Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
File:                     AS60781.roa (raw, json)
Hash identifier:          PwmYKPuo6mwfAd5WH4PX0UpyhDSAPaqeL4kWG+2rP3U=
Subject key identifier:   A0:63:E6:37:B0:06:B5:08:F7:D0:77:5F:71:FB:DE:3D:62:09:92:BB
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       46237AD73806810405157BCE74F9148CB6E0A11A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa
Signing time:             Mon 04 May 2026 20:47:09 +0000
ROA not before:           Mon 04 May 2026 20:42:09 +0000
ROA not after:            Mon 03 May 2027 20:47:09 +0000
asID:                     60781
IP address blocks:        141.11.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:23:7a:d7:38:06:81:04:05:15:7b:ce:74:f9:14:8c:b6:e0:a1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: May  4 20:42:09 2026 GMT
            Not After : May  3 20:47:09 2027 GMT
        Subject: CN=A063E637B006B508F7D0775F71FBDE3D620992BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:50:46:47:c5:0f:02:b5:b8:a3:5a:8e:72:
                    9d:a7:25:17:63:70:71:e3:e6:b6:6d:2a:c1:e5:94:
                    18:69:62:d7:40:e2:04:50:84:43:3e:33:e7:aa:09:
                    a6:58:3b:aa:c6:49:a1:7f:d6:1b:fb:bc:b5:e6:a2:
                    36:6e:ea:57:8b:10:d1:46:b9:df:40:16:49:52:7c:
                    60:8c:a8:e6:5b:2f:0f:12:0b:44:d6:23:ba:fa:01:
                    b4:e3:9e:98:90:34:5b:4a:af:a8:3d:a4:e7:97:f3:
                    eb:ab:32:a7:37:8d:b3:ae:97:7b:d3:c7:bf:9f:51:
                    96:d2:a4:6e:d3:29:db:b6:e5:b8:ae:7c:cb:0e:d5:
                    55:a3:d5:f8:3c:49:17:22:bd:b1:08:9c:e2:7d:b5:
                    c8:af:5f:0c:14:be:33:26:e9:b2:0d:2d:10:d3:8b:
                    ad:55:0b:d3:1a:11:7b:d2:46:10:e6:fd:cd:80:34:
                    54:cd:f9:72:b9:46:73:0a:cc:d6:c9:e6:99:74:34:
                    36:bc:c3:ce:55:fc:04:48:a6:ff:9b:6a:de:bd:92:
                    cf:95:23:4d:15:a8:d6:03:dc:56:78:aa:d7:ae:7e:
                    55:e3:c8:4c:4f:26:52:2b:0d:c1:cf:91:d9:8a:fc:
                    7f:bb:84:20:78:32:ce:29:e2:79:4f:40:04:5b:ec:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:E6:37:B0:06:B5:08:F7:D0:77:5F:71:FB:DE:3D:62:09:92:BB
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:23:53:16:63:49:d7:18:56:b8:75:3d:a7:b6:ab:c2:33:
         92:74:e4:2b:02:7d:40:05:7f:68:64:59:de:7c:e8:b7:85:8b:
         59:a9:bc:52:36:58:d7:79:bb:d8:2a:8f:ad:c0:18:ee:c6:dd:
         c8:e5:69:4b:ed:3b:5e:8a:26:1a:c4:89:18:65:03:3d:66:76:
         8e:a9:0b:cb:8c:40:16:34:c7:a2:23:de:c0:76:0d:92:af:d5:
         9a:ab:13:5d:5e:d8:69:82:24:85:02:52:12:cd:7a:33:cf:98:
         2d:5b:73:d8:f9:8f:17:ee:90:97:03:e4:30:b1:b3:5d:62:1c:
         ee:24:c7:bb:b3:93:67:0d:f6:be:a5:75:2e:cf:86:ca:47:3b:
         6e:b2:53:9c:5c:39:a6:32:ee:03:61:eb:75:6e:cb:63:e9:b3:
         85:d1:2c:bc:1e:83:68:aa:0b:fb:a7:ee:ba:95:d1:5d:bd:58:
         14:8e:b1:78:6e:bb:69:07:6b:00:5b:04:fd:2b:9b:b0:fe:51:
         72:1c:af:2e:60:36:35:3a:7a:61:e4:84:1f:75:f0:22:04:84:
         c3:ab:f7:79:6b:64:fd:8d:50:ab:45:6c:4b:a9:67:c1:fb:c8:
         e0:f5:63:a7:48:48:de:de:73:11:17:98:f5:dd:28:e4:40:d8:
         7f:c9:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:35:09 2026 by rpki-client