Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60982.roa
File: AS60982.roa (raw, json)
Hash identifier: eXjZmza4ZcW7K2WBuh4wBNBzdocTSxl1M1V7xMH2Oio=
Subject key identifier: A6:3B:65:61:55:D0:92:9C:95:15:D7:DE:F0:53:F0:3D:DC:0F:C4:81
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 542ABAA8FCD3E1EFB6E72ABB49FC30BE9153C559
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60982.roa
Signing time: Wed 30 Sep 2026 10:44:04 +0000
ROA not before: Wed 30 Sep 2026 10:39:04 +0000
ROA not after: Wed 29 Sep 2027 10:44:04 +0000
asID: 60982
IP address blocks: 141.11.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2a:ba:a8:fc:d3:e1:ef:b6:e7:2a:bb:49:fc:30:be:91:53:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 10:39:04 2026 GMT
Not After : Sep 29 10:44:04 2027 GMT
Subject: CN=A63B656155D0929C9515D7DEF053F03DDC0FC481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:e1:14:d2:f7:ef:95:e5:16:cc:fe:03:14:
1b:be:50:c0:a7:ac:43:77:a5:67:7f:24:b6:f0:a4:
7c:dc:1c:b6:42:76:a4:00:0d:da:45:63:3c:52:a3:
8e:72:57:5b:df:3d:d3:aa:b1:03:e3:11:e1:77:0f:
64:ed:ff:dd:84:8c:2a:3d:92:4e:78:d6:fe:53:bc:
6c:9f:11:60:c9:db:3d:7d:e1:dd:0c:cb:55:74:8f:
b4:13:16:e2:f0:23:b0:9e:f9:6b:ce:b6:ee:7d:d8:
d5:d6:12:67:18:68:e8:cb:00:37:29:bf:cb:9a:2f:
d6:a3:ea:91:ce:6f:19:e8:b7:b3:8e:15:ac:f2:d1:
89:73:f3:8b:b8:60:7a:b9:6a:02:2b:22:aa:b2:10:
f1:f7:3a:a7:0b:7b:cf:57:be:b8:ed:6d:fc:a8:f9:
1d:f6:10:66:f6:a9:34:eb:e5:8f:3d:68:3f:8c:54:
89:f0:05:1c:29:75:43:26:50:d5:cb:16:ef:4e:a8:
e1:37:51:d0:ce:a3:0a:8f:39:8e:f3:91:76:0a:87:
ea:f6:e0:19:7f:64:34:3e:d2:95:e2:49:b0:5c:ea:
be:24:20:ed:58:b6:08:3b:a1:e1:6c:ad:24:71:28:
d7:0a:da:f7:7d:1e:de:82:f5:01:e7:cf:b9:04:4a:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:65:61:55:D0:92:9C:95:15:D7:DE:F0:53:F0:3D:DC:0F:C4:81
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.181.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b7:3c:fb:ab:c5:dc:18:b8:9b:e1:c0:17:ba:8f:69:ee:93:
f0:f9:ea:a0:54:4a:cd:ce:15:93:8c:6c:0f:f9:7d:06:ae:28:
a6:4a:58:fc:98:0b:fa:9b:3d:61:2e:ad:cb:52:a8:a4:5b:2c:
dd:4a:bc:66:f5:10:25:a8:0e:38:ca:ff:71:51:2d:73:1a:75:
63:06:a3:e8:c8:90:14:e8:1e:f5:d3:e9:b2:6b:bd:46:b0:8e:
96:38:16:25:d7:10:8b:ff:30:e4:46:54:e2:ca:f5:c4:e3:37:
03:10:fc:8f:8c:60:e9:0c:cb:e4:2f:42:43:6d:65:ed:34:fb:
a8:ae:9a:d9:17:3c:b4:2c:2a:6f:49:a9:59:d9:34:48:77:10:
f7:73:32:08:2f:b4:52:f0:df:b0:69:65:d9:97:a8:53:e4:52:
01:25:09:bb:06:e7:46:cd:3c:38:5d:fe:17:99:45:fe:33:65:
55:09:b5:a9:1f:92:82:ff:fe:3e:43:9b:07:60:d6:88:9c:4e:
65:5d:fc:00:ea:95:87:9e:6b:e7:43:6e:02:75:8b:79:25:7b:
69:02:8f:5e:4a:2e:09:2f:1c:54:67:a1:4c:95:54:11:49:cb:
ce:c6:c5:2f:36:b0:24:10:a9:ee:70:0c:4b:e7:ca:48:dd:c7:
d3:9f:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:32:08 2026 by rpki-client