Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/60UpiJ6fl89naraA8nOrZToZVDg.roa
File: 60UpiJ6fl89naraA8nOrZToZVDg.roa (raw, json)
Hash identifier: h0aJTBtTtsMydm9YfPSPRZOiPkOZ4M8oovt0PxLmqiw=
Subject key identifier: EB:45:29:88:9E:9F:97:CF:67:6A:B6:80:F2:73:AB:65:3A:19:54:38
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F7DBB4D98CA494B2F270B93042785C3B7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/60UpiJ6fl89naraA8nOrZToZVDg.roa
Signing time: Mon 20 Jul 2026 04:14:14 +0000
ROA not before: Mon 20 Jul 2026 04:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 89.125.141.0/24 maxlen: 24
89.125.164.0/24 maxlen: 24
89.125.184.0/24 maxlen: 24
208.123.184.0/24 maxlen: 24
208.123.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:bb:4d:98:ca:49:4b:2f:27:0b:93:04:27:85:c3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 20 04:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb4529889e9f97cf676ab680f273ab653a195438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:fb:79:3c:4e:9a:30:1a:68:2e:bf:19:de:
d9:b9:39:6d:7e:7d:05:32:00:f1:21:f4:7f:99:59:
be:ac:09:3d:5d:07:d3:9b:43:b4:ef:93:06:07:3c:
dd:39:3a:e4:e3:4c:3c:93:a7:7d:36:87:47:a2:cd:
c6:b8:72:6d:3f:f5:9a:1d:85:f6:d4:af:fb:ca:65:
26:cd:97:56:e0:f4:e3:f0:34:17:32:e9:cc:1c:3e:
db:34:c6:60:00:19:8a:bd:94:a3:3d:9a:53:a7:9d:
9a:08:60:4e:5a:57:13:42:36:76:be:01:95:e7:cb:
0f:94:d1:76:e2:0f:cc:0e:58:89:00:e4:60:a8:fb:
a6:13:23:97:1e:2f:c8:b9:16:b1:d5:44:0a:dd:a6:
d1:ec:13:b5:3e:42:81:83:f0:6b:53:ad:ec:17:79:
7e:af:58:10:1c:a9:bd:fc:92:21:65:fa:37:cc:5d:
a9:7a:79:45:33:77:f9:4c:07:84:fa:34:b0:68:cb:
f6:0a:7d:2d:c2:2d:bb:dd:bf:60:78:12:80:00:d2:
e9:75:54:6d:4f:91:f6:45:94:df:56:9c:e8:b6:ea:
30:d0:88:b1:82:df:3c:84:ce:7e:20:b2:02:ad:ca:
0b:97:40:74:bb:8e:8e:09:3d:55:76:e4:8d:f1:28:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:29:88:9E:9F:97:CF:67:6A:B6:80:F2:73:AB:65:3A:19:54:38
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/60UpiJ6fl89naraA8nOrZToZVDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.141.0/24
89.125.164.0/24
89.125.184.0/24
208.123.184.0/24
208.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fd:5d:2e:98:25:66:76:07:33:bd:ff:88:2f:5d:0c:53:e1:
c3:2a:64:fb:4f:45:f5:3f:4b:bc:e0:d5:d2:2e:f8:75:85:14:
12:3e:84:11:d3:4e:5a:bc:11:76:8f:1b:b9:29:06:45:78:86:
84:13:8e:26:0b:74:9b:6e:0a:c1:8f:b9:1e:85:6b:ad:ea:c7:
58:82:72:66:ef:74:6b:98:e2:cd:91:59:f1:fb:6f:77:3e:77:
00:7d:30:20:a5:db:e1:6d:5e:b2:3c:34:67:60:8e:14:0c:cd:
e9:dd:80:42:99:ad:eb:f6:11:bb:9b:54:ef:3a:3b:c2:8e:1b:
0e:c2:ad:b1:11:e1:37:10:59:20:86:11:59:22:a9:f0:21:64:
f3:90:24:f1:05:f1:ee:22:55:38:80:b7:14:be:de:90:a4:1e:
32:4c:47:83:c6:68:f8:51:61:7e:18:d8:33:a5:a3:5d:4c:fc:
4a:04:16:d7:5d:9a:a5:c6:38:3f:01:f3:d1:70:17:73:7f:e1:
dc:25:ae:f2:d8:aa:40:01:58:6e:3c:dc:fd:03:f1:32:bd:f6:
4a:0e:dd:86:9e:14:d5:bb:c4:9a:b1:83:47:0c:25:d1:86:36:
27:90:39:c1:89:e4:04:29:b5:5a:13:3b:d4:56:65:b5:1e:ba:
ec:ed:65:75
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ99u02YyklLLycLkwQnhcO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNzIwMDQxNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjQ1Mjk4ODllOWY5N2NmNjc2YWI2ODBmMjczYWI2NTNhMTk1NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsj7eTxOmjAaaC6/Gd7ZuTltfn0F
MgDxIfR/mVm+rAk9XQfTm0O075MGBzzdOTrk40w8k6d9NodHos3GuHJtP/WaHYX2
1K/7ymUmzZdW4PTj8DQXMunMHD7bNMZgABmKvZSjPZpTp52aCGBOWlcTQjZ2vgGV
58sPlNF24g/MDliJAORgqPumEyOXHi/IuRax1UQK3abR7BO1PkKBg/BrU63sF3l+
r1gQHKm9/JIhZfo3zF2penlFM3f5TAeE+jSwaMv2Cn0twi273b9geBKAANLpdVRt
T5H2RZTfVpzotuow0Iixgt88hM5+ILICrcoLl0B0u46OCT1VduSN8SgTgQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOtFKYien5fPZ2q2gPJzq2U6GVQ4MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNjBVcGlKNmZsODluYXJhQThuT3JaVG9aVkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWX2NAwQA
WX2kAwQAWX24AwQA0Hu4AwQA0Hu6MA0GCSqGSIb3DQEBCwUAA4IBAQBv/V0umCVm
dgczvf+IL10MU+HDKmT7T0X1P0u84NXSLvh1hRQSPoQR005avBF2jxu5KQZFeIaE
E44mC3SbbgrBj7kehWut6sdYgnJm73RrmOLNkVnx+293PncAfTAgpdvhbV6yPDRn
YI4UDM3p3YBCma3r9hG7m1TvOjvCjhsOwq2xEeE3EFkghhFZIqnwIWTzkCTxBfHu
IlU4gLcUvt6QpB4yTEeDxmj4UWF+GNgzpaNdTPxKBBbXXZqlxjg/AfPRcBdzf+Hc
Ja7y2KpAAVhuPNz9A/EyvfZKDt2GnhTVu8SasYNHDCXRhjYnkDnBieQEKbVaEzvU
VmW1Hrrs7WV1
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:20 2026 by rpki-client