Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61112.roa
File:                     AS61112.roa (raw, json)
Hash identifier:          cZfS0SqcLALS2x931izkeptIcW1PTAnm1rabJs8VqvI=
Subject key identifier:   09:E9:10:00:A3:8E:37:E1:38:E3:FB:B1:45:9F:A4:F7:59:35:94:85
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       578148DA00931D21DE619CE48BF7061B0FC8345E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61112.roa
Signing time:             Fri 17 Apr 2026 19:09:25 +0000
ROA not before:           Fri 17 Apr 2026 19:04:25 +0000
ROA not after:            Fri 16 Apr 2027 19:09:25 +0000
asID:                     61112
IP address blocks:        91.124.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:81:48:da:00:93:1d:21:de:61:9c:e4:8b:f7:06:1b:0f:c8:34:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Apr 17 19:04:25 2026 GMT
            Not After : Apr 16 19:09:25 2027 GMT
        Subject: CN=09E91000A38E37E138E3FBB1459FA4F759359485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:a9:59:95:20:ea:23:14:75:23:8b:e2:d6:
                    ce:7f:c6:f9:b3:60:8f:15:6a:ae:dc:6f:de:ef:6f:
                    16:76:bb:56:c1:7b:37:90:54:f4:b5:6b:da:44:45:
                    89:1c:bf:a4:4d:8e:84:52:bd:76:e0:4f:39:dc:c0:
                    1e:e4:17:64:82:72:25:74:fd:0d:a9:ea:38:aa:11:
                    06:c0:86:f9:b9:68:d6:7f:a6:e0:9b:3a:6d:cc:ce:
                    72:b2:54:9e:07:71:be:34:8f:04:6d:5c:3e:5a:11:
                    1c:92:df:fc:55:11:48:a5:22:ec:89:44:d2:c2:09:
                    52:9c:00:40:2e:11:c7:17:30:52:34:e6:c8:7d:db:
                    42:9c:a9:aa:65:a8:7d:06:5a:cf:87:e5:ca:b3:3f:
                    c1:65:a7:bb:3e:96:95:8d:64:37:bc:48:e3:6c:99:
                    9c:77:9a:c2:84:83:06:b0:df:9e:fe:95:c4:57:9a:
                    7c:a3:cc:b3:df:ef:0c:95:78:8b:55:62:29:ce:9c:
                    c0:bc:fb:9d:6c:d7:b2:c3:39:7e:19:a7:42:00:17:
                    19:fd:18:a4:5f:ff:e6:28:1b:27:18:c2:6f:6e:46:
                    30:62:e0:c0:33:9d:96:b2:b7:a8:3c:df:a8:52:4c:
                    64:db:42:85:13:e4:cf:49:6c:44:5f:d6:a2:2d:bb:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:10:00:A3:8E:37:E1:38:E3:FB:B1:45:9F:A4:F7:59:35:94:85
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:05:80:e2:43:47:49:82:50:9a:86:1c:3e:e0:06:2e:e2:
         7f:d3:95:f1:81:0a:83:78:c3:ce:1a:84:b3:c2:6e:58:20:a9:
         d2:87:c8:5f:fa:76:02:9d:82:3c:50:65:e6:59:90:be:d0:3b:
         f3:ae:ab:a3:1b:23:c5:95:40:22:76:c4:07:8f:a1:cd:20:26:
         e2:71:df:53:07:1d:13:14:54:16:1a:be:15:e4:47:1d:8b:48:
         6d:18:f3:16:08:76:dc:42:bd:bf:a1:90:a4:eb:d1:80:9b:c1:
         39:ba:b1:32:a5:a6:93:42:9f:0c:fe:02:fd:31:57:c0:81:8f:
         33:b7:98:65:ab:ca:b5:62:48:71:93:c6:48:34:40:50:f9:3a:
         0b:4d:e5:07:70:cf:c8:d4:79:a2:b8:c6:ca:c6:2a:d6:ef:3b:
         50:a2:61:f0:2c:fd:8c:4d:f5:98:26:bf:b0:8d:26:4d:0c:60:
         54:8b:7e:81:c1:81:b7:89:60:6b:a0:5b:cc:11:cb:bc:31:df:
         34:20:4d:63:58:fd:f4:41:0b:be:fb:bb:72:b6:60:31:a1:06:
         8e:38:3e:85:b3:69:fa:c0:1f:3f:ef:1d:2e:ad:4e:79:43:5f:
         8e:e0:b4:6d:7d:2f:d4:ab:83:c5:60:08:6d:99:62:16:28:a6:
         1b:ea:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:44:14 2026 by rpki-client