Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: kpJYNtAC1D4NjLoxUNsHKUsjt7sR8XHGhY7GfXfvfYM=
Subject key identifier: 11:98:85:6B:36:A4:90:63:1A:36:2C:42:E7:B9:2C:0D:74:B2:62:55
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 116BBFBA79A333C5AABF2DAD98A95D236A5CE211
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60781.roa
Signing time: Wed 10 Jun 2026 08:34:54 +0000
ROA not before: Wed 10 Jun 2026 08:29:54 +0000
ROA not after: Wed 09 Jun 2027 08:34:54 +0000
asID: 60781
IP address blocks: 140.233.166.0/24 maxlen: 24
145.223.42.0/24 maxlen: 24
145.223.45.0/24 maxlen: 24
145.223.51.0/24 maxlen: 24
145.223.53.0/24 maxlen: 24
145.223.57.0/24 maxlen: 24
145.223.59.0/24 maxlen: 24
145.223.61.0/24 maxlen: 24
146.103.1.0/24 maxlen: 24
146.103.6.0/24 maxlen: 24
148.135.177.0/24 maxlen: 24
148.135.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6b:bf:ba:79:a3:33:c5:aa:bf:2d:ad:98:a9:5d:23:6a:5c:e2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 10 08:29:54 2026 GMT
Not After : Jun 9 08:34:54 2027 GMT
Subject: CN=1198856B36A490631A362C42E7B92C0D74B26255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:90:19:d4:9e:7f:59:37:c6:1b:55:72:5e:
9a:30:26:5f:70:51:4c:43:d8:b0:68:dd:c2:3c:b7:
4b:a1:ac:7e:24:b4:e6:bf:49:c0:cb:3a:6b:73:65:
f2:51:10:ae:57:e9:b9:1d:17:de:08:0e:af:c4:10:
63:8c:04:79:91:68:03:8a:1f:82:61:47:69:f5:29:
71:d2:ed:a6:05:b3:f5:9c:5d:b8:e3:a0:c8:dc:ae:
ee:50:c6:5f:bd:2b:8e:8a:96:05:a7:5f:df:48:e5:
2a:61:67:37:c2:69:e6:c7:fc:a6:eb:60:71:3d:32:
51:f1:cc:49:3c:06:ac:26:ce:f2:ac:1f:c2:9b:63:
49:2d:1d:2f:78:08:f4:d0:3d:e1:23:54:a6:9b:e8:
b9:7e:f3:bf:dd:9b:7e:e0:64:7b:ce:ff:86:0f:db:
d1:fb:02:f9:3f:04:a0:37:94:7c:4b:8d:77:cd:cb:
40:5a:3e:32:2f:f2:f5:24:6e:51:28:b0:48:7e:ea:
e2:8d:43:c6:3b:77:06:68:f7:44:8b:ce:90:1a:4e:
2a:f9:38:86:8c:0f:d1:3e:61:b3:d1:a7:8f:6a:ee:
b3:ba:85:93:c4:c3:a7:37:2e:ed:27:b8:46:67:ca:
14:34:3d:23:73:3a:ad:2b:f8:f5:56:a9:bd:0c:2c:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:85:6B:36:A4:90:63:1A:36:2C:42:E7:B9:2C:0D:74:B2:62:55
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.166.0/24
145.223.42.0/24
145.223.45.0/24
145.223.51.0/24
145.223.53.0/24
145.223.57.0/24
145.223.59.0/24
145.223.61.0/24
146.103.1.0/24
146.103.6.0/24
148.135.177.0/24
148.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7d:ac:d6:e1:21:8a:03:d8:a8:19:51:0f:07:11:60:0b:e9:
b3:82:13:6c:85:a9:3d:c8:c1:8a:e9:76:0b:18:b9:eb:a5:d6:
81:83:e4:ae:eb:3e:02:fd:dc:dd:82:14:47:2f:01:20:fa:8f:
a1:7a:7c:af:b3:18:38:dc:fb:41:41:49:be:5f:0b:ba:96:ce:
e5:8a:3a:23:9e:8b:2f:96:3a:5e:81:6a:76:75:5c:c7:2a:1b:
bb:16:06:9e:99:26:fa:ad:98:d4:b0:16:a3:5e:51:e6:dc:63:
c4:0d:e0:7e:09:42:8c:14:f6:aa:29:98:40:aa:b0:b2:4f:1b:
0f:23:fe:84:77:81:09:9c:63:c9:89:6f:5d:a4:83:be:cb:ab:
2b:03:4b:86:61:e2:0e:93:58:55:0b:1c:69:b5:2b:61:a6:1b:
9f:0f:39:be:13:d6:d6:8c:41:6b:1f:dc:8c:46:b4:72:f0:ee:
17:f4:1e:09:68:93:d9:c6:11:67:db:16:14:d9:a9:08:b5:55:
e5:07:3f:49:08:18:64:40:a4:d6:b4:ec:78:29:d8:3f:f5:fe:
97:ad:72:6c:17:02:3a:cd:99:95:1c:f4:f0:ee:c9:e6:47:b6:
58:43:85:e7:bb:51:00:40:d1:74:13:fc:02:1f:2b:99:22:88:
62:c5:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:00 2026 by rpki-client