Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS23061.roa
File: AS23061.roa (raw, json)
Hash identifier: Uw+BDQTTZ3WfqMS42N7JcBzom/UyG1eh6f31pWRDyBU=
Subject key identifier: 94:C9:0A:2F:6C:39:0A:38:07:F5:EF:2A:5A:AC:4C:A9:64:87:3D:71
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 754AD99659102C6178386F32CA0E9394E28EB98F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS23061.roa
Signing time: Mon 18 May 2026 12:14:18 +0000
ROA not before: Mon 18 May 2026 12:09:18 +0000
ROA not after: Mon 17 May 2027 12:14:18 +0000
asID: 23061
IP address blocks: 51.241.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4a:d9:96:59:10:2c:61:78:38:6f:32:ca:0e:93:94:e2:8e:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 18 12:09:18 2026 GMT
Not After : May 17 12:14:18 2027 GMT
Subject: CN=94C90A2F6C390A3807F5EF2A5AAC4CA964873D71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:db:bd:c8:a2:95:39:25:d8:50:e1:c1:30:
66:9a:c9:16:f5:a8:ad:67:68:80:5a:47:93:a9:6e:
5e:53:3b:a6:eb:d5:6d:cc:83:b5:3a:f9:30:2f:15:
cb:8c:e8:d6:66:12:2a:f7:6f:a9:06:45:08:db:25:
31:56:2e:be:23:e4:09:aa:d3:0c:69:1d:85:8d:de:
02:0b:77:cd:f0:79:18:59:f9:9b:d9:93:1d:60:32:
4a:73:a7:17:6b:10:5d:3c:f3:1f:ae:84:c2:49:3d:
9e:10:bc:93:97:d7:e2:a2:1b:15:e7:bd:13:5b:f1:
d3:79:0a:0e:36:17:f1:d9:3b:a8:4f:4b:07:d2:2b:
2a:2c:9d:7c:bb:aa:0c:32:6c:f0:f7:d6:99:82:25:
cd:73:92:67:c4:53:53:c8:ae:5b:3e:82:8b:e0:48:
aa:bc:95:c9:fa:b7:26:20:83:c6:5c:94:8d:fb:e3:
b5:41:10:b2:d7:d2:47:09:ed:31:4e:3a:c6:86:83:
1e:54:87:89:86:52:8a:4c:90:e7:3f:df:14:09:ce:
d2:f7:7e:f8:f3:89:c9:60:f1:bd:d8:db:16:57:2b:
94:64:db:58:df:16:f0:b2:40:3b:8c:a6:88:4b:93:
4e:0a:82:b2:84:50:c6:83:13:16:1c:bd:fb:0c:a7:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:0A:2F:6C:39:0A:38:07:F5:EF:2A:5A:AC:4C:A9:64:87:3D:71
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS23061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.240.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:22:71:8c:22:4f:a0:20:7c:2e:0a:56:15:4e:34:eb:e4:ea:
d6:99:98:dc:15:fc:94:b6:6d:9f:e5:91:dc:4e:74:4a:3d:9d:
d2:59:24:89:a8:f7:d0:ff:31:dc:89:83:b0:80:ee:e7:ab:82:
0a:3d:ad:81:d3:93:eb:b3:18:9a:0c:00:49:5a:9b:68:61:1e:
e8:2f:d1:30:e8:fa:79:99:1e:61:9c:70:9c:a5:13:f4:64:de:
39:12:8e:3d:1e:52:f1:69:d8:f6:4f:19:c0:f2:65:8a:aa:77:
5c:1b:90:7c:a5:b0:c6:73:05:36:80:fb:69:7f:2d:1f:88:d4:
51:ba:61:27:e6:c6:ec:08:71:d8:a0:c8:92:6b:d9:0d:df:75:
a4:97:ce:eb:d5:ae:45:0d:35:0d:36:26:32:c4:1f:8d:dc:10:
c1:da:2d:54:57:3d:a1:1e:ac:50:c6:aa:16:ed:83:de:38:3f:
b0:31:58:ed:d1:de:02:41:97:1f:18:e3:75:f7:d7:7e:1c:f3:
85:fa:6a:c8:53:45:8c:23:fc:5b:8c:95:1a:db:29:ed:de:f3:
56:4b:d5:b0:fb:20:79:50:e9:e2:d1:01:28:61:85:17:cd:14:
17:ce:12:e1:fe:16:b6:ec:44:58:ac:d7:79:16:10:66:b9:02:
0b:0e:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:13 2026 by rpki-client