This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61112.roa
File:                     AS61112.roa (raw, json)
Hash identifier:          FF5gdLnu8Tcr5yZWfrOG68xo803Y5O4UlvAu7csykzk=
Subject key identifier:   A9:47:96:AD:2F:70:B7:88:15:38:43:F4:9E:0C:2E:C6:38:FC:FC:01
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       7D119ED870AD78D3C3AE9377F7517ABB88BAC920
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61112.roa
Signing time:             Tue 09 Dec 2025 00:00:47 +0000
ROA not before:           Mon 08 Dec 2025 23:55:47 +0000
ROA not after:            Tue 08 Dec 2026 00:00:47 +0000
asID:                     61112
IP address blocks:        141.11.86.0/23 maxlen: 24
                          141.11.90.0/23 maxlen: 24
                          141.11.130.0/23 maxlen: 24
                          141.11.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:11:9e:d8:70:ad:78:d3:c3:ae:93:77:f7:51:7a:bb:88:ba:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec  8 23:55:47 2025 GMT
            Not After : Dec  8 00:00:47 2026 GMT
        Subject: CN=A94796AD2F70B788153843F49E0C2EC638FCFC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:5b:c8:74:23:db:d4:2d:ee:1d:d8:13:52:
                    ec:2c:92:07:78:c1:4c:ea:5b:28:65:95:f6:ec:e1:
                    e7:33:d8:10:8e:6d:fe:f6:2e:1e:25:b3:1a:6e:1b:
                    ff:c3:36:6d:7b:0c:fc:63:b1:dc:45:9a:b1:6e:da:
                    29:67:48:81:3b:b0:4e:ec:90:cc:c6:f0:7a:2a:08:
                    3c:6d:ed:da:7d:71:d6:9a:ef:f2:a1:6c:df:95:3f:
                    fb:49:ca:4b:4e:30:ce:c8:f1:4c:a0:19:87:a2:ec:
                    23:15:18:f9:ee:c4:18:e0:3e:0d:1e:03:27:24:95:
                    df:3e:58:2b:8b:86:76:23:f9:e2:07:4f:1f:c3:75:
                    42:c5:89:8e:8f:57:b6:f6:c8:39:67:c2:84:be:10:
                    88:b3:7e:48:96:46:81:c5:ef:29:49:d3:0c:de:8a:
                    77:1f:73:95:56:bc:d4:3f:57:28:36:22:26:c4:4a:
                    9b:cd:43:c1:5e:1b:8c:b9:7d:0a:54:27:9b:c5:af:
                    df:1e:8d:fc:79:c4:d8:45:58:ec:c7:17:8d:02:d6:
                    98:04:c8:21:09:73:17:9c:3a:b5:7b:57:08:d2:c7:
                    a6:a3:20:84:57:35:49:73:73:37:1d:fd:0e:69:ca:
                    52:96:66:1b:bc:2d:a5:a8:d1:c3:e4:37:b6:c2:fd:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:47:96:AD:2F:70:B7:88:15:38:43:F4:9E:0C:2E:C6:38:FC:FC:01
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.86.0/23
                  141.11.90.0/23
                  141.11.130.0/23
                  141.11.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:17:77:fe:25:cc:7a:d7:f2:c6:15:e3:c6:2f:8c:86:82:
         21:90:20:ee:62:cf:59:6a:75:3e:b0:08:af:54:95:db:f4:8d:
         69:40:01:b9:b2:58:2f:e8:16:2c:fc:a0:a2:c8:f5:1a:b8:2b:
         fa:bb:24:98:5c:38:3e:ab:3d:77:5e:c3:50:20:49:f6:e2:14:
         66:1e:c1:e1:75:3d:be:96:81:0a:ed:81:b4:50:05:a3:b1:05:
         6e:a7:06:c0:74:e3:b7:31:7f:40:03:ed:76:f5:51:b8:87:cc:
         db:51:8d:ac:82:8d:2c:a6:cb:29:c5:11:c5:94:fb:fa:b4:fe:
         d5:73:dd:39:6e:d1:10:f6:45:bf:da:49:9f:40:07:7d:8b:77:
         d1:60:cb:0b:4e:ea:ac:d4:ec:27:4f:61:44:50:27:53:2e:e5:
         13:65:a3:67:b5:75:68:8b:b0:3d:bb:3e:89:10:82:7f:eb:06:
         d9:9a:d6:9d:ae:e5:be:5f:e0:77:6d:e8:c4:d4:b0:41:3d:2c:
         cc:9e:f7:dc:37:e0:1f:4a:7d:25:48:e1:f2:fc:a2:70:7e:d4:
         7b:2b:c3:ea:7b:ba:73:ec:77:5e:fc:44:ab:ab:a4:ac:5f:15:
         d5:db:66:27:70:5a:a7:ea:4a:3a:39:ce:28:61:25:6e:86:5b:
         91:b7:ed:30
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUfRGe2HCteNPDrpN391F6u4i6ySAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTEyMDgyMzU1NDdaFw0yNjEyMDgwMDAwNDdaMDMxMTAvBgNV
BAMTKEE5NDc5NkFEMkY3MEI3ODgxNTM4NDNGNDlFMEMyRUM2MzhGQ0ZDMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQvVvIdCPb1C3uHdgTUuwskgd4
wUzqWyhllfbs4ecz2BCObf72Lh4lsxpuG//DNm17DPxjsdxFmrFu2ilnSIE7sE7s
kMzG8HoqCDxt7dp9cdaa7/KhbN+VP/tJyktOMM7I8UygGYei7CMVGPnuxBjgPg0e
Ayckld8+WCuLhnYj+eIHTx/DdULFiY6PV7b2yDlnwoS+EIizfkiWRoHF7ylJ0wze
incfc5VWvNQ/Vyg2IibESpvNQ8FeG4y5fQpUJ5vFr98ejfx5xNhFWOzHF40C1pgE
yCEJcxecOrV7VwjSx6ajIIRXNUlzczcd/Q5pylKWZhu8LaWo0cPkN7bC/R4jAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUqUeWrS9wt4gVOEP0ngwuxjj8/AEwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjExMTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAGNC1YD
BAGNC1oDBAGNC4IDBAGNC5QwDQYJKoZIhvcNAQELBQADggEBAITqF3f+Jcx61/LG
FePGL4yGgiGQIO5iz1lqdT6wCK9Uldv0jWlAAbmyWC/oFiz8oKLI9Rq4K/q7JJhc
OD6rPXdew1AgSfbiFGYeweF1Pb6WgQrtgbRQBaOxBW6nBsB047cxf0AD7Xb1UbiH
zNtRjayCjSymyynFEcWU+/q0/tVz3Tlu0RD2Rb/aSZ9AB32Ld9FgywtO6qzU7CdP
YURQJ1Mu5RNlo2e1dWiLsD27PokQgn/rBtma1p2u5b5f4Hdt6MTUsEE9LMye99w3
4B9KfSVI4fL8onB+1Hsrw+p7unPsd178RKurpKxfFdXbZidwWqfqSjo5zihhJW6G
W5G37TA=
-----END CERTIFICATE-----
Generated at Sun Dec 14 09:32:31 2025 by rpki-client