This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60781.roa
File:                     AS60781.roa (raw, json)
Hash identifier:          nhGrpuWSSUPPj8KXdjFdU820j4de3OR2Jb5EvEhEc2Y=
Subject key identifier:   1F:D9:97:3F:BA:10:24:44:30:04:7B:D5:56:98:50:78:4D:72:53:DF
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       04ED82A3527611642D6405213EA26930854F836E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60781.roa
Signing time:             Thu 13 Nov 2025 15:26:25 +0000
ROA not before:           Thu 13 Nov 2025 15:21:25 +0000
ROA not after:            Thu 12 Nov 2026 15:26:25 +0000
asID:                     60781
IP address blocks:        82.22.12.0/23 maxlen: 23
                          82.22.55.0/24 maxlen: 24
                          82.29.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:82:a3:52:76:11:64:2d:64:05:21:3e:a2:69:30:85:4f:83:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 13 15:21:25 2025 GMT
            Not After : Nov 12 15:26:25 2026 GMT
        Subject: CN=1FD9973FBA10244430047BD5569850784D7253DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:88:f5:57:40:a3:4b:78:51:e8:9b:da:45:
                    56:a6:e9:67:e4:ec:58:07:47:d3:60:61:50:26:c8:
                    37:53:0d:79:bb:58:64:34:1f:6b:65:f1:50:9d:01:
                    bf:1e:43:d1:4e:99:34:12:cc:d4:f1:d3:05:1d:d4:
                    b5:82:1a:48:44:5c:3a:d4:a7:dc:29:80:d1:82:40:
                    b8:3b:af:d9:83:2e:0e:92:28:12:98:cb:a0:fe:59:
                    0d:da:11:84:3b:5e:91:bd:6a:82:50:41:b9:33:f1:
                    51:95:c1:73:1b:34:80:66:76:c0:1a:95:1a:1e:30:
                    cf:ae:1e:89:31:8b:b9:be:b0:99:e1:46:80:62:49:
                    78:3d:1f:cf:93:92:2f:49:7d:ab:7c:25:6e:ed:37:
                    f6:91:b5:2a:a2:92:27:3f:52:bb:37:52:ff:f6:df:
                    ce:56:fa:c9:24:17:39:bb:43:f8:bf:2d:82:1a:9e:
                    8d:9d:36:df:f9:4f:be:3e:1b:2f:d7:74:51:2a:db:
                    68:ef:bd:af:eb:b4:ec:19:6f:9a:68:0b:6a:5c:71:
                    47:f6:d0:5c:4e:14:68:ef:05:e1:99:1c:fa:13:11:
                    69:54:9d:5a:be:a3:45:64:c9:e8:1c:17:e9:e1:3f:
                    78:9d:ff:b2:94:69:db:ab:a4:d0:ff:d2:9f:82:83:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:97:3F:BA:10:24:44:30:04:7B:D5:56:98:50:78:4D:72:53:DF
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.12.0/23
                  82.22.55.0/24
                  82.29.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:de:d6:08:fc:b0:c4:94:dc:0f:60:43:7c:22:7d:cf:b5:7f:
         60:06:7d:19:b9:5f:ab:a0:94:5b:f2:a2:0b:78:f7:e7:ea:81:
         11:00:36:88:2b:e3:bf:1e:c6:ee:3c:7b:1e:d5:86:48:77:0a:
         86:10:57:dc:c1:1b:ed:9d:a1:4c:5a:94:09:bb:f6:b0:ea:45:
         fe:96:69:c1:73:f3:95:19:e8:2b:7f:e4:58:5e:c0:0c:de:f6:
         fe:51:b2:68:95:21:71:5e:a2:b5:8b:16:a1:b2:90:9e:15:0b:
         84:6d:5a:d5:61:f7:59:b7:90:42:5b:5d:35:77:4b:ca:a7:64:
         9b:e1:56:93:1a:a2:a0:30:55:68:5c:e3:7d:13:56:67:62:1f:
         9b:b5:1b:e2:56:b6:0c:65:e4:ac:05:23:92:0f:5f:2d:41:1d:
         95:fe:d6:7f:62:34:22:2e:1b:4d:ef:42:5b:34:96:9c:fe:34:
         18:f4:b7:af:04:be:3c:58:8d:85:5b:cd:34:39:be:0d:d3:d9:
         48:80:90:c5:81:2f:f7:30:dc:7e:5f:1a:20:27:41:8b:94:9a:
         32:5b:49:7e:d4:37:4b:a1:f5:96:2e:49:30:2b:37:40:85:cd:
         38:fc:d7:68:4e:51:eb:94:8f:f6:1f:6b:ae:32:28:07:fe:ce:
         93:bb:20:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:47:35 2025 by rpki-client