Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS61142.roa
File: AS61142.roa (raw, json)
Hash identifier: 507+KdJkkaR16m3h8+VcSIJC+P1EWfMoJe6IPrsyGQA=
Subject key identifier: E8:01:1E:CC:74:16:1D:6D:58:50:1B:47:94:A0:FF:3B:4E:3E:21:E6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 23D41CF73FE6FCB352EF602C68F3826B73965041
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS61142.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 61142
IP address blocks: 2a0f:85c1:850::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d4:1c:f7:3f:e6:fc:b3:52:ef:60:2c:68:f3:82:6b:73:96:50:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=E8011ECC74161D6D58501B4794A0FF3B4E3E21E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:04:f0:33:c0:f0:85:6e:b2:00:30:ab:61:
da:52:c0:62:69:f4:9b:68:d3:55:80:91:87:f3:58:
99:44:07:62:5f:99:2a:a8:9d:df:5a:25:10:2e:c4:
5c:54:6d:90:dd:24:a8:86:84:1e:e0:3f:ea:d8:a1:
3e:12:bb:fc:74:6f:e1:c6:1f:18:cb:41:70:00:aa:
56:cc:6b:5e:65:0f:a3:dd:db:45:23:fa:12:57:51:
41:10:a1:8d:2d:aa:5b:40:1e:ed:ad:b7:a4:db:bb:
59:71:a7:8a:87:57:23:dd:89:e1:59:5d:b9:26:97:
0d:c0:98:dc:5a:09:1b:f8:d0:02:aa:95:d3:0e:53:
a1:37:e0:c8:0a:de:c0:7f:fd:89:54:bd:62:a3:75:
ae:5e:95:50:21:e8:7e:ae:01:fb:84:fa:89:6e:1d:
40:64:84:90:54:ae:48:2a:b5:31:ac:43:14:0f:db:
11:a9:3f:d4:60:d5:83:3e:8a:da:68:1a:82:3e:59:
f4:08:1b:df:e8:67:a6:da:9a:9c:ac:4a:f1:bc:0f:
e5:ca:93:0c:95:c1:f5:fd:d7:cf:7c:27:3b:5f:5d:
42:87:c6:f7:b9:2c:b0:ea:ad:1e:34:12:37:db:40:
d7:06:ec:72:ad:5d:f0:93:4a:14:68:c0:ba:70:e6:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:1E:CC:74:16:1D:6D:58:50:1B:47:94:A0:FF:3B:4E:3E:21:E6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS61142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:850::/44
Signature Algorithm: sha256WithRSAEncryption
e7:80:c4:8b:fa:f0:9b:83:82:92:51:01:c9:d9:fb:e9:a7:7e:
54:81:76:b8:7f:63:3b:1e:a1:8e:71:2b:a4:e6:ac:3c:28:94:
a1:4e:55:63:81:e7:c4:d0:62:de:bf:7a:d8:9a:ea:62:cc:39:
dc:f7:a5:d1:90:8d:9d:cc:34:c0:1b:d8:b7:73:ce:69:f5:5f:
68:11:04:2c:f1:f0:ea:7a:24:7b:35:17:8a:52:43:e7:79:87:
2b:7c:95:c9:27:aa:0f:2f:ce:ac:4d:a9:5d:96:8d:ce:14:8d:
e4:6c:44:a0:3a:01:03:7f:94:fa:25:50:7f:36:ef:2a:3a:c7:
73:7c:f4:07:63:ce:fc:c7:01:0a:bc:70:f8:8a:53:00:31:c7:
b5:64:92:bb:92:a8:06:6a:86:2c:37:e7:7e:c5:61:97:33:31:
08:34:f1:01:13:c4:79:05:99:4b:0e:17:05:86:7c:74:eb:d6:
1e:b3:98:e8:e2:b5:bc:2f:8a:76:b0:99:ee:e5:e9:55:01:ad:
d0:8d:24:d7:56:42:75:16:3f:5e:fd:84:34:7c:5f:ac:fb:33:
ad:70:77:d4:57:f8:5c:4c:4e:5f:89:cb:b4:d5:92:a4:99:28:
6a:c4:ff:96:d6:c9:69:6e:ef:fa:f9:e7:dd:8f:15:6c:48:27:
97:3f:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 05:46:22 2026 by rpki-client