Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61112.roa
File: AS61112.roa (raw, json)
Hash identifier: WCzvTG0/AWcVRBzy86p+OiaPj1U/UrXa7gCbnvxjcjA=
Subject key identifier: CA:FF:70:F9:38:1D:BA:B8:C3:9D:ED:ED:0D:4E:3F:92:B6:9E:F8:46
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5B7211EDAA2C3142E8D1961985C0AD0D7F5860FC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61112.roa
Signing time: Tue 10 Nov 2026 00:49:41 +0000
ROA not before: Tue 10 Nov 2026 00:44:41 +0000
ROA not after: Tue 09 Nov 2027 00:49:41 +0000
asID: 61112
IP address blocks: 141.11.86.0/23 maxlen: 24
141.11.90.0/23 maxlen: 24
141.11.130.0/23 maxlen: 24
141.11.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:72:11:ed:aa:2c:31:42:e8:d1:96:19:85:c0:ad:0d:7f:58:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 10 00:44:41 2026 GMT
Not After : Nov 9 00:49:41 2027 GMT
Subject: CN=CAFF70F9381DBAB8C39DEDED0D4E3F92B69EF846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:64:08:dd:dc:4c:94:9c:34:54:f6:07:60:
b3:2f:9a:69:75:5b:7f:55:14:d2:6c:19:28:c4:a1:
ee:3a:12:13:cc:b5:7e:a3:3e:90:f4:d2:ad:98:37:
c7:e4:9c:5b:6c:36:54:6a:df:e7:6c:16:1c:31:d6:
85:03:15:18:fc:ab:72:c2:2b:f5:29:c4:16:ba:f0:
ac:04:a3:3d:75:da:42:dc:00:4e:80:a6:86:78:f9:
21:37:59:9c:98:70:a8:ae:f4:46:a8:09:bf:ca:ad:
a4:6b:65:4a:f1:cd:50:c2:81:15:64:e3:4b:da:cd:
e0:19:63:d1:e1:bd:67:28:24:98:9e:8f:cc:38:05:
d7:bc:3d:32:46:80:de:f1:95:52:77:b1:0c:8f:ab:
96:35:38:d3:72:bb:e9:25:53:63:9b:a1:6a:9c:b7:
c3:1d:48:9c:00:55:7b:d5:88:df:25:d6:67:71:0d:
fb:85:5e:06:cb:8d:25:20:90:ae:d2:42:21:f9:55:
72:5d:84:1a:c7:8a:33:e6:27:f3:9e:72:1b:25:48:
41:47:16:d3:0e:f2:bf:be:49:1a:ab:d1:8c:c8:31:
e7:e1:e7:b6:27:93:85:f8:22:05:71:b6:68:a1:d0:
b1:ff:03:2a:f1:11:7d:76:fd:d0:3a:32:e7:1c:4a:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:70:F9:38:1D:BA:B8:C3:9D:ED:ED:0D:4E:3F:92:B6:9E:F8:46
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS61112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.86.0/23
141.11.90.0/23
141.11.130.0/23
141.11.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:6f:c5:1e:99:ee:6a:48:b9:04:75:6f:4c:7c:03:fe:eb:1f:
7c:f1:a6:fc:c8:e6:2d:9b:5d:ca:fd:d9:47:ed:2b:39:17:c3:
5c:b3:27:b2:b8:4a:aa:78:cf:a1:6f:7d:71:0e:3f:28:f3:7a:
a1:c6:bb:f6:60:d3:50:ea:f9:83:d8:aa:0f:04:71:c8:16:58:
7b:ff:ce:09:65:c8:4b:28:03:84:1b:24:c2:14:0a:fa:90:2e:
22:2e:f5:9d:1c:bd:c0:79:75:ba:a8:d4:fa:6b:06:48:e8:29:
b9:c1:6b:82:48:fe:89:8a:d2:51:93:c1:c0:1a:57:e1:37:16:
b7:19:96:b0:46:26:bb:39:f1:65:57:b0:f1:5a:8f:43:c4:4a:
67:6f:82:d3:92:97:89:ea:e2:83:be:b1:fc:80:b2:50:ae:46:
d4:0e:f4:b6:13:3b:b2:42:4c:ac:e8:72:4f:65:30:e3:ad:f1:
4d:9f:97:cc:a6:62:24:d7:0e:63:17:96:fe:ee:81:35:ef:58:
35:df:71:f2:4e:79:5c:4f:75:0b:a6:ef:68:5d:ab:de:f5:69:
42:b0:bf:04:aa:3a:f1:99:48:41:e0:6d:b6:5b:ff:0a:25:47:
ba:a2:cb:97:90:07:c0:00:03:57:12:44:b9:52:61:8d:ef:a9:
69:58:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:12:21 2026 by rpki-client