Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: 4xdavCqSQ86sCCnN9UUYGCo8Fei8E1ZbIYHPpaeEz6U=
Subject key identifier: CF:EA:68:A6:98:C7:A5:C3:90:2F:3D:AB:78:C0:FF:08:6C:63:19:E6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7CBBBC9A819C34D940CFFB2EFD32E405050CA7BB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
Signing time: Tue 05 May 2026 08:52:51 +0000
ROA not before: Tue 05 May 2026 08:47:51 +0000
ROA not after: Tue 04 May 2027 08:52:51 +0000
asID: 61317
IP address blocks: 82.23.195.0/24 maxlen: 24
82.24.92.0/22 maxlen: 24
82.24.181.0/24 maxlen: 24
82.26.66.0/24 maxlen: 24
82.27.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:bb:bc:9a:81:9c:34:d9:40:cf:fb:2e:fd:32:e4:05:05:0c:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 5 08:47:51 2026 GMT
Not After : May 4 08:52:51 2027 GMT
Subject: CN=CFEA68A698C7A5C3902F3DAB78C0FF086C6319E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:6e:ff:48:13:70:2a:80:b9:f4:b1:48:53:
49:52:88:76:fc:16:40:0d:15:81:cd:41:e1:a0:e2:
78:97:37:30:75:76:cd:a5:69:6e:b7:69:7b:dc:cc:
c0:2d:9f:4b:59:79:fb:66:c8:13:ec:eb:4e:4d:66:
dd:97:b5:d3:6d:d7:57:95:d8:0e:1e:9b:6f:df:cd:
b2:30:d1:ff:a4:5e:a6:bd:fb:b8:1c:12:31:af:30:
dd:9f:7b:f4:ec:21:71:34:ff:29:15:77:1e:27:cd:
c0:c6:e1:da:1d:a0:26:51:4c:e1:c8:7c:22:c1:59:
fd:bb:0a:05:2d:51:82:aa:bb:6e:24:81:8c:e3:be:
c6:82:e7:c0:4c:d2:9d:57:d3:a2:35:ae:16:79:e4:
b4:59:ac:7b:65:8f:a5:79:36:aa:d6:e4:c0:05:4e:
dc:a4:6e:86:07:e0:b9:eb:b7:9d:b0:01:61:bf:3f:
c3:8d:90:b6:b7:3f:10:c0:1f:20:39:b6:aa:03:21:
48:c0:bd:ef:6c:65:4f:e6:bb:d0:d5:5d:9d:1a:31:
e1:8e:39:4e:f5:e7:6e:8f:64:f4:ae:d0:55:a9:d9:
0d:c8:47:1f:a8:b9:ae:be:ba:3c:a7:f2:6c:41:05:
0b:d6:32:56:c7:1a:fc:57:e6:82:9b:52:d9:32:a1:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:68:A6:98:C7:A5:C3:90:2F:3D:AB:78:C0:FF:08:6C:63:19:E6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.195.0/24
82.24.92.0/22
82.24.181.0/24
82.26.66.0/24
82.27.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8c:7c:5c:68:25:ab:10:b3:b2:8c:4b:fa:9e:d1:96:a7:eb:
42:e2:65:bc:12:fb:ec:04:74:bb:9d:4c:f1:89:7f:ea:ad:a1:
22:0b:ca:03:a3:43:05:e7:37:09:e7:a2:c1:bf:4e:b3:36:1e:
45:39:68:fe:b9:3d:e6:fb:af:e0:8f:73:40:c3:a2:47:e2:45:
ad:21:fe:f0:46:1b:50:a5:b2:66:dc:78:0d:88:c3:9d:33:31:
ca:c1:7e:16:8c:da:ee:ae:75:ee:fc:4b:2c:3d:f6:98:03:08:
30:41:23:3c:b8:8a:ed:45:94:15:7b:4c:74:09:3a:5c:2c:7d:
49:c9:e2:12:68:47:ca:47:34:94:6f:a8:14:87:32:e5:45:92:
de:7e:9e:ab:30:84:56:31:39:9b:98:77:62:d1:72:6d:e7:bd:
9f:53:df:9e:dd:c8:aa:b6:fe:5c:7c:81:6f:08:20:28:65:ea:
6e:ea:0f:ec:4d:8e:39:5c:e1:84:15:27:95:0c:44:e6:68:61:
a9:1c:e0:1a:53:bf:b6:81:b8:49:ca:03:a1:2e:01:7c:4f:b3:
e5:37:57:35:b9:25:6a:e4:33:7a:dd:83:8a:d0:a7:c8:a0:17:
c6:68:1d:cc:ae:10:2a:83:d2:ae:51:ff:0a:26:2a:3b:bf:1b:
97:d7:1b:32
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUfLu8moGcNNlAz/su/TLkBQUMp7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDUwODQ3NTFaFw0yNzA1MDQwODUyNTFaMDMxMTAvBgNV
BAMTKENGRUE2OEE2OThDN0E1QzM5MDJGM0RBQjc4QzBGRjA4NkM2MzE5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00W7/SBNwKoC59LFIU0lSiHb8
FkANFYHNQeGg4niXNzB1ds2laW63aXvczMAtn0tZeftmyBPs605NZt2XtdNt11eV
2A4em2/fzbIw0f+kXqa9+7gcEjGvMN2fe/TsIXE0/ykVdx4nzcDG4dodoCZRTOHI
fCLBWf27CgUtUYKqu24kgYzjvsaC58BM0p1X06I1rhZ55LRZrHtlj6V5NqrW5MAF
TtykboYH4Lnrt52wAWG/P8ONkLa3PxDAHyA5tqoDIUjAve9sZU/mu9DVXZ0aMeGO
OU71526PZPSu0FWp2Q3IRx+oua6+ujyn8mxBBQvWMlbHGvxX5oKbUtkyoUYNAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUz+poppjHpcOQLz2reMD/CGxjGeYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjEzMTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABSF8MD
BAJSGFwDBABSGLUDBABSGkIDBABSGwgwDQYJKoZIhvcNAQELBQADggEBAGyMfFxo
JasQs7KMS/qe0Zan60LiZbwS++wEdLudTPGJf+qtoSILygOjQwXnNwnnosG/TrM2
HkU5aP65Peb7r+CPc0DDokfiRa0h/vBGG1ClsmbceA2Iw50zMcrBfhaM2u6ude78
Syw99pgDCDBBIzy4iu1FlBV7THQJOlwsfUnJ4hJoR8pHNJRvqBSHMuVFkt5+nqsw
hFYxOZuYd2LRcm3nvZ9T357dyKq2/lx8gW8IIChl6m7qD+xNjjlc4YQVJ5UMROZo
Yakc4BpTv7aBuEnKA6EuAXxPs+U3VzW5JWrkM3rdg4rQp8igF8ZoHcyuECqD0q5R
/womKju/G5fXGzI=
-----END CERTIFICATE-----
Generated at Tue May 12 22:23:37 2026 by rpki-client