Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61317.roa
File: AS61317.roa (raw, json)
Hash identifier: NYT/y0+zmbgfSRCFmV5RZ5mUAb7Vn9VLiOcR/eaJjKg=
Subject key identifier: F4:44:BF:04:9B:19:44:C7:9B:4F:01:33:E4:7D:62:96:CE:B7:CA:A7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1A646CE829B78A75D8CFD28317B4D70F8527C3E0
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61317.roa
Signing time: Sun 05 Oct 2025 00:01:23 +0000
ROA not before: Sat 04 Oct 2025 23:56:23 +0000
ROA not after: Sun 04 Oct 2026 00:01:23 +0000
asID: 61317
IP address blocks: 45.135.251.0/24 maxlen: 24
45.155.16.0/24 maxlen: 24
193.29.99.0/24 maxlen: 24
193.151.180.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:64:6c:e8:29:b7:8a:75:d8:cf:d2:83:17:b4:d7:0f:85:27:c3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 4 23:56:23 2025 GMT
Not After : Oct 4 00:01:23 2026 GMT
Subject: CN=F444BF049B1944C79B4F0133E47D6296CEB7CAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:8a:ec:1b:fc:37:41:50:dd:3b:8b:a4:61:
e1:eb:3f:fc:83:8c:f6:65:f7:dc:8a:3f:f1:17:57:
13:57:6b:d1:47:03:f3:81:7f:c0:1e:56:6e:c8:d2:
57:3b:95:d3:18:6f:d1:db:76:46:e4:ee:30:a9:ab:
2c:fd:2e:2a:02:d0:ce:de:d9:08:d8:00:3b:2b:f3:
85:6c:f9:32:1a:3c:7f:32:4b:94:cf:83:5d:93:0d:
49:2a:5b:3e:b2:ff:88:3d:80:7b:bb:a6:59:0f:97:
c3:95:1b:1c:4c:d2:40:10:e0:fe:8a:b4:78:7d:c2:
db:f0:28:14:dd:0c:06:f8:5f:33:8e:7b:d7:59:88:
da:85:50:a7:a7:f5:f1:05:fe:c7:84:52:0f:c5:7c:
23:a7:b0:b9:db:88:ea:7d:bc:94:75:b8:86:f8:ad:
66:8f:bd:c1:59:a8:83:b8:e2:ac:4d:bf:53:1b:6b:
b4:77:c5:0d:e8:31:f2:2c:c9:0b:b6:6b:25:e0:14:
09:2b:ef:d6:5c:3e:8a:7d:14:68:39:91:a3:08:b5:
56:aa:0f:87:3e:73:36:01:5c:40:ee:fd:a2:46:0d:
07:d3:c1:ec:1e:8d:20:88:ea:30:97:cd:e8:23:94:
57:77:67:2c:7b:4b:0b:ec:42:9a:1d:df:99:82:41:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:BF:04:9B:19:44:C7:9B:4F:01:33:E4:7D:62:96:CE:B7:CA:A7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.251.0/24
45.155.16.0/24
193.29.99.0/24
193.151.180.0/24
194.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
48:92:80:08:51:eb:76:b6:ee:06:a4:5a:b1:10:52:0c:a5:1c:
32:ff:d7:4a:0b:a6:b1:90:15:0d:d7:8f:da:79:63:75:d6:10:
78:cb:bd:cd:62:7f:f4:13:b0:3a:0d:bd:78:a4:33:c0:7f:b5:
29:7b:f4:c3:11:93:61:0a:d5:e5:dc:20:6f:4a:0f:28:1b:33:
ed:a1:11:c3:3e:9b:1d:a8:a1:1b:85:bc:e0:4e:aa:dc:7e:a3:
73:7f:6d:7a:40:7a:a7:d9:5b:52:85:77:62:db:69:39:1d:fe:
9a:18:56:ba:4f:5d:f5:4a:92:9e:2d:51:04:0a:6a:46:b5:22:
2a:c2:18:33:66:50:5d:bb:e1:3f:fd:de:72:63:1b:b6:77:fa:
a0:59:b7:37:dd:ab:c6:23:85:7e:6d:25:db:04:c5:4e:92:ff:
dc:81:f5:97:36:e7:1c:6b:a8:40:47:e3:10:69:b7:0d:a9:d2:
27:68:31:4f:55:25:62:2f:77:8f:dc:50:92:c6:ae:43:70:cd:
0c:be:bb:b1:91:1c:f3:7a:4e:ea:06:23:44:a6:30:29:d4:9b:
29:39:7f:2f:cb:e7:26:2e:ed:9e:df:8b:82:59:00:4f:4b:53:
67:c5:56:b1:84:e7:46:e2:d6:33:4a:7f:ab:88:11:94:88:f9:
0b:98:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:57:32 2025 by rpki-client