Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61049.roa
File: AS61049.roa (raw, json)
Hash identifier: vC5+8XV1EoWSJ8eR1U4WnSr7SFYJEaPHWppc4ntMd3I=
Subject key identifier: 02:D3:0D:A0:2A:16:FC:89:DE:05:70:98:07:CC:F0:E0:91:D3:45:6B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1725BE3E0016041EA79607CA96A443BD50EF52BC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61049.roa
Signing time: Mon 25 May 2026 09:47:16 +0000
ROA not before: Mon 25 May 2026 09:42:16 +0000
ROA not after: Mon 24 May 2027 09:47:16 +0000
asID: 61049
IP address blocks: 82.25.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:25:be:3e:00:16:04:1e:a7:96:07:ca:96:a4:43:bd:50:ef:52:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 25 09:42:16 2026 GMT
Not After : May 24 09:47:16 2027 GMT
Subject: CN=02D30DA02A16FC89DE05709807CCF0E091D3456B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:2f:5c:a7:18:ff:28:ff:c7:3b:f8:8c:07:
7e:a4:b6:a9:c8:2e:60:6e:e5:01:1c:2c:3a:e4:55:
47:36:c1:b7:fa:35:21:7f:51:d7:39:14:cc:42:25:
53:85:90:86:d8:71:32:28:1b:7c:c0:e2:4c:3e:4b:
9b:58:16:d9:a6:6e:67:f1:a9:f2:43:53:b0:41:39:
50:a5:47:cd:63:09:6e:7f:2b:b3:a0:7c:4c:01:f5:
97:6e:53:22:be:f7:a2:00:9c:70:1f:7b:8b:16:4d:
5a:52:ea:c3:0c:a0:23:4f:ae:67:2a:bb:9d:53:05:
a9:26:eb:66:4f:ce:b0:4c:ad:a3:46:44:39:11:ff:
e8:d7:6f:5f:c8:82:c7:61:08:4a:a4:6e:09:f6:62:
00:b6:57:b2:ae:a8:01:ff:b7:10:b2:f7:f9:a1:55:
a3:5c:7e:5b:85:2f:18:7f:a7:71:74:f8:63:fe:9b:
25:31:63:16:ab:b8:24:a0:50:f1:23:16:cb:1e:b1:
96:ff:c3:e4:7b:59:35:6d:8d:15:fc:ee:f6:63:09:
cb:7e:60:10:c8:0c:12:44:32:58:ef:e0:42:6b:07:
fe:b8:84:40:c7:4d:ba:c2:2a:d3:b3:1d:76:36:c0:
93:db:94:7e:af:98:1c:30:29:3e:77:2d:c9:15:fd:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D3:0D:A0:2A:16:FC:89:DE:05:70:98:07:CC:F0:E0:91:D3:45:6B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:04:58:d6:1c:04:b2:0e:4d:e0:ef:0b:13:ef:9e:ec:b4:dd:
c1:7d:b1:52:62:3d:6b:8e:32:ba:f7:50:79:cf:30:32:e3:3a:
07:b8:9d:7e:a5:26:6d:0d:14:7c:74:b6:01:36:48:68:b5:38:
59:8b:e1:84:f3:31:b0:04:9e:33:f4:f0:3d:39:4a:1b:21:e2:
99:53:e5:a3:d2:9f:84:99:dc:9c:e7:69:7f:3b:1b:26:21:0b:
ea:38:99:42:87:20:b3:b5:fe:e2:f5:4f:99:70:19:b0:1e:d6:
f6:73:71:94:bf:11:22:8b:10:f6:71:3d:81:94:22:61:b4:e5:
dc:0b:bc:1a:ea:70:31:5e:7a:68:78:97:c1:c2:dd:96:74:78:
86:fc:e1:4c:bf:e4:ab:ce:cb:87:47:6e:51:40:3b:40:2c:11:
8e:c3:83:8c:79:82:ff:8c:87:56:85:ab:7c:95:99:5d:ae:e6:
22:e9:de:4d:4e:ac:c4:ae:70:f0:cd:df:d9:70:01:6e:66:96:
cc:f1:4d:0c:24:06:84:f4:a4:72:5c:4e:ab:e1:df:53:34:e3:
17:9c:f9:5a:cc:c4:8d:fb:b2:cd:dd:58:1a:b2:4b:37:92:50:
dc:ea:39:2c:25:03:0f:c5:0d:18:2a:1e:9c:a2:90:f1:94:31:
1c:59:e1:c4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUFyW+PgAWBB6nlgfKlqRDvVDvUrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjUwOTQyMTZaFw0yNzA1MjQwOTQ3MTZaMDMxMTAvBgNV
BAMTKDAyRDMwREEwMkExNkZDODlERTA1NzA5ODA3Q0NGMEUwOTFEMzQ1NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6i9cpxj/KP/HO/iMB36ktqnI
LmBu5QEcLDrkVUc2wbf6NSF/Udc5FMxCJVOFkIbYcTIoG3zA4kw+S5tYFtmmbmfx
qfJDU7BBOVClR81jCW5/K7OgfEwB9ZduUyK+96IAnHAfe4sWTVpS6sMMoCNPrmcq
u51TBakm62ZPzrBMraNGRDkR/+jXb1/IgsdhCEqkbgn2YgC2V7KuqAH/txCy9/mh
VaNcfluFLxh/p3F0+GP+myUxYxaruCSgUPEjFssesZb/w+R7WTVtjRX87vZjCct+
YBDIDBJEMljv4EJrB/64hEDHTbrCKtOzHXY2wJPblH6vmBwwKT53LckV/XMhAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUAtMNoCoW/IneBXCYB8zw4JHTRWswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjEwNDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSGbUw
DQYJKoZIhvcNAQELBQADggEBAA4EWNYcBLIOTeDvCxPvnuy03cF9sVJiPWuOMrr3
UHnPMDLjOge4nX6lJm0NFHx0tgE2SGi1OFmL4YTzMbAEnjP08D05Shsh4plT5aPS
n4SZ3JznaX87GyYhC+o4mUKHILO1/uL1T5lwGbAe1vZzcZS/ESKLEPZxPYGUImG0
5dwLvBrqcDFeemh4l8HC3ZZ0eIb84Uy/5KvOy4dHblFAO0AsEY7Dg4x5gv+Mh1aF
q3yVmV2u5iLp3k1OrMSucPDN39lwAW5mlszxTQwkBoT0pHJcTqvh31M04xec+VrM
xI37ss3dWBqySzeSUNzqOSwlAw/FDRgqHpyikPGUMRxZ4cQ=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:50 2026 by rpki-client