Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS61120.roa
File: AS61120.roa (raw, json)
Hash identifier: K8pNED9TcdeoVHRMMR080ghmhCeMn9wLJbxWf0xM3bs=
Subject key identifier: 33:EE:4F:4B:CC:10:58:AF:F5:64:D3:8A:78:AA:F0:FC:B3:99:D8:54
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7CFAEB55B286B2AEB53A410A074BE806C05495B1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS61120.roa
Signing time: Tue 27 Oct 2026 09:49:51 +0000
ROA not before: Tue 27 Oct 2026 09:44:51 +0000
ROA not after: Tue 26 Oct 2027 09:49:51 +0000
asID: 61120
IP address blocks: 2a14:7581:f90::/44 maxlen: 44
2a14:7581:f90::/48 maxlen: 48
2a14:7581:f91::/48 maxlen: 48
2a14:7581:f92::/48 maxlen: 48
2a14:7581:f93::/48 maxlen: 48
2a14:7581:f94::/48 maxlen: 48
2a14:7581:f95::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 00:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fa:eb:55:b2:86:b2:ae:b5:3a:41:0a:07:4b:e8:06:c0:54:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 27 09:44:51 2026 GMT
Not After : Oct 26 09:49:51 2027 GMT
Subject: CN=33EE4F4BCC1058AFF564D38A78AAF0FCB399D854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:3f:87:7f:41:65:85:04:f0:4b:8e:34:e9:
a3:bc:de:c9:c4:d8:0d:de:f8:91:77:ba:56:4b:01:
4f:17:db:44:68:0d:fb:58:cf:74:e3:9d:ba:8c:79:
93:f0:04:15:75:78:66:49:e4:ba:46:59:b0:74:62:
86:fe:b9:67:8c:fc:bf:27:be:69:61:a9:26:e7:03:
c9:d5:bd:ea:f9:e5:20:9f:1e:d1:28:91:0d:03:1e:
90:a3:e8:0a:a4:40:62:95:84:07:4a:2a:4c:5c:fc:
12:41:ff:0f:31:c0:71:2d:e3:9f:1e:e9:a2:f6:fe:
77:ce:8f:51:b0:86:68:2d:e4:62:a3:de:d6:4a:8e:
4a:c9:b7:9d:c7:b2:b7:8a:36:cc:93:6c:9d:39:36:
d3:95:1f:6f:eb:90:07:36:21:60:32:99:7a:30:d4:
a2:0b:80:81:bb:8a:13:07:3c:04:ea:00:aa:e3:b4:
a0:2f:31:78:f3:a7:a3:a4:31:a6:2c:f5:4c:ee:bf:
43:43:86:45:fa:47:e6:2b:ce:3c:9f:49:28:d4:44:
09:4f:ec:e3:02:54:94:1e:b1:c6:08:1b:ec:9d:5c:
6d:58:4e:b5:1e:3b:a9:c4:77:16:cb:56:02:86:3b:
b0:4e:70:d6:f9:93:f5:38:24:a4:1d:eb:f1:4e:61:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:4F:4B:CC:10:58:AF:F5:64:D3:8A:78:AA:F0:FC:B3:99:D8:54
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS61120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f90::/44
Signature Algorithm: sha256WithRSAEncryption
74:30:ae:0a:20:55:e3:f2:7c:3b:74:2d:f3:ac:9f:db:80:26:
45:85:9b:6b:42:41:9d:cd:65:1a:bc:cc:3e:7e:de:27:6b:51:
73:29:9b:e9:ca:e8:12:28:d0:58:bf:96:f9:46:0a:bf:02:c6:
e0:7c:d7:43:c8:03:61:9c:3d:aa:e1:58:e3:72:06:9b:22:24:
d6:b9:d4:c0:d3:a2:c4:8c:8f:bf:60:ef:e6:b3:d2:2c:9a:14:
a1:ea:33:0b:c2:2c:4d:c4:ea:59:ee:ca:40:7b:d3:d5:e8:3d:
54:6b:43:7a:48:04:49:39:ba:b5:ed:bb:39:ec:33:2a:8f:81:
3a:b0:52:43:51:a5:22:d5:ac:6f:ae:72:6b:47:2b:db:c9:78:
93:d6:c8:6c:1f:0d:e4:6c:68:5f:2b:e2:ed:eb:23:59:72:1e:
23:08:6b:22:8a:b4:3c:c2:fe:d2:01:5a:9b:01:9c:d8:1a:57:
1b:05:24:e0:36:9d:17:53:ce:8b:35:d3:8e:66:98:7f:c3:ea:
56:b0:bb:fb:a7:a3:54:b6:89:b4:2b:74:e9:1e:23:88:e0:7c:
d2:1e:4e:b4:00:f5:db:02:06:ba:71:87:64:19:7a:60:04:4b:
e5:e7:90:a1:d7:19:84:4f:c4:00:3a:c7:13:53:b0:5f:05:e3:
ae:72:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 15:44:06 2026 by rpki-client