Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: OBcoznH907QqNVcyix47HyXvlSL+x+DICEQSIWe3yeU=
Subject key identifier: A9:9E:FD:8E:3C:88:61:9B:58:52:4F:EE:50:F9:B2:AF:0C:84:6D:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7E356DD6772E21248AFC8270D3FA0C38FDAC5A72
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60781.roa
Signing time: Fri 27 Jun 2025 10:19:18 +0000
ROA not before: Fri 27 Jun 2025 10:14:18 +0000
ROA not after: Fri 26 Jun 2026 10:19:18 +0000
asID: 60781
IP address blocks: 82.29.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:35:6d:d6:77:2e:21:24:8a:fc:82:70:d3:fa:0c:38:fd:ac:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 27 10:14:18 2025 GMT
Not After : Jun 26 10:19:18 2026 GMT
Subject: CN=A99EFD8E3C88619B58524FEE50F9B2AF0C846DAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:78:19:63:98:1a:63:0e:83:33:f8:19:b9:
fa:4e:2b:41:2c:dd:2f:47:eb:8d:0c:4e:38:72:a8:
ba:ea:37:1e:1c:15:09:1e:ff:e0:63:67:53:28:7c:
48:a2:be:a5:67:a9:c8:8e:ec:11:a1:ca:ab:ed:11:
0e:8a:df:4c:de:53:06:20:f2:45:4a:a2:84:6f:49:
a6:90:99:40:2d:89:3f:16:d4:64:5d:61:6a:ae:cc:
88:19:02:56:49:e8:d0:7f:a8:49:df:5e:d4:ee:ff:
c9:c5:3d:c3:02:48:40:f3:2d:70:67:ac:89:9c:ff:
51:50:d4:03:c6:f8:d0:54:3e:86:e0:95:c4:63:fe:
09:6e:5b:4a:1c:3e:25:54:27:85:8e:22:be:ea:d5:
14:b9:85:f1:b5:06:37:6e:56:76:86:83:38:a1:22:
1b:22:df:13:30:c3:b4:cc:a8:40:d2:31:59:b3:7f:
fb:f9:01:fa:48:c1:b7:9e:d4:59:c8:44:9d:f7:3a:
cb:40:21:79:e3:b0:86:41:6a:32:b0:63:40:b7:71:
4c:e9:a1:e3:33:dd:cb:4e:bf:84:43:d5:97:b3:1e:
26:b3:f5:29:95:f1:32:73:e3:f7:38:ab:bb:7e:18:
0a:2a:0d:0b:74:fb:2f:4d:10:07:33:1e:58:ad:56:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:FD:8E:3C:88:61:9B:58:52:4F:EE:50:F9:B2:AF:0C:84:6D:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ef:58:0d:2a:45:08:a2:cd:4d:5f:46:61:2b:87:44:18:f6:
ad:03:1f:b3:5d:af:0c:07:aa:e8:d0:61:ef:38:5f:f8:d7:b5:
05:c5:f8:21:1f:09:9a:7b:2b:f7:0b:a1:04:1a:fe:6c:14:5b:
fd:74:f9:a7:ee:7c:71:4a:64:9b:e0:6b:93:17:21:b2:f8:b6:
44:be:ed:8f:41:bb:6b:4e:82:b5:54:f6:52:88:df:eb:d2:13:
1b:31:8d:a2:28:06:1d:c1:f5:b4:54:9b:6b:26:5c:69:9b:cf:
a1:e5:28:55:1e:9d:05:e8:6d:f3:e9:b2:04:e1:e0:84:d8:84:
23:aa:2a:b0:46:48:00:d2:31:c4:7a:6d:98:28:ba:2c:1b:e4:
77:1b:a4:59:76:23:c4:7d:20:87:d0:4e:41:f6:ed:e4:de:5e:
b9:27:64:3b:8a:28:d4:52:87:8c:b0:68:6b:22:a4:65:20:5d:
5d:3f:1b:62:b8:bc:38:1b:14:dc:41:61:75:a0:18:80:83:87:
54:bd:17:03:81:04:5e:c5:86:33:79:2e:36:4e:8b:fe:f3:b7:
52:f6:11:e7:98:a4:35:96:53:b7:12:1e:d2:47:e5:b1:7f:de:
1a:4f:45:44:1b:38:78:65:f9:a6:e5:bd:25:66:58:1a:98:c1:
61:ef:65:8e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUfjVt1ncuISSK/IJw0/oMOP2sWnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA2MjcxMDE0MThaFw0yNjA2MjYxMDE5MThaMDMxMTAvBgNV
BAMTKEE5OUVGRDhFM0M4ODYxOUI1ODUyNEZFRTUwRjlCMkFGMEM4NDZEQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSj3gZY5gaYw6DM/gZufpOK0Es
3S9H640MTjhyqLrqNx4cFQke/+BjZ1MofEiivqVnqciO7BGhyqvtEQ6K30zeUwYg
8kVKooRvSaaQmUAtiT8W1GRdYWquzIgZAlZJ6NB/qEnfXtTu/8nFPcMCSEDzLXBn
rImc/1FQ1APG+NBUPobglcRj/gluW0ocPiVUJ4WOIr7q1RS5hfG1BjduVnaGgzih
Ihsi3xMww7TMqEDSMVmzf/v5AfpIwbee1FnIRJ33OstAIXnjsIZBajKwY0C3cUzp
oeMz3ctOv4RD1ZezHiaz9SmV8TJz4/c4q7t+GAoqDQt0+y9NEAczHlitVk8LAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUqZ79jjyIYZtYUk/uUPmyrwyEba4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjA3ODEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSHSgw
DQYJKoZIhvcNAQELBQADggEBACvvWA0qRQiizU1fRmErh0QY9q0DH7NdrwwHqujQ
Ye84X/jXtQXF+CEfCZp7K/cLoQQa/mwUW/10+afufHFKZJvga5MXIbL4tkS+7Y9B
u2tOgrVU9lKI3+vSExsxjaIoBh3B9bRUm2smXGmbz6HlKFUenQXobfPpsgTh4ITY
hCOqKrBGSADSMcR6bZgouiwb5HcbpFl2I8R9IIfQTkH27eTeXrknZDuKKNRSh4yw
aGsipGUgXV0/G2K4vDgbFNxBYXWgGICDh1S9FwOBBF7FhjN5LjZOi/7zt1L2EeeY
pDWWU7cSHtJH5bF/3hpPRUQbOHhl+ablvSVmWBqYwWHvZY4=
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:49:59 2025 by rpki-client