Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61112.roa
File:                     AS61112.roa (raw, json)
Hash identifier:          8BOteAKyETlahKU9j9HaxI0tsNJ9EIu5xxwJDEmrs6w=
Subject key identifier:   59:31:5D:1E:DC:7E:F3:87:BB:B1:27:97:6C:07:3A:23:45:AF:67:A4
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       146C1449E15B130B979B238B22C4ECC0866016D3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61112.roa
Signing time:             Sun 13 Sep 2026 06:50:31 +0000
ROA not before:           Sun 13 Sep 2026 06:45:31 +0000
ROA not after:            Sun 12 Sep 2027 06:50:31 +0000
asID:                     61112
IP address blocks:        82.41.41.0/24 maxlen: 24
                          82.41.50.0/24 maxlen: 24
                          178.83.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6c:14:49:e1:5b:13:0b:97:9b:23:8b:22:c4:ec:c0:86:60:16:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Sep 13 06:45:31 2026 GMT
            Not After : Sep 12 06:50:31 2027 GMT
        Subject: CN=59315D1EDC7EF387BBB127976C073A2345AF67A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:a2:16:08:9f:6b:67:16:d2:66:5a:55:02:
                    9a:47:7e:eb:ed:42:10:ae:ac:5a:ee:35:e7:51:0b:
                    2b:93:46:01:a9:10:45:e5:24:7d:1c:b4:93:18:f7:
                    a6:1b:5a:66:b5:e9:88:9a:fd:42:94:55:02:c6:d5:
                    ce:42:6f:ff:4c:c5:a1:29:56:ff:97:8a:32:ab:da:
                    7d:9c:84:b6:12:08:14:bd:de:ac:96:4b:d0:c0:ca:
                    e1:c6:cd:a7:6c:65:3b:cd:95:36:38:10:17:89:44:
                    43:7d:7b:8a:18:84:50:10:40:e4:60:c4:1a:5c:af:
                    94:a7:55:24:c4:8c:0e:83:c0:60:e5:49:02:5b:38:
                    51:3d:6c:af:02:05:9b:b8:da:d8:c7:19:e6:6b:0c:
                    13:03:07:24:68:6b:e8:f3:77:89:61:61:37:68:ab:
                    db:81:47:f9:37:c8:f2:79:f0:c1:5a:53:5f:4b:c7:
                    0b:30:8c:d4:e8:7e:fa:6d:d2:24:77:cb:5c:bb:74:
                    00:2f:2d:a9:f8:0c:e9:e8:f4:57:1e:90:c8:0b:f9:
                    c6:65:2d:9f:49:96:85:e6:71:bf:c0:6c:79:35:da:
                    33:42:1d:4d:a8:aa:23:a0:33:c8:5e:b9:1a:e7:cc:
                    c9:4e:5c:e7:f2:7e:69:c1:10:a4:95:8e:23:5b:99:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:31:5D:1E:DC:7E:F3:87:BB:B1:27:97:6C:07:3A:23:45:AF:67:A4
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.41.41.0/24
                  82.41.50.0/24
                  178.83.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:43:04:68:4e:88:a9:e5:a9:dd:23:c3:67:08:21:a5:a7:
         67:5c:6e:0c:7b:4c:c4:10:91:22:83:e5:92:a4:a1:75:0e:de:
         9c:3b:30:44:62:f3:44:69:3f:9c:19:17:66:0b:6d:e3:d2:8d:
         5d:2e:90:9f:26:fb:17:46:f7:70:6e:f7:64:95:e5:1e:81:24:
         3c:63:d8:ce:58:df:b8:9e:d5:3b:6c:fb:74:17:69:b0:66:1e:
         08:7f:5b:00:6a:43:9b:64:63:f9:58:47:cb:73:9d:4f:da:0b:
         d4:24:31:16:41:ab:12:66:76:fe:58:fe:49:be:29:0f:f8:e5:
         a3:cc:1b:94:ec:cc:ca:7a:d6:f0:fe:56:63:92:fa:e2:7d:2d:
         c0:cd:91:55:5b:08:ce:f3:af:1d:59:20:29:0f:a5:e2:b2:d3:
         6e:5b:5c:6f:38:56:2d:71:b8:f3:6f:54:ab:de:97:af:6e:67:
         aa:59:55:6b:f7:47:6f:21:f9:8e:68:d1:c9:77:e9:b4:a5:71:
         f6:b8:e0:b7:62:ac:87:70:77:2b:14:3a:5c:b2:23:79:0d:d8:
         4f:2c:21:1e:a2:41:a8:35:e7:ac:86:2e:ee:50:b1:6d:4b:79:
         19:41:ba:92:3e:79:9e:f7:a9:e8:0d:e0:ad:84:1e:22:8f:71:
         ca:af:5c:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:05:20 2026 by rpki-client