Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa
File: 60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa (raw, json)
Hash identifier: 7VK6Vmvf6jjatDbE5ZSZYNtNWbAI+7P8l+cpqAhy+BI=
Subject key identifier: EB:45:C6:D0:93:8F:64:8C:89:EA:E1:5D:A1:04:32:86:2B:0B:3D:B4
Certificate issuer: /CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Certificate serial: 019F23691FAC3C8D5D395684EC6734B65CBD
Authority key identifier: 91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204035
IP address blocks: 185.94.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1f:ac:3c:8d:5d:39:56:84:ec:67:34:b6:5c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91394e0ca5d80900381925cf413f839e8bcb3b4f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb45c6d0938f648c89eae15da10432862b0b3db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:e8:04:4e:43:13:44:f3:7c:f4:84:b4:32:
07:85:52:93:10:82:6c:3f:fb:cc:b1:0f:7b:ed:bd:
c4:dd:32:d3:bc:95:33:b1:5e:48:fd:7d:30:82:d3:
30:e7:e5:96:aa:40:9e:27:21:05:93:4b:d2:ab:0e:
6e:00:42:00:3c:e3:42:0f:c4:7e:19:89:8a:9c:59:
9a:41:be:62:5d:41:f4:c9:a8:44:2b:f1:e7:7d:9b:
9a:c0:a2:6c:79:39:2c:78:dc:17:1f:41:c5:1b:ba:
c8:95:63:b9:ec:80:fe:fe:69:59:e2:0c:f6:28:c3:
ea:10:2f:89:74:16:53:1d:52:f0:91:f8:db:52:cd:
c2:a5:87:0a:06:f3:5c:8b:5b:48:b5:03:be:6d:8a:
71:b5:6c:25:11:b6:83:47:29:d5:d7:c7:fb:97:cf:
cc:85:3a:c1:40:52:86:c7:05:72:65:af:19:dc:d3:
9a:b1:1e:f4:60:3c:56:82:7b:a8:60:23:33:94:c6:
a5:c8:f1:cf:cb:88:b6:40:23:9e:99:db:42:4e:1c:
15:55:80:19:fc:95:2c:02:e6:70:95:7d:7e:8d:40:
71:7b:9c:22:06:c5:3d:5e:75:da:19:bc:74:b4:ce:
83:e1:b7:53:83:7e:3d:65:71:44:f1:2e:8c:f7:16:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:C6:D0:93:8F:64:8C:89:EA:E1:5D:A1:04:32:86:2B:0B:3D:B4
X509v3 Authority Key Identifier:
keyid:91:39:4E:0C:A5:D8:09:00:38:19:25:CF:41:3F:83:9E:8B:CB:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTlODKXYCQA4GSXPQT-DnovLO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/60XG0JOPZIyJ6uFdoQQyhisLPbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/kTlODKXYCQA4GSXPQT-DnovLO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.254.0/23
Signature Algorithm: sha256WithRSAEncryption
51:7d:88:bc:0c:81:f9:a2:3b:84:aa:32:c4:c8:c4:a8:c1:70:
a2:08:1a:b4:b5:22:c3:24:13:10:1f:50:8a:be:d3:5f:ff:f9:
05:75:7a:b9:52:1c:a7:0b:f5:96:5d:e2:8a:82:2b:67:7f:ce:
40:5b:bb:06:8b:0e:22:8f:df:20:e8:48:b0:73:4b:a3:d0:4d:
92:cc:84:d8:33:14:7d:92:da:c8:91:7e:02:64:2b:a6:cc:3d:
6d:1c:72:97:52:c0:ab:b5:d5:85:3d:44:86:23:bb:32:65:89:
f4:a9:46:67:e1:42:58:a3:e4:c4:fb:c0:8d:40:99:65:5b:5a:
7d:cf:0a:c5:06:28:9f:67:02:f5:b1:e0:06:e7:1c:b0:55:0e:
b5:08:99:38:d8:cc:9f:06:aa:a2:ce:68:23:6d:4b:8f:57:d2:
10:d7:d1:0f:86:eb:e6:51:56:fe:3d:c3:08:d8:99:2f:0a:e6:
a7:e3:79:12:7a:ea:ff:1f:85:86:93:7c:c1:02:b7:71:9c:8f:
a6:62:35:e8:1d:b8:8b:e7:23:ba:87:29:26:eb:e0:97:b0:24:
be:a0:bd:75:66:d7:18:2a:b2:12:80:86:cc:da:36:11:3b:07:
5a:11:55:34:a2:4c:e4:8d:ee:8f:79:7f:8a:78:cb:f9:a9:45:
9d:ae:1a:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaR+sPI1dOVaE7Gc0tly9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzk0ZTBjYTVkODA5MDAzODE5MjVjZjQxM2Y4MzllOGJj
YjNiNGYwHhcNMjYwNzAyMTUxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjQ1YzZkMDkzOGY2NDhjODllYWUxNWRhMTA0MzI4NjJiMGIzZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3oBE5DE0TzfPSEtDIHhVKTEIJs
P/vMsQ977b3E3TLTvJUzsV5I/X0wgtMw5+WWqkCeJyEFk0vSqw5uAEIAPONCD8R+
GYmKnFmaQb5iXUH0yahEK/HnfZuawKJseTkseNwXH0HFG7rIlWO57ID+/mlZ4gz2
KMPqEC+JdBZTHVLwkfjbUs3CpYcKBvNci1tItQO+bYpxtWwlEbaDRynV18f7l8/M
hTrBQFKGxwVyZa8Z3NOasR70YDxWgnuoYCMzlMalyPHPy4i2QCOemdtCThwVVYAZ
/JUsAuZwlX1+jUBxe5wiBsU9XnXaGbx0tM6D4bdTg349ZXFE8S6M9xYxBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOtFxtCTj2SMierhXaEEMoYrCz20MB8GA1UdIwQY
MBaAFJE5Tgyl2AkAOBklz0E/g56LyztPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RsT0RLWFlDUUE0R1NYUFFULURub3ZMTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYt
ZTcxNzY3ODZmNzRhLzEvNjBYRzBKT1BaSXlKNnVGZG9RUXloaXNMUGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYtZTcxNzY3ODZmNzRh
LzEva1RsT0RLWFlDUUE0R1NYUFFULURub3ZMTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuV7+MA0G
CSqGSIb3DQEBCwUAA4IBAQBRfYi8DIH5ojuEqjLEyMSowXCiCBq0tSLDJBMQH1CK
vtNf//kFdXq5UhynC/WWXeKKgitnf85AW7sGiw4ij98g6Eiwc0uj0E2SzITYMxR9
ktrIkX4CZCumzD1tHHKXUsCrtdWFPUSGI7syZYn0qUZn4UJYo+TE+8CNQJllW1p9
zwrFBiifZwL1seAG5xywVQ61CJk42MyfBqqizmgjbUuPV9IQ19EPhuvmUVb+PcMI
2JkvCuan43kSeur/H4WGk3zBArdxnI+mYjXoHbiL5yO6hykm6+CXsCS+oL11ZtcY
KrISgIbM2jYROwdaEVU0okzkje6PeX+KeMv5qUWdrhrn
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:09 2026 by rpki-client