Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: aNuMP6pPIn2TJ9O5NaYQFuLuBeFbUFE+VBq7TDmeGM8=
Subject key identifier: A7:AA:05:6F:81:74:9B:A1:56:72:D0:87:2C:CA:05:C0:25:80:36:83
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 496CB06956E5F2234376D01BB951C1424C9AC972
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60781.roa
Signing time: Thu 02 Oct 2025 13:55:08 +0000
ROA not before: Thu 02 Oct 2025 13:50:08 +0000
ROA not after: Thu 01 Oct 2026 13:55:08 +0000
asID: 60781
IP address blocks: 152.89.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6c:b0:69:56:e5:f2:23:43:76:d0:1b:b9:51:c1:42:4c:9a:c9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 2 13:50:08 2025 GMT
Not After : Oct 1 13:55:08 2026 GMT
Subject: CN=A7AA056F81749BA15672D0872CCA05C025803683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:fe:35:fa:c4:a1:03:42:d1:73:0e:8e:b5:
0f:29:39:ed:42:9f:9a:cd:68:fd:70:16:58:b1:27:
1c:c8:27:89:cc:c2:48:d1:81:9c:61:d0:7a:fb:91:
fe:da:f0:f3:cb:72:af:ab:46:c9:79:7b:ce:ff:63:
24:85:8a:ae:4d:8d:aa:6d:3c:2b:cc:ea:26:69:7b:
bc:67:7c:ad:9f:57:6f:c8:b5:17:4a:a5:70:b6:7f:
18:8d:16:82:66:6e:35:fb:3a:89:24:fc:cd:c4:da:
bb:ac:88:37:72:9a:2e:45:8c:7e:02:5e:30:07:67:
0d:de:7e:ac:2e:ad:43:ea:68:4c:e2:cd:48:1e:bc:
cd:5a:57:a5:14:57:80:b3:5e:06:5d:dd:c4:2d:96:
52:7d:95:e5:5d:71:92:72:31:66:08:9c:c3:21:bb:
7e:3b:18:e7:ee:b8:c9:69:5e:25:5c:f7:8d:64:70:
7a:dd:32:55:b6:44:7c:8d:6b:20:ae:84:d8:07:bb:
ec:3c:71:03:62:06:0e:49:3e:76:b2:54:78:38:32:
3a:7f:f1:35:fe:ed:48:fd:dd:0e:16:60:c8:0d:e9:
63:fe:00:b2:ae:53:76:9d:80:cf:cd:3e:7d:bd:7c:
6e:e0:a2:c3:58:70:2e:95:f3:4a:f4:65:3a:a8:cd:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:05:6F:81:74:9B:A1:56:72:D0:87:2C:CA:05:C0:25:80:36:83
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c8:bb:10:42:0d:8a:7d:a0:b2:dc:71:0e:f1:d2:5c:ad:73:
54:b8:cf:f2:d4:b7:62:89:bd:67:c6:3e:92:7c:14:0a:28:26:
5a:da:f7:9e:d7:73:6e:98:66:9a:20:67:93:66:40:b5:c4:8d:
5d:51:66:e8:3f:ea:d9:41:1d:34:77:f5:97:45:91:f0:6a:9a:
bf:71:48:f4:88:b6:18:83:a7:b4:af:98:33:10:ec:df:33:f6:
95:73:b1:e5:91:b6:ad:22:a6:ba:3f:b3:ab:9f:a2:1a:c3:87:
ec:3c:50:a6:50:2a:4d:ab:4d:5f:81:ca:a0:6f:df:76:1a:a6:
02:51:73:e6:8f:d7:18:e6:86:66:5e:db:4e:f9:df:e5:66:7b:
b7:9c:48:8a:51:e7:fb:f0:14:5e:f1:7c:76:dd:d1:70:af:c4:
ae:ab:5d:84:00:8b:e6:8a:52:52:10:98:cb:5e:f3:77:4e:5a:
d6:7e:e9:66:7a:7b:24:3c:79:bc:7a:ec:30:2c:c8:e6:bb:59:
b3:9c:b7:8e:9e:cf:82:a0:e5:2e:e4:22:ed:81:25:b6:74:fc:
44:f8:03:03:10:5a:e8:f1:40:97:25:4b:b3:d6:5d:ec:4e:37:
4e:44:b2:15:d6:4d:ee:a9:c7:49:2b:0c:dc:6b:f4:bd:5d:7d:
66:26:10:67
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUSWywaVbl8iNDdtAbuVHBQkyayXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTEwMDIxMzUwMDhaFw0yNjEwMDExMzU1MDhaMDMxMTAvBgNV
BAMTKEE3QUEwNTZGODE3NDlCQTE1NjcyRDA4NzJDQ0EwNUMwMjU4MDM2ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPP41+sShA0LRcw6OtQ8pOe1C
n5rNaP1wFlixJxzIJ4nMwkjRgZxh0Hr7kf7a8PPLcq+rRsl5e87/YySFiq5Njapt
PCvM6iZpe7xnfK2fV2/ItRdKpXC2fxiNFoJmbjX7Ookk/M3E2rusiDdymi5FjH4C
XjAHZw3efqwurUPqaEzizUgevM1aV6UUV4CzXgZd3cQtllJ9leVdcZJyMWYInMMh
u347GOfuuMlpXiVc941kcHrdMlW2RHyNayCuhNgHu+w8cQNiBg5JPnayVHg4Mjp/
8TX+7Uj93Q4WYMgN6WP+ALKuU3adgM/NPn29fG7gosNYcC6V80r0ZTqozYqVAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUp6oFb4F0m6FWctCHLMoFwCWANoMwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNjA3ODEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACYWfsw
DQYJKoZIhvcNAQELBQADggEBAF/IuxBCDYp9oLLccQ7x0lytc1S4z/LUt2KJvWfG
PpJ8FAooJlra957Xc26YZpogZ5NmQLXEjV1RZug/6tlBHTR39ZdFkfBqmr9xSPSI
thiDp7SvmDMQ7N8z9pVzseWRtq0ipro/s6ufohrDh+w8UKZQKk2rTV+ByqBv33Ya
pgJRc+aP1xjmhmZe20753+Vme7ecSIpR5/vwFF7xfHbd0XCvxK6rXYQAi+aKUlIQ
mMte83dOWtZ+6WZ6eyQ8ebx67DAsyOa7WbOct46ez4Kg5S7kIu2BJbZ0/ET4AwMQ
WujxQJclS7PWXexON05EshXWTe6px0krDNxr9L1dfWYmEGc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:47:39 2025 by rpki-client