Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS61244.roa
File: AS61244.roa (raw, json)
Hash identifier: tx+MizKBhdMazdXKX+OUiYPvw9h3S4+md2sq9Qmz5yg=
Subject key identifier: BD:04:65:5D:9C:AB:F8:05:5E:00:38:5C:CE:AB:DE:7E:24:CD:2A:A4
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3FD37EEDB70C6C5550982A89CB2EC6F214316957
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS61244.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 61244
IP address blocks: 46.236.224.0/21 maxlen: 21
46.236.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d3:7e:ed:b7:0c:6c:55:50:98:2a:89:cb:2e:c6:f2:14:31:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=BD04655D9CABF8055E00385CCEABDE7E24CD2AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:f0:09:bd:0d:a1:09:5b:af:db:4b:9e:5a:
39:c6:a6:84:62:e7:77:dc:fb:6f:00:c5:63:8a:9a:
27:00:c5:48:02:da:18:f0:e0:9d:f2:3a:25:ab:5a:
bc:6a:c7:aa:51:98:d0:5e:8c:bf:a1:0d:19:e2:a3:
dc:51:c3:fe:43:9a:cc:13:8b:8e:f9:ac:e8:6d:0c:
2a:cc:6e:bb:61:bf:69:db:d5:79:1b:77:37:3d:bb:
c6:df:3c:f8:f4:81:89:05:07:3b:dc:2e:a7:10:7d:
22:d6:b6:c3:0e:d6:7a:12:6c:17:3c:bf:12:33:56:
fd:74:33:61:67:01:c5:ec:88:4f:a8:36:80:32:66:
c5:27:af:d6:22:81:cf:ac:48:a7:2d:f3:c7:cb:de:
66:e5:12:5c:d7:8d:0d:ec:78:50:1d:69:ca:16:b3:
68:f1:8b:7a:ad:55:07:d2:d1:ce:00:55:c6:16:d4:
5d:bf:a3:4e:ff:06:4e:77:1a:d4:aa:95:58:96:8b:
1c:c2:30:33:40:f7:1c:da:b8:dd:8d:f2:f9:e3:0f:
39:03:0c:ff:ca:b9:5b:ab:48:06:ee:bb:b6:98:bd:
6a:b8:62:04:5e:2f:08:35:f7:d8:14:16:6f:80:a7:
64:fb:ce:28:6d:a6:95:45:27:3f:f4:c3:c6:04:a9:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:65:5D:9C:AB:F8:05:5E:00:38:5C:CE:AB:DE:7E:24:CD:2A:A4
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS61244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:96:6e:1b:f4:eb:50:04:5a:49:3e:a3:ed:c7:c6:97:07:b0:
fe:c7:b1:32:ac:e7:14:ba:96:c8:df:ef:58:46:63:5a:73:16:
f5:19:58:bd:f8:b3:b5:ff:62:11:29:8b:4b:21:b2:7c:5a:58:
dd:a9:c8:97:bf:cd:4e:fc:48:7b:49:1b:9e:c1:64:7d:b5:82:
a4:d2:fc:4d:d5:d2:4b:e4:7c:78:7e:68:c1:ae:ef:b6:99:59:
2e:f8:3f:46:54:9b:8e:6d:cf:53:81:bf:3b:d7:c1:6d:d9:13:
58:a4:0d:27:1b:97:ba:e6:06:d5:08:6d:cc:d7:03:0a:34:00:
46:e1:1e:92:c9:81:a6:28:13:19:59:84:41:a7:dc:3b:a3:f1:
b2:18:79:bc:f1:91:9a:5a:a4:12:3e:81:d2:eb:6b:23:cd:0f:
dd:cf:01:3e:22:5d:c9:e9:72:25:8d:d0:f6:0d:2c:ce:31:5e:
6d:7b:01:16:10:12:4b:02:bc:39:32:22:e0:94:71:cc:a3:5e:
4a:e2:b3:20:24:eb:f7:57:be:60:37:03:f5:a9:43:c4:8c:f9:
bd:8e:dc:3f:e9:d4:33:45:83:99:8c:74:65:55:eb:52:ff:60:
88:ac:cd:89:a0:8c:17:5f:2b:16:2f:0d:27:4a:2b:0e:70:e2:
85:fc:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:00 2026 by rpki-client