Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS60982.roa
File:                     AS60982.roa (raw, json)
Hash identifier:          h5Sleu2/TtWHHTKcF/HsC69gtUm7O8s2VhNFg+R4szs=
Subject key identifier:   98:31:82:EE:CD:BC:95:1C:FF:C1:9D:7C:C5:2C:13:C5:19:E1:77:9A
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       31CAA73740480CC594BA1BC391F9C6335BA82DD2
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS60982.roa
Signing time:             Wed 30 Sep 2026 15:02:05 +0000
ROA not before:           Wed 30 Sep 2026 14:57:05 +0000
ROA not after:            Wed 29 Sep 2027 15:02:05 +0000
asID:                     60982
IP address blocks:        152.237.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ca:a7:37:40:48:0c:c5:94:ba:1b:c3:91:f9:c6:33:5b:a8:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Sep 30 14:57:05 2026 GMT
            Not After : Sep 29 15:02:05 2027 GMT
        Subject: CN=983182EECDBC951CFFC19D7CC52C13C519E1779A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:61:52:10:80:d0:4b:b7:92:7c:90:c4:f3:
                    4f:5a:98:d5:2d:ac:c4:82:f0:13:d1:3a:ca:d5:7a:
                    fc:b0:45:cf:9a:4a:ab:2b:c9:d7:ab:15:d5:85:18:
                    06:e3:15:2a:d5:bb:8a:5c:39:0d:c9:e3:d5:94:14:
                    3c:5e:8b:e0:a0:e3:92:b4:95:47:15:75:6a:58:aa:
                    1d:68:7c:7a:a6:95:92:93:71:d8:86:2b:73:4d:b5:
                    84:65:9f:d0:04:11:76:0e:07:60:68:6a:cf:86:b3:
                    6e:a5:71:47:cd:c1:6c:e5:7f:4d:a1:cc:be:42:f6:
                    9b:60:5f:dc:d9:f8:7f:99:f3:8e:a3:4c:f3:84:fa:
                    b0:83:c5:2c:63:db:e9:47:eb:72:bd:30:fc:f5:6b:
                    00:dd:d5:04:25:e9:a1:5b:b1:a6:47:d7:0e:39:b0:
                    93:44:95:72:ab:60:9d:67:99:6c:b2:dd:9c:fc:2c:
                    b8:1d:cb:fb:03:40:7a:52:ab:0a:ee:11:41:c4:4f:
                    77:72:35:89:32:95:01:1a:c1:54:fe:14:66:c3:14:
                    91:92:93:47:71:d1:f6:dd:d6:1b:cb:66:91:05:43:
                    8c:9a:94:a4:39:c0:bb:58:c0:5f:b3:82:a7:50:22:
                    6d:73:9d:98:2e:23:be:3d:0b:82:4f:5b:39:60:93:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:82:EE:CD:BC:95:1C:FF:C1:9D:7C:C5:2C:13:C5:19:E1:77:9A
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS60982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.237.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:96:3c:98:fe:33:01:c2:37:be:c3:93:b6:3f:0a:0e:eb:d8:
         47:4e:41:ea:b3:e0:86:c6:de:9c:1c:f4:a3:18:3a:c2:2d:26:
         35:35:5a:04:ce:51:e9:71:3f:bc:76:3b:3b:41:66:95:67:20:
         c8:25:4e:5e:b1:5c:dd:ee:fa:cd:56:55:a5:7e:30:a3:4b:7f:
         26:c5:90:0c:f4:e6:99:69:da:d3:0f:1a:cf:1c:18:93:fc:27:
         8c:84:2c:07:14:f3:0b:9f:15:c9:1c:3a:bd:89:c8:2d:66:04:
         6e:31:56:29:9f:b3:bc:25:bf:42:30:5f:be:df:22:7c:75:42:
         f3:c9:52:13:76:71:88:28:4c:57:1d:ec:de:6f:1c:e5:47:f4:
         41:a1:c9:f4:72:50:5d:88:e1:b4:9d:51:0e:a1:d3:c5:77:eb:
         28:9e:d1:53:38:2c:d9:60:66:ff:4d:05:32:52:b6:1a:be:19:
         88:69:3e:70:f1:e7:99:59:d1:a0:98:06:25:6c:71:34:dc:e1:
         f0:4f:6c:6f:64:d8:d6:64:70:a8:b9:4b:d8:45:b7:70:3a:1f:
         79:ee:5b:98:db:c3:47:77:41:3c:3b:ae:22:f7:9d:6e:50:82:
         8e:df:b6:98:d6:d1:b8:93:a5:33:38:4d:e7:15:54:10:ce:60:
         d2:bc:de:3c
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUMcqnN0BIDMWUuhvDkfnGM1uoLdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz
MDBFODNDRjAeFw0yNjA5MzAxNDU3MDVaFw0yNzA5MjkxNTAyMDVaMDMxMTAvBgNV
BAMTKDk4MzE4MkVFQ0RCQzk1MUNGRkMxOUQ3Q0M1MkMxM0M1MTlFMTc3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYmFSEIDQS7eSfJDE809amNUt
rMSC8BPROsrVevywRc+aSqsryderFdWFGAbjFSrVu4pcOQ3J49WUFDxei+Cg45K0
lUcVdWpYqh1ofHqmlZKTcdiGK3NNtYRln9AEEXYOB2Boas+Gs26lcUfNwWzlf02h
zL5C9ptgX9zZ+H+Z846jTPOE+rCDxSxj2+lH63K9MPz1awDd1QQl6aFbsaZH1w45
sJNElXKrYJ1nmWyy3Zz8LLgdy/sDQHpSqwruEUHET3dyNYkylQEawVT+FGbDFJGS
k0dx0fbd1hvLZpEFQ4yalKQ5wLtYwF+zgqdQIm1znZguI749C4JPWzlgk9EbAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUmDGC7s28lRz/wZ18xSwTxRnhd5owHwYDVR0j
BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj
NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy
OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4
MTQ5MTZEQTMwMEU4M0NGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG
XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy
Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVM2MDk4Mi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAJjt5jANBgkqhkiG9w0BAQsFAAOCAQEAsJY8mP4zAcI3vsOTtj8KDuvY
R05B6rPghsbenBz0oxg6wi0mNTVaBM5R6XE/vHY7O0FmlWcgyCVOXrFc3e76zVZV
pX4wo0t/JsWQDPTmmWna0w8azxwYk/wnjIQsBxTzC58VyRw6vYnILWYEbjFWKZ+z
vCW/QjBfvt8ifHVC88lSE3ZxiChMVx3s3m8c5Uf0QaHJ9HJQXYjhtJ1RDqHTxXfr
KJ7RUzgs2WBm/00FMlK2Gr4ZiGk+cPHnmVnRoJgGJWxxNNzh8E9sb2TY1mRwqLlL
2EW3cDofee5bmNvDR3dBPDuuIvedblCCjt+2mNbRuJOlMzhN5xVUEM5g0rzePA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:02:14 2026 by rpki-client