Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61003.roa
File: AS61003.roa (raw, json)
Hash identifier: Ed/CEBE7ix0pXyCqgE33gMHJmxfek2dfbJ3leAecmW4=
Subject key identifier: 63:3E:85:A9:85:BF:65:65:67:44:A1:30:0C:3D:80:36:34:21:81:8A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6E26478EB7DED2F5C0CC9D87C0FDD529A6EC64DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61003.roa
Signing time: Wed 25 Jun 2025 18:51:41 +0000
ROA not before: Wed 25 Jun 2025 18:46:41 +0000
ROA not after: Wed 24 Jun 2026 18:51:41 +0000
asID: 61003
IP address blocks: 167.148.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:26:47:8e:b7:de:d2:f5:c0:cc:9d:87:c0:fd:d5:29:a6:ec:64:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 25 18:46:41 2025 GMT
Not After : Jun 24 18:51:41 2026 GMT
Subject: CN=633E85A985BF65656744A1300C3D80363421818A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:ce:35:aa:34:67:2b:21:01:ea:99:33:b9:
ee:e6:e6:ab:82:d9:f1:3f:1f:35:b4:cc:d9:bf:ad:
a0:b4:91:93:28:bc:20:69:42:35:40:20:e2:c9:5e:
b4:c7:b9:f0:d3:47:6f:52:26:ef:b8:c0:f8:b2:0c:
6e:27:00:f4:96:9f:71:54:92:53:2e:75:35:77:81:
91:0a:d5:9f:07:be:52:44:18:0a:fd:09:91:66:a9:
fe:93:81:7d:f1:91:36:d7:e7:3f:e3:0f:ad:72:3b:
50:94:4b:c3:62:30:1e:28:fe:0e:f9:cb:c7:af:30:
88:2d:64:0f:00:56:2c:5e:fd:78:24:d0:6f:02:af:
51:72:b5:c7:c8:71:c2:d9:33:a2:0c:17:8e:d1:3f:
e6:52:e9:cd:20:72:f6:77:94:25:11:70:29:4a:61:
da:76:52:c8:97:7a:97:22:29:74:a8:e6:de:c8:c4:
0f:6d:df:be:78:92:09:85:f3:04:fa:ed:64:cf:85:
af:85:34:e0:f2:9d:d8:9f:cd:c0:95:1e:3a:91:62:
2c:d3:0a:0c:f1:80:98:94:6d:d3:5b:d4:ba:fb:9a:
ea:62:a1:3d:f7:d5:3f:7c:2d:0a:74:ef:d2:75:52:
bc:e7:d7:98:de:93:e1:59:d3:e1:ae:0c:de:a1:c5:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:85:A9:85:BF:65:65:67:44:A1:30:0C:3D:80:36:34:21:81:8A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS61003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:64:8d:7c:ad:ef:15:58:b1:7d:7f:9b:1f:87:65:d6:fa:8d:
26:d8:a2:87:f8:51:6b:92:53:9a:54:67:31:0c:e8:5b:6e:85:
a5:ce:5f:21:ef:08:48:63:80:12:25:9b:bb:9f:db:e9:dd:bc:
4d:5e:32:b6:c3:63:50:6c:84:be:02:9d:91:52:bd:04:1e:f4:
a0:75:50:3c:90:cc:61:ec:9b:3f:67:b0:3c:b2:23:7d:02:66:
24:73:82:ab:79:d3:89:1c:79:29:c7:e5:e7:96:3b:86:d9:9d:
2e:ba:04:5e:cb:fc:95:69:7a:0f:ad:a2:52:02:84:2d:18:74:
5e:c2:80:12:f4:66:29:85:06:3c:6f:d1:39:23:64:41:8c:df:
0a:ff:41:21:85:c3:50:cc:6d:32:86:b4:8a:a2:78:92:66:9e:
c3:f3:95:e2:6d:19:95:32:0b:99:04:ff:94:e4:39:24:f0:1b:
e4:ea:e6:b9:2f:8e:54:fb:e7:77:03:cf:3e:84:ea:d9:7d:de:
81:66:53:de:39:f8:41:f2:89:d4:25:cc:cf:cb:a3:67:35:20:
27:00:8c:2d:48:51:da:b6:3b:39:c4:c5:0b:16:80:af:f4:0e:
52:83:d8:84:c1:d8:d4:ef:9e:5c:8b:3f:1c:97:00:e8:b4:76:
c3:9a:ca:b6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUbiZHjrfe0vXAzJ2HwP3VKabsZN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MjUxODQ2NDFaFw0yNjA2MjQxODUxNDFaMDMxMTAvBgNV
BAMTKDYzM0U4NUE5ODVCRjY1NjU2NzQ0QTEzMDBDM0Q4MDM2MzQyMTgxOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBc41qjRnKyEB6pkzue7m5quC
2fE/HzW0zNm/raC0kZMovCBpQjVAIOLJXrTHufDTR29SJu+4wPiyDG4nAPSWn3FU
klMudTV3gZEK1Z8HvlJEGAr9CZFmqf6TgX3xkTbX5z/jD61yO1CUS8NiMB4o/g75
y8evMIgtZA8AVixe/Xgk0G8Cr1FytcfIccLZM6IMF47RP+ZS6c0gcvZ3lCURcClK
Ydp2UsiXepciKXSo5t7IxA9t3754kgmF8wT67WTPha+FNODyndifzcCVHjqRYizT
CgzxgJiUbdNb1Lr7mupioT331T98LQp079J1Urzn15jek+FZ0+GuDN6hxfexAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUYz6FqYW/ZWVnRKEwDD2ANjQhgYowHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjEwMDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACnlJow
DQYJKoZIhvcNAQELBQADggEBAA1kjXyt7xVYsX1/mx+HZdb6jSbYoof4UWuSU5pU
ZzEM6FtuhaXOXyHvCEhjgBIlm7uf2+ndvE1eMrbDY1BshL4CnZFSvQQe9KB1UDyQ
zGHsmz9nsDyyI30CZiRzgqt504kceSnH5eeWO4bZnS66BF7L/JVpeg+tolIChC0Y
dF7CgBL0ZimFBjxv0TkjZEGM3wr/QSGFw1DMbTKGtIqieJJmnsPzleJtGZUyC5kE
/5TkOSTwG+Tq5rkvjlT753cDzz6E6tl93oFmU945+EHyidQlzM/Lo2c1ICcAjC1I
Udq2OznExQsWgK/0DlKD2ITB2NTvnlyLPxyXAOi0dsOayrY=
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:40:44 2025 by rpki-client