Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: WCs/WX84+5458221S1zt22A/mmqGrxTLw6cLJFpZLJc=
Subject key identifier: 23:6F:41:AB:A3:E6:C6:48:95:C7:50:63:E1:80:FB:D4:30:FA:91:E5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4739D33F3EDC93BC34EA1016D241C56346DCDE23
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61317.roa
Signing time: Tue 09 Jun 2026 18:47:31 +0000
ROA not before: Tue 09 Jun 2026 18:42:31 +0000
ROA not after: Tue 08 Jun 2027 18:47:31 +0000
asID: 61317
IP address blocks: 141.11.10.0/23 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.35.0/24 maxlen: 24
141.11.44.0/22 maxlen: 24
141.11.82.0/23 maxlen: 24
141.11.121.0/24 maxlen: 24
141.11.182.0/23 maxlen: 24
141.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:39:d3:3f:3e:dc:93:bc:34:ea:10:16:d2:41:c5:63:46:dc:de:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 9 18:42:31 2026 GMT
Not After : Jun 8 18:47:31 2027 GMT
Subject: CN=236F41ABA3E6C64895C75063E180FBD430FA91E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:80:89:9c:75:73:30:f7:e6:87:48:ca:95:
71:39:9a:29:ff:97:f8:52:bf:3b:dd:fa:4b:95:5d:
7b:3f:78:25:12:a0:38:80:db:f4:f4:a1:02:ad:24:
b9:ab:49:3d:d2:64:5b:3b:8a:d0:e8:65:18:cb:1d:
10:52:77:24:9f:33:0f:31:e0:00:0e:81:e1:05:13:
e3:1b:9f:a4:63:7b:93:54:56:54:af:3a:55:2e:c1:
5a:00:e5:ee:80:b0:44:11:4f:43:7d:1c:0f:40:22:
60:1b:dc:d3:99:35:60:9d:0b:8c:2d:3a:f8:26:bd:
a7:13:cf:a2:bf:df:16:07:b7:99:3a:76:84:44:06:
a2:82:c2:b9:bd:98:eb:a4:2d:ca:e7:af:b1:08:6a:
37:a4:17:71:f1:10:88:ba:c0:f9:7c:4d:a8:08:5f:
28:f1:b7:a1:bd:a9:fe:cc:a0:6a:4b:26:c8:97:4e:
38:d4:a5:cd:d8:2f:7f:d2:c8:04:df:8c:a1:d3:1d:
6d:74:97:b4:7d:ed:fa:00:75:b4:33:98:ce:24:a2:
00:ca:07:83:e3:9a:8c:d0:bd:58:ae:ce:3d:8d:00:
09:e2:c9:8a:37:3f:c9:78:79:3b:48:e5:48:3d:db:
b6:89:62:12:5f:9e:58:14:d1:a6:0b:7a:67:05:67:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:41:AB:A3:E6:C6:48:95:C7:50:63:E1:80:FB:D4:30:FA:91:E5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.10.0/23
141.11.26.0/24
141.11.35.0/24
141.11.44.0/22
141.11.82.0/23
141.11.121.0/24
141.11.182.0/23
141.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a9:05:b9:c1:54:a6:2d:bd:df:d8:6e:2e:52:66:63:11:0d:
db:23:a6:3e:68:63:2a:4c:10:3c:99:1e:6c:9e:ed:89:4f:b9:
e1:83:af:fd:30:24:58:9a:af:59:20:5d:d4:cc:18:80:96:41:
2d:bc:ae:80:f0:ab:ad:f8:d5:ad:21:ad:6d:bc:a1:71:c5:75:
87:1e:7b:b1:1d:b3:d5:bf:65:35:07:a0:a4:41:f1:0d:f4:02:
4d:79:a8:30:e4:c0:92:df:2a:dc:c7:31:ef:89:df:2b:53:e6:
25:05:6e:41:18:d1:b4:b0:d5:00:83:7b:1d:62:8f:f2:71:fd:
ea:4c:e8:66:3d:b9:b6:9c:6a:92:d3:3b:88:ce:e2:88:af:43:
03:8d:f8:ea:22:31:81:72:07:de:4b:99:9a:3e:bf:be:2a:be:
64:02:0c:c7:30:25:36:a2:5d:32:16:d1:bd:6f:d6:47:6e:53:
6a:e5:44:f1:71:5c:b6:ed:f5:01:4a:ff:cc:2c:0a:e3:28:dd:
09:21:7f:76:30:2a:f5:d7:a0:37:cc:35:80:42:03:02:fb:64:
de:19:cf:f3:2e:d4:77:51:41:a8:c3:39:7a:7c:85:b6:af:46:
f3:5f:d0:62:0f:b7:b7:bf:a0:e9:c6:37:d2:48:76:46:e5:dd:
d8:58:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:09 2026 by rpki-client