Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: i46zRAUl1WrZ532so4PMfYUcSK8LSq0TX/0OSKgZR9s=
Subject key identifier: 48:DD:62:92:A1:E7:C3:DF:E8:A6:01:68:6B:07:61:94:A0:03:52:C5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53C5A207CFD9A97607124A910071217D4E731938
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
Signing time: Fri 29 Aug 2025 07:20:38 +0000
ROA not before: Fri 29 Aug 2025 07:15:38 +0000
ROA not after: Fri 28 Aug 2026 07:20:38 +0000
asID: 61317
IP address blocks: 82.23.195.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.26.66.0/24 maxlen: 24
82.27.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c5:a2:07:cf:d9:a9:76:07:12:4a:91:00:71:21:7d:4e:73:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 29 07:15:38 2025 GMT
Not After : Aug 28 07:20:38 2026 GMT
Subject: CN=48DD6292A1E7C3DFE8A601686B076194A00352C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:94:8a:26:c7:1c:b9:3c:01:56:e2:06:a9:
c1:19:34:4b:4a:f4:90:76:7f:6d:2d:99:27:6f:3d:
e7:78:ad:e0:b9:3c:c4:33:bf:c0:55:e4:bd:39:73:
03:2d:fc:c4:11:ef:a0:7a:52:8a:0d:44:55:d2:76:
cb:00:40:bf:08:da:9a:9d:79:cb:3c:8a:90:8f:1c:
4a:c2:9c:d2:6c:ef:0b:80:4b:b6:79:e2:84:1b:c0:
ab:bf:7a:82:4e:81:2f:66:00:2e:34:bd:50:55:59:
c6:d5:06:5d:87:92:50:ce:12:6c:89:d9:9d:45:4c:
48:d2:e4:84:67:a8:15:ff:d1:ea:36:ff:5b:e1:64:
ea:25:fe:d0:68:12:39:63:19:e0:87:96:c0:9f:93:
69:2c:15:2a:52:e9:e7:26:79:c5:2c:e5:b1:92:4e:
e3:43:11:e7:1e:ad:43:0a:2d:2c:34:1e:54:90:1e:
cd:81:26:cd:35:38:db:31:fd:ee:1e:a4:02:26:da:
6d:cd:e2:f6:df:f7:c0:49:ec:5f:78:b6:48:2c:5d:
2d:74:20:60:77:34:bd:9b:dd:3f:1f:8f:17:80:65:
c1:23:1d:dc:42:37:76:42:9c:f2:bb:a9:d7:3c:2b:
d9:2e:7d:93:64:8e:32:29:37:72:08:fa:cc:6b:81:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:62:92:A1:E7:C3:DF:E8:A6:01:68:6B:07:61:94:A0:03:52:C5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.195.0/24
82.24.92.0/22
82.26.66.0/24
82.27.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:af:34:a8:3b:9a:91:52:59:be:35:eb:05:b6:5a:62:ce:b1:
84:3f:f8:5f:8d:78:84:d8:49:16:9f:7c:a4:2c:05:cd:c0:84:
fd:f7:8b:2b:02:a3:11:94:d4:65:ec:6a:5e:46:b0:82:9e:42:
98:71:c3:dc:69:04:f3:49:bb:6a:5a:59:b0:43:1f:29:63:e4:
e1:24:0c:e0:5f:84:8f:a3:66:87:99:40:c8:42:2e:ca:2b:50:
d9:72:f2:50:71:69:1f:f6:1e:b3:7f:10:58:9f:f5:84:a5:78:
02:06:cd:eb:35:0a:6b:d9:88:14:b1:5b:b6:7e:0c:04:bf:19:
42:83:c5:35:9d:b2:db:77:19:51:d1:5e:26:32:81:ad:63:6a:
10:78:79:1b:d2:d2:d8:2a:cc:b1:59:b2:dc:49:cb:88:8a:24:
34:56:47:cd:27:e2:ad:d2:d1:ed:05:50:e2:f8:84:a5:0f:d3:
12:c3:8d:f7:16:71:f4:db:47:b5:57:6e:2c:9a:16:ee:3b:62:
c8:47:a8:1d:54:c5:71:a9:fd:3c:b2:c1:bf:50:44:dd:13:6e:
17:bd:5b:65:28:b9:9a:20:04:01:20:96:ff:9e:0e:7e:fd:a0:
9b:84:81:7b:78:fc:a3:23:6c:e0:d7:d2:2c:95:e8:98:6c:d5:
47:c4:f1:e5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUU8WiB8/ZqXYHEkqRAHEhfU5zGTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA4MjkwNzE1MzhaFw0yNjA4MjgwNzIwMzhaMDMxMTAvBgNV
BAMTKDQ4REQ2MjkyQTFFN0MzREZFOEE2MDE2ODZCMDc2MTk0QTAwMzUyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHJSKJsccuTwBVuIGqcEZNEtK
9JB2f20tmSdvPed4reC5PMQzv8BV5L05cwMt/MQR76B6UooNRFXSdssAQL8I2pqd
ecs8ipCPHErCnNJs7wuAS7Z54oQbwKu/eoJOgS9mAC40vVBVWcbVBl2HklDOEmyJ
2Z1FTEjS5IRnqBX/0eo2/1vhZOol/tBoEjljGeCHlsCfk2ksFSpS6ecmecUs5bGS
TuNDEecerUMKLSw0HlSQHs2BJs01ONsx/e4epAIm2m3N4vbf98BJ7F94tkgsXS10
IGB3NL2b3T8fjxeAZcEjHdxCN3ZCnPK7qdc8K9kufZNkjjIpN3II+sxrgYAxAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUSN1ikqHnw9/opgFoawdhlKADUsUwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjEzMTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABSF8MD
BAJSGFwDBABSGkIDBABSGwgwDQYJKoZIhvcNAQELBQADggEBAG2vNKg7mpFSWb41
6wW2WmLOsYQ/+F+NeITYSRaffKQsBc3AhP33iysCoxGU1GXsal5GsIKeQphxw9xp
BPNJu2paWbBDHylj5OEkDOBfhI+jZoeZQMhCLsorUNly8lBxaR/2HrN/EFif9YSl
eAIGzes1CmvZiBSxW7Z+DAS/GUKDxTWdstt3GVHRXiYyga1jahB4eRvS0tgqzLFZ
stxJy4iKJDRWR80n4q3S0e0FUOL4hKUP0xLDjfcWcfTbR7VXbiyaFu47YshHqB1U
xXGp/Tyywb9QRN0Tbhe9W2UouZogBAEglv+eDn79oJuEgXt4/KMjbODX0iyV6Jhs
1UfE8eU=
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:43:42 2025 by rpki-client