Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: f5Ml270XEJFZQBPA2sP+Pzmj/OTh1ZfaTkd5qL8d6IE=
Subject key identifier: FD:24:D1:8C:3C:3C:94:81:9F:BB:A4:95:6D:25:35:7A:CB:D3:AF:CD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2480A0FD1DD1A4E4D5F17C5CA9BF1BA3CA45BBC0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60117.roa
Signing time: Fri 31 Jul 2026 13:26:57 +0000
ROA not before: Fri 31 Jul 2026 13:21:57 +0000
ROA not after: Fri 30 Jul 2027 13:26:57 +0000
asID: 60117
IP address blocks: 82.38.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:80:a0:fd:1d:d1:a4:e4:d5:f1:7c:5c:a9:bf:1b:a3:ca:45:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 31 13:21:57 2026 GMT
Not After : Jul 30 13:26:57 2027 GMT
Subject: CN=FD24D18C3C3C94819FBBA4956D25357ACBD3AFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:71:ef:af:76:05:24:01:a9:e1:58:06:3a:
ca:6a:9c:2c:ff:68:19:59:5e:2f:1b:0b:4d:51:e2:
e9:95:ec:32:38:a7:a8:26:3b:59:94:53:2a:bb:10:
f3:a8:8f:70:1b:5b:e5:8a:d3:6d:84:64:17:a9:2c:
9d:76:bb:dc:f9:b0:a2:b1:8e:ef:f7:6d:81:db:c5:
d2:b8:4c:d7:02:dc:a6:d2:6d:1b:59:10:c9:77:1e:
da:3f:77:f5:a2:ee:31:bc:57:0f:1e:da:57:fd:68:
1f:cc:9a:9c:3a:74:03:04:f7:c9:06:45:38:3f:63:
08:37:15:ad:d5:3d:7c:9b:af:c9:03:f3:65:e6:1b:
dd:e2:ec:d6:0f:1b:ff:82:dd:b8:9f:84:26:b8:a3:
43:91:24:98:e8:67:bf:e2:ba:fe:24:70:49:a7:9c:
e9:93:23:00:9b:b3:ce:6e:35:9c:37:2a:b4:cd:3d:
2e:c9:09:e6:4f:69:3d:ea:60:8c:78:6b:08:66:a1:
8d:ca:fe:50:dd:db:30:e7:0b:a6:fe:47:11:25:2c:
42:cb:22:e2:08:78:dc:42:92:50:b9:3a:17:70:36:
b2:5b:11:0d:ca:1a:f6:36:fe:11:80:e3:e6:cd:32:
df:e4:9b:31:ef:21:22:74:e0:e1:d6:06:ad:3e:7a:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:D1:8C:3C:3C:94:81:9F:BB:A4:95:6D:25:35:7A:CB:D3:AF:CD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5d:8a:1a:5e:e6:54:57:b8:8c:2f:29:77:1c:45:c5:3c:29:
99:06:3c:e0:20:9b:80:e6:ad:00:fc:66:c1:42:a6:50:e2:15:
c6:56:2f:08:ed:19:64:eb:73:5d:57:31:33:7d:76:d3:7a:b6:
0c:e8:e1:49:ca:08:b7:7a:d7:0f:04:41:cb:9c:f6:90:0b:cc:
90:32:e6:ae:43:38:f4:1a:1a:b3:f2:17:d7:5e:46:8e:ac:ff:
56:aa:03:ef:eb:7b:26:96:b9:00:54:1c:52:e3:25:d5:e2:89:
16:78:65:15:b9:94:f8:9e:cc:da:25:0a:cc:db:e0:b2:f3:e8:
4e:e7:ea:0b:9a:91:32:87:0a:ec:00:95:34:96:17:e8:6d:26:
b2:57:29:7e:0f:ba:7d:75:00:87:32:c6:53:38:46:c7:6e:d6:
ca:01:4b:21:a2:3f:5a:59:57:7a:d4:67:fc:7b:9d:c3:cd:89:
33:2f:fb:29:b5:69:e7:57:a1:17:c7:e4:fa:33:d6:c1:a6:e4:
cc:85:a6:4c:bf:97:3d:dc:37:ce:ad:69:e3:18:03:a7:8e:93:
3e:87:0d:89:b8:52:9f:ed:6e:fb:b2:c1:b5:cc:ed:f5:28:0c:
73:ee:b1:64:fe:63:47:8c:36:be:14:5a:1a:0d:de:f5:4d:db:
b3:8f:a3:1e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJICg/R3RpOTV8Xxcqb8bo8pFu8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MzExMzIxNTdaFw0yNzA3MzAxMzI2NTdaMDMxMTAvBgNV
BAMTKEZEMjREMThDM0MzQzk0ODE5RkJCQTQ5NTZEMjUzNTdBQ0JEM0FGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRXHvr3YFJAGp4VgGOspqnCz/
aBlZXi8bC01R4umV7DI4p6gmO1mUUyq7EPOoj3AbW+WK022EZBepLJ12u9z5sKKx
ju/3bYHbxdK4TNcC3KbSbRtZEMl3Hto/d/Wi7jG8Vw8e2lf9aB/Mmpw6dAME98kG
RTg/Ywg3Fa3VPXybr8kD82XmG93i7NYPG/+C3bifhCa4o0ORJJjoZ7/iuv4kcEmn
nOmTIwCbs85uNZw3KrTNPS7JCeZPaT3qYIx4awhmoY3K/lDd2zDnC6b+RxElLELL
IuIIeNxCklC5OhdwNrJbEQ3KGvY2/hGA4+bNMt/kmzHvISJ04OHWBq0+epbfAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU/STRjDw8lIGfu6SVbSU1esvTr80wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjAxMTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJtMw
DQYJKoZIhvcNAQELBQADggEBAJ5dihpe5lRXuIwvKXccRcU8KZkGPOAgm4DmrQD8
ZsFCplDiFcZWLwjtGWTrc11XMTN9dtN6tgzo4UnKCLd61w8EQcuc9pALzJAy5q5D
OPQaGrPyF9deRo6s/1aqA+/reyaWuQBUHFLjJdXiiRZ4ZRW5lPiezNolCszb4LLz
6E7n6guakTKHCuwAlTSWF+htJrJXKX4Pun11AIcyxlM4Rsdu1soBSyGiP1pZV3rU
Z/x7ncPNiTMv+ym1aedXoRfH5Poz1sGm5MyFpky/lz3cN86taeMYA6eOkz6HDYm4
Up/tbvuywbXM7fUoDHPusWT+Y0eMNr4UWhoN3vVN27OPox4=
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:21 2026 by rpki-client