 24
                          181.215.165.0/24 maxlen: 24
                          181.215.181.0/24 maxlen: 24
                          181.215.183.0/24 maxlen: 24
                          181.215.184.0/23 maxlen: 23
                          181.215.231.0/24 maxlen: 24
                          185.34.40.0/24 maxlen: 24
                          185.34.41.0/24 maxlen: 24
                          185.130.204.0/22 maxlen: 22
                          185.130.206.0/23 maxlen: 23
                          185.135.8.0/22 maxlen: 24
                          185.135.8.0/24 maxlen: 24
                          185.137.12.0/22 maxlen: 24
                          185.139.236.0/22 maxlen: 24
                          185.139.237.0/24 maxlen: 24
                          185.141.164.0/23 maxlen: 24
                          185.142.26.0/24 maxlen: 24
                          185.142.27.0/24 maxlen: 24
                          185.145.36.0/22 maxlen: 24
                          185.158.100.0/22 maxlen: 24
                          185.158.104.0/24 maxlen: 24
                          185.158.106.0/24 maxlen: 24
                          185.158.148.0/24 maxlen: 24
                          185.172.58.0/23 maxlen: 23
                          185.173.24.0/23 maxlen: 23
                          185.173.26.0/24 maxlen: 24
                          185.173.32.0/23 maxlen: 23
                          185.174.62.0/24 maxlen: 24
                          191.96.42.0/23 maxlen: 23
                          191.96.42.0/23 maxlen: 24
                          191.96.50.0/23 maxlen: 23
                          191.96.50.0/23 maxlen: 24
                          191.96.70.0/23 maxlen: 23
                          191.96.70.0/23 maxlen: 24
                          191.96.73.0/24 maxlen: 24
                          191.96.95.0/24 maxlen: 24
                          191.96.97.0/24 maxlen: 24
                          191.96.98.0/24 maxlen: 24
                          191.96.108.0/24 maxlen: 24
                          191.96.109.0/24 maxlen: 24
                          191.96.125.0/24 maxlen: 24
                          191.96.167.0/24 maxlen: 24
                          191.96.175.0/24 maxlen: 24
                          191.96.188.0/24 maxlen: 24
                          191.96.189.0/24 maxlen: 24
                          191.96.192.0/24 maxlen: 24
                          191.96.252.0/24 maxlen: 24
                          191.101.52.0/22 maxlen: 22
                          191.101.52.0/22 maxlen: 24
                          191.101.62.0/24 maxlen: 24
                          191.101.65.0/24 maxlen: 24
                          191.101.73.0/24 maxlen: 24
                          191.101.92.0/24 maxlen: 24
                          191.101.93.0/24 maxlen: 24
                          191.101.106.0/24 maxlen: 24
                          191.101.109.0/24 maxlen: 24
                          191.101.110.0/24 maxlen: 24
                          191.101.114.0/24 maxlen: 24
                          191.101.118.0/24 maxlen: 24
                          191.101.134.0/24 maxlen: 24
                          191.101.142.0/23 maxlen: 24
                          191.101.164.0/23 maxlen: 23
                          191.101.164.0/23 maxlen: 24
                          191.101.168.0/24 maxlen: 24
                          191.101.173.0/24 maxlen: 24
                          191.101.205.0/24 maxlen: 24
                          191.101.224.0/24 maxlen: 24
                          191.101.250.0/24 maxlen: 24
                          193.31.40.0/24 maxlen: 24
                          193.58.104.0/24 maxlen: 24
                          193.107.208.0/22 maxlen: 24
                          194.53.140.0/22 maxlen: 24
                          194.53.140.0/24 maxlen: 24
                          194.110.12.0/22 maxlen: 24
                          213.109.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2e:2e:87:3f:47:12:3f:96:a2:bd:aa:fa:14:19:7c:ae:61:e2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Feb 26 16:15:11 2026 GMT
            Not After : Feb 25 16:20:11 2027 GMT
        Subject: CN=60246AA1F069E939AE3D300F14121B4669D97356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:8e:6c:06:02:63:bb:10:5e:0b:25:53:a5:
                    5b:6b:19:70:99:54:01:9b:5c:c7:a7:50:d7:5f:78:
                    ab:85:46:aa:13:d8:47:b1:68:59:7e:07:77:d9:e3:
                    2e:c2:42:6a:f3:94:1a:3c:d5:80:b3:a6:6f:73:d8:
                    df:6c:67:bf:d3:70:11:c6:61:4d:9e:86:ce:b2:3c:
                    21:ae:51:97:89:e2:10:57:fc:6d:16:e0:7d:04:3e:
                    63:f2:03:39:33:d5:ae:46:e7:3a:7b:e0:2b:50:6e:
                    7f:ce:94:80:cd:4f:35:33:47:5e:66:79:05:aa:3b:
                    67:3f:e5:1c:00:81:9a:7a:7e:fb:5f:95:43:5d:f3:
                    fb:d9:45:96:b2:78:14:31:10:85:10:f4:c2:37:01:
                    ff:16:88:a3:6b:25:dd:3a:df:59:2e:c7:d7:07:a4:
                    6e:48:f7:a7:50:86:34:31:fe:2d:10:ed:5f:2e:ec:
                    a4:ac:71:3e:ba:43:2f:5d:0a:e9:c8:9d:01:1f:6a:
                    4e:f6:a1:5a:2a:ab:ae:16:b8:14:f8:e1:e9:60:3c:
                    83:5a:8e:44:82:e5:1b:10:73:cc:92:c4:cd:d9:44:
                    37:b7:1b:04:fa:d5:80:a3:b7:e9:17:6c:5e:22:12:
                    97:da:98:e9:7c:27:b2:d5:d9:42:0b:8f:7d:0c:ab:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:24:6A:A1:F0:69:E9:39:AE:3D:30:0F:14:12:1B:46:69:D9:73:56
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.22.0/23
                  2.58.28.0/24
                  2.58.173.0/24
                  5.45.36.0/23
                  5.181.131.0/24
                  5.252.68.0/22
                  5.252.73.0/24
                  5.252.79.0/24
                  5.252.161.0/24
                  37.143.60.0/22
                  45.87.186.0/24
                  45.89.241.0/24
                  45.95.39.0/24
                  45.133.170.0/24
                  45.137.28.0/22
                  85.208.74.0/23
                  89.19.48.0/24
                  92.119.35.0/24
                  130.185.124.0/22
                  141.98.88.0/22
                  149.62.41.0/24
                  179.61.130.0/24
                  179.61.143.0/24
                  179.61.156.0/24
                  179.61.158.0/24
                  179.61.195.0/24
                  179.61.204.0/23
                  179.61.236.0/24
                  181.41.193.0/24
                  181.41.213.0/24
                  181.41.222.0/23
                  181.214.34.0-181.214.36.255
                  181.214.42.0/24
                  181.214.52.0/24
                  181.214.89.0/24
                  181.214.117.0/24
                  181.214.123.0/24
                  181.214.176.0/24
                  181.214.179.0/24
                  181.214.181.0/24
                  181.214.184.0/24
                  181.214.242.0/24
                  181.215.9.0-181.215.11.255
                  181.215.16.0/24
                  181.215.37.0/24
                  181.215.44.0/24
                  181.215.46.0/24
                  181.215.48.0/24
                  181.215.71.0/24
                  181.215.89.0/24
                  181.215.152.0/24
                  181.215.165.0/24
                  181.215.181.0/24
                  181.215.183.0-181.215.185.255
                  181.215.231.0/24
                  185.34.40.0/23
                  185.130.204.0/22
                  185.135.8.0/22
                  185.137.12.0/22
                  185.139.236.0/22
                  185.141.164.0/23
                  185.142.26.0/23
                  185.145.36.0/22
                  185.158.100.0-185.158.104.255
                  185.158.106.0/24
                  185.158.148.0/24
                  185.172.58.0/23
                  185.173.24.0-185.173.26.255
                  185.173.32.0/23
                  185.174.62.0/24
                  191.96.42.0/23
                  191.96.50.0/23
                  191.96.70.0/23
                  191.96.73.0/24
                  191.96.95.0/24
                  191.96.97.0-191.96.98.255
                  191.96.108.0/23
                  191.96.125.0/24
                  191.96.167.0/24
                  191.96.175.0/24
                  191.96.188.0/23
                  191.96.192.0/24
                  191.96.252.0/24
                  191.101.52.0/22
                  191.101.62.0/24
                  191.101.65.0/24
                  191.101.73.0/24
                  191.101.92.0/23
                  191.101.106.0/24
                  191.101.109.0-191.101.110.255
                  191.101.114.0/24
                  191.101.118.0/24
                  191.101.134.0/24
                  191.101.142.0/23
                  191.101.164.0/23
                  191.101.168.0/24
                  191.101.173.0/24
                  191.101.205.0/24
                  191.101.224.0/24
                  191.101.250.0/24
                  193.31.40.0/24
                  193.58.104.0/24
                  193.107.208.0/22
                  194.53.140.0/22
                  194.110.12.0/22
                  213.109.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:61:63:62:ba:8a:b5:14:98:3d:28:a2:56:6b:3d:ef:6e:
         b4:22:d5:85:5f:b1:88:db:80:23:93:e3:02:a2:83:e8:39:2c:
         5a:e2:f5:2a:ee:79:d7:d1:db:9f:24:ba:62:7d:b4:a2:99:2a:
         60:ef:92:dd:1e:c0:8f:72:6e:b5:64:8b:31:63:69:c5:eb:5f:
         d9:0a:75:74:5f:97:2d:81:e1:b0:29:fb:60:91:9c:76:a7:38:
         46:d6:3f:65:01:28:b2:b8:ab:ef:fe:f5:9d:87:d7:73:92:ac:
         61:be:00:f5:1e:1f:ff:f2:c3:9a:cf:d6:1e:08:8c:ee:ad:f7:
         14:67:d8:25:b8:c4:72:e3:8c:bd:9f:c5:a7:d8:e5:70:e3:21:
         4a:fc:a6:84:01:22:7b:22:b6:a9:84:6f:18:59:0d:5b:ca:dd:
         b5:f3:fc:b8:fe:d4:47:81:e2:86:f0:14:42:52:ab:2d:10:dc:
         bb:90:80:66:49:45:55:45:63:af:ef:53:0b:e2:fb:99:34:48:
         b5:02:ce:6b:7c:7b:c6:ee:77:89:63:5e:ac:5d:2f:6b:61:19:
         bf:b0:2d:fd:e8:e2:f4:b3:a4:24:14:65:db:6e:a0:d4:2b:97:
         f5:df:6a:37:45:26:06:0e:d7:8e:1a:b4:18:97:d4:71:ea:37:
         d8:34:42:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:30 2026 by rpki-client