Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: hbS1+DCKt1ISo7UdW2ynKB9BI7hfMMJwzaw2SdDq7D4=
Subject key identifier: 39:44:22:48:9D:4E:D6:4A:DF:7D:5D:46:63:21:B8:3E:62:99:8E:69
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 01A8C7E13B22C58DCDDCAC7B895FD87FED36173E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60781.roa
Signing time: Thu 02 Jul 2026 00:00:15 +0000
ROA not before: Wed 01 Jul 2026 23:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:15 +0000
asID: 60781
IP address blocks: 191.96.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a8:c7:e1:3b:22:c5:8d:cd:dc:ac:7b:89:5f:d8:7f:ed:36:17:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 1 23:55:15 2026 GMT
Not After : Jul 1 00:00:15 2027 GMT
Subject: CN=394422489D4ED64ADF7D5D466321B83E62998E69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:b2:d2:5f:41:f2:da:d7:3c:ef:80:f5:4a:
94:21:b9:b5:f7:5d:1e:51:d9:95:5e:32:6f:33:3a:
dd:28:09:77:04:1a:cc:61:90:67:8b:a4:45:57:b0:
d5:1e:6d:07:03:49:64:da:f6:a4:58:40:36:b4:86:
c3:74:b2:4b:2f:6a:08:db:f4:ad:47:d3:f3:b1:79:
f0:47:b1:23:a0:12:05:dc:25:81:b8:f9:60:42:95:
64:22:d8:bc:77:e1:46:36:de:ba:16:5c:ea:84:e0:
cc:5e:c1:57:cf:45:65:11:80:9a:d4:3c:39:68:f5:
aa:f9:48:5a:b1:3d:02:21:17:b6:9e:fb:f8:d5:75:
52:56:ee:7d:6c:28:66:dd:0d:7f:f1:16:cb:be:ea:
8a:11:9c:b1:c1:11:5a:96:8a:b0:91:e6:42:17:a2:
c5:49:0c:78:ed:80:72:5a:5c:1b:ad:0d:3c:eb:be:
a5:8d:84:f6:ac:21:91:61:39:e1:58:ce:04:24:aa:
56:9f:7c:6d:d8:25:17:66:0f:46:e6:fb:b1:6f:34:
fd:fe:98:c7:19:85:b7:ab:5f:da:cd:5a:8e:01:bc:
7e:be:f7:05:fa:f9:6d:75:0a:27:ab:2e:ed:a2:61:
7c:1d:54:58:28:4b:10:9b:bc:69:c8:d6:f6:ee:6d:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:44:22:48:9D:4E:D6:4A:DF:7D:5D:46:63:21:B8:3E:62:99:8E:69
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.128.0/24
Signature Algorithm: sha256WithRSAEncryption
59:74:e7:20:37:27:06:4d:0b:98:c8:13:22:83:a4:2c:0c:f2:
92:dd:3a:86:84:8e:72:10:89:40:a4:6d:5e:42:6d:1e:9a:ae:
af:f5:69:b6:46:98:91:a3:7f:b4:62:8a:81:d0:0b:2d:6a:69:
9c:0e:c1:23:62:a0:0a:58:8f:ec:74:20:b1:c7:c2:a5:9e:c9:
95:3b:12:75:d3:a2:f5:7b:07:f3:21:f0:ad:07:65:26:94:97:
28:1c:c3:ec:bc:7a:0b:37:f9:82:cb:c4:59:ab:b8:17:2c:01:
4a:2b:0f:d8:96:ef:15:9e:5d:49:31:1e:49:92:12:b3:22:b6:
50:78:30:f0:2f:a1:b7:f0:45:4c:e9:8c:3e:fe:74:7e:cb:8f:
41:6c:48:e1:59:11:bb:e0:45:28:27:12:01:50:6e:c9:eb:93:
e5:ac:60:00:d1:fd:02:49:45:f5:ae:94:b9:84:bf:51:05:59:
75:54:c1:ad:28:99:93:64:b5:48:7f:a4:85:07:a1:02:f7:44:
89:42:6e:e2:4c:01:50:66:43:dd:e4:ff:87:11:dc:79:8c:00:
2c:fa:61:e5:0f:3f:89:a9:d0:e6:96:c0:a4:3d:86:ea:1f:bd:
e2:94:76:13:f1:c3:98:4a:86:c8:92:92:be:56:6e:bd:88:ba:
9a:49:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:59 2026 by rpki-client