Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60982.roa
File: AS60982.roa (raw, json)
Hash identifier: E7fkxzqaBF6++mwALoXVS0lt0iWbOPZojEc9UpTr+kM=
Subject key identifier: 86:4C:8D:B1:C7:10:9C:B4:4D:61:AD:CC:A2:BD:FE:D0:7F:5D:BB:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1CAEA29EA014214D2948307EBEACAB90641954F7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60982.roa
Signing time: Thu 03 Sep 2026 16:23:45 +0000
ROA not before: Thu 03 Sep 2026 16:18:45 +0000
ROA not after: Thu 02 Sep 2027 16:23:45 +0000
asID: 60982
IP address blocks: 178.95.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ae:a2:9e:a0:14:21:4d:29:48:30:7e:be:ac:ab:90:64:19:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 16:18:45 2026 GMT
Not After : Sep 2 16:23:45 2027 GMT
Subject: CN=864C8DB1C7109CB44D61ADCCA2BDFED07F5DBB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:e1:79:80:20:52:fe:d2:bd:d4:e2:20:37:
54:53:11:2f:71:bf:50:51:54:3d:25:60:d7:20:26:
ce:7c:b3:e7:39:f8:23:64:a6:c6:33:bf:89:e1:38:
8b:0b:77:2f:e5:a9:d2:ab:39:2b:24:c6:67:e8:bd:
a7:e2:89:ac:d8:be:d4:a6:7f:13:63:ea:96:74:90:
e1:c2:ac:8a:22:28:2f:7c:e8:0e:7a:7b:df:cf:4f:
ff:b5:69:84:2a:68:7d:f3:c1:cf:3f:06:39:14:c3:
ab:81:96:bc:6b:27:23:2e:dc:01:03:42:d6:f3:d3:
9b:2d:60:98:c9:6d:f9:21:cf:a8:2b:1f:44:6f:78:
7c:32:3c:74:69:7b:2d:9f:b0:f0:f3:d5:3f:26:ac:
c0:be:47:14:9c:81:4f:ff:c6:34:71:27:26:81:92:
29:f5:81:39:75:fa:fb:f8:65:5b:58:0c:27:67:72:
8f:c7:62:50:06:fe:ff:07:f9:12:dc:2b:fa:1d:ee:
2f:ba:80:f4:af:e2:00:0a:05:6b:e3:94:7e:0a:c1:
37:a8:ba:5a:fd:36:d0:06:fe:69:72:fe:2b:87:6f:
d6:53:18:a1:64:f8:12:0d:e1:1e:48:74:32:49:42:
b0:3d:78:81:ab:85:fb:a5:7d:8d:e2:3b:61:82:4e:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:8D:B1:C7:10:9C:B4:4D:61:AD:CC:A2:BD:FE:D0:7F:5D:BB:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS60982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:63:01:fc:16:19:7c:23:ee:16:59:b8:a3:2a:16:b2:b8:22:
a0:de:6a:46:c0:6d:c7:3f:44:f0:ca:29:97:4e:88:f2:80:28:
2e:50:99:15:87:0a:e1:91:e8:a9:c9:ce:a5:a1:ee:1a:25:7b:
65:84:55:b3:9d:d6:c4:24:46:7a:7d:0b:bf:d9:d1:27:76:32:
4e:ba:71:aa:60:96:9c:77:9f:61:f3:ee:a6:91:cd:3f:a1:f2:
6a:d4:8b:88:3b:6e:27:cb:7a:d7:3b:af:fb:cb:d6:63:53:67:
e9:19:83:c6:bc:a8:91:62:1d:71:98:66:fa:74:82:45:29:7b:
45:f3:e7:2f:45:45:1e:d1:57:37:08:a4:d0:a8:1b:83:e9:d4:
67:44:1d:56:b7:41:46:fe:25:76:78:11:26:4c:e3:24:61:40:
e0:14:cc:a4:a4:88:1f:5f:b1:df:12:0a:74:8f:6e:4c:f2:87:
12:ed:07:66:2e:fa:f1:21:3a:96:09:f7:18:e9:ed:61:d6:cb:
c6:3b:93:9b:8a:29:ec:e9:d4:e7:0f:d4:67:5c:38:5e:0a:ad:
99:84:50:c0:03:23:be:14:68:fd:25:4d:da:29:35:ef:97:63:
f4:ec:e7:80:fc:97:c1:a6:55:94:38:3e:b6:1b:c3:33:f8:2f:
9c:dd:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:48:11 2026 by rpki-client