Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS61102.roa
File: AS61102.roa (raw, json)
Hash identifier: 6ubl/6jtumndYPbDK/32BpzbW1NyO07UcJiucVmKd7g=
Subject key identifier: 05:AD:66:D0:A5:6A:07:F9:8B:A8:32:8F:23:A6:F5:8A:B1:EC:F3:6E
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 29C5903B08A5F33C42FD44AA4CBB8E41C11E4A6F
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS61102.roa
Signing time: Sun 04 Oct 2026 00:52:43 +0000
ROA not before: Sun 04 Oct 2026 00:47:43 +0000
ROA not after: Sun 03 Oct 2027 00:52:43 +0000
asID: 61102
IP address blocks: 81.218.109.0/24 maxlen: 24
81.218.219.0/24 maxlen: 24
81.218.235.0/24 maxlen: 24
81.218.238.0/24 maxlen: 24
82.80.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c5:90:3b:08:a5:f3:3c:42:fd:44:aa:4c:bb:8e:41:c1:1e:4a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:43 2026 GMT
Not After : Oct 3 00:52:43 2027 GMT
Subject: CN=05AD66D0A56A07F98BA8328F23A6F58AB1ECF36E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:df:f7:aa:b5:31:af:3f:6e:ce:4d:07:ca:
75:61:c1:e2:48:d9:7f:fd:d9:a3:a8:d5:da:74:a5:
3d:36:c3:65:95:04:92:09:0b:44:77:ab:1b:32:46:
c4:f7:59:67:55:f5:5f:d2:10:a2:90:2a:f6:7b:c2:
44:46:6d:b4:b2:64:29:04:53:ce:7c:0d:9a:1a:69:
57:1e:23:4c:15:32:61:76:74:38:30:e3:72:07:91:
55:88:10:66:c5:df:02:14:32:85:b5:3c:f9:a2:fb:
bb:8a:5b:e2:20:b6:03:a9:fe:a6:c1:85:e8:d1:f0:
73:ce:57:6c:f6:1f:d8:87:fd:de:9b:f0:a7:33:0e:
e8:a8:83:ae:e8:f3:93:c9:4d:00:c0:0d:ff:d2:b6:
40:74:be:24:3c:d3:a1:0a:9a:83:a2:aa:93:bd:2a:
5b:27:a9:73:9e:48:20:48:41:c5:57:fe:27:ef:d9:
a8:c1:25:1c:27:2c:a8:54:51:e6:2c:00:90:34:b6:
a3:d2:9a:5a:7c:99:9f:ac:43:5b:59:91:96:e4:c0:
d3:46:7c:e9:c6:a5:ec:6d:c0:b8:fa:33:28:ae:d0:
52:89:46:29:f0:fe:10:ff:15:2a:3b:55:0b:6a:13:
c7:02:1b:1b:2e:3d:42:cd:6a:1c:ba:24:22:87:ff:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:66:D0:A5:6A:07:F9:8B:A8:32:8F:23:A6:F5:8A:B1:EC:F3:6E
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS61102.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.218.109.0/24
81.218.219.0/24
81.218.235.0/24
81.218.238.0/24
82.80.245.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a0:6b:92:ee:67:f5:c5:f7:4d:fd:e9:da:65:1f:5e:72:c5:
1d:04:af:27:16:2d:97:47:6b:d3:1f:b8:a7:ba:ef:62:30:f8:
17:b9:c0:0d:9a:5c:58:3b:78:8e:ef:88:e8:e8:6e:79:69:65:
cf:bc:66:ac:28:d8:fa:6e:1f:aa:a8:55:d9:f3:c9:e6:66:85:
84:24:84:40:95:94:cc:8d:8c:d1:e9:be:3e:f4:7f:39:4b:bc:
c7:a5:6d:6c:37:a7:8a:b6:f1:02:26:eb:f4:23:19:df:0c:ed:
1f:39:81:e9:d3:0e:ed:9c:f3:d9:a8:81:c6:d6:9d:ee:bb:84:
dc:4c:64:82:5b:3f:5e:c2:f4:66:bf:ad:4f:53:42:f3:b2:a8:
e5:ba:33:96:a6:46:93:b9:b6:a7:6b:2a:a9:f9:3b:b7:b9:61:
d9:d8:c1:de:ec:0c:b9:b3:74:5c:5a:7c:54:6a:99:b0:9f:de:
a5:a7:7e:65:2c:13:2f:e3:22:92:26:85:3c:5d:0c:31:0d:8d:
5a:09:0d:b1:eb:43:f5:8c:7a:0b:82:0e:0c:64:ec:49:49:bf:
b0:fa:e0:3a:81:ce:16:db:e7:30:19:fb:8d:99:6c:47:d9:bd:
13:79:90:d8:1f:f9:4e:9b:a0:c5:ee:20:89:c8:b0:57:7c:06:
21:e2:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:30 2026 by rpki-client