Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/60w6-oXR0E8e1tW_LGQ1VNSFxhI.roa
File: 60w6-oXR0E8e1tW_LGQ1VNSFxhI.roa (raw, json)
Hash identifier: ieo1Z3F1jozY6gRvb2jjJtTpLsDYHyRVxYptcbrYDv4=
Subject key identifier: EB:4C:3A:FA:85:D1:D0:4F:1E:D6:D5:BF:2C:64:35:54:D4:85:C6:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FDE16031457424C4DDA28A9F93D4691D9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/60w6-oXR0E8e1tW_LGQ1VNSFxhI.roa
Signing time: Fri 07 Aug 2026 21:16:52 +0000
ROA not before: Fri 07 Aug 2026 21:16:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 31.56.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:16:03:14:57:42:4c:4d:da:28:a9:f9:3d:46:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 7 21:16:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb4c3afa85d1d04f1ed6d5bf2c643554d485c612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:6f:38:31:a6:de:ec:15:fe:a8:f8:1e:79:
87:17:14:98:df:ac:49:4a:7c:de:24:0d:39:19:18:
34:bd:f6:b5:32:28:ee:b5:f1:70:8b:df:4a:29:e4:
ff:01:49:58:6e:b8:51:98:ec:75:5f:1c:c4:96:da:
6d:a6:5f:02:96:5b:93:53:9e:17:af:da:2d:a3:c3:
df:bc:0b:cb:ab:77:40:7b:17:52:70:12:8e:fc:ec:
74:b1:76:d5:72:a4:77:62:a7:57:21:4f:a7:85:cf:
7c:08:3e:a6:46:ba:09:40:02:27:13:00:ab:97:47:
c3:3c:9c:e6:d1:f2:ba:89:10:c6:fd:a3:f3:4c:d1:
61:ca:6d:04:33:8d:6e:1e:e0:a7:81:b0:c5:11:52:
83:5e:6c:bd:66:1a:18:ad:4e:d4:55:5c:5f:28:c2:
32:52:08:4e:4d:47:78:fc:2f:30:07:81:b4:dd:91:
99:5b:a8:c5:85:f2:94:57:62:ba:11:5c:a5:60:a6:
75:75:64:70:b8:c9:65:78:75:4d:66:09:0d:ee:83:
70:eb:0b:5b:72:4a:e3:12:11:38:de:eb:f9:f3:09:
ed:9f:06:b5:d0:2f:e5:2e:90:05:87:60:e4:c1:fd:
eb:cf:f4:9c:23:e6:f5:a8:fc:da:cd:53:71:3a:86:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:3A:FA:85:D1:D0:4F:1E:D6:D5:BF:2C:64:35:54:D4:85:C6:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/60w6-oXR0E8e1tW_LGQ1VNSFxhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
Signature Algorithm: sha256WithRSAEncryption
14:47:26:20:ab:f2:92:8b:2c:0a:f7:9f:8c:b7:e5:76:98:12:
cd:56:48:b4:83:17:fc:b7:7b:53:bd:f6:db:34:6e:72:89:7b:
b6:02:1d:b0:dc:80:be:76:4a:13:e3:8b:0f:d5:11:b5:21:d6:
c2:ca:dd:d1:0d:8a:b8:7c:5a:80:59:41:f7:29:10:a1:4d:a6:
c1:d0:90:36:1e:91:40:18:de:39:1d:cf:8a:3c:21:e5:76:95:
7f:b1:3e:72:63:db:b1:35:98:45:57:59:65:94:42:92:fe:4c:
b7:f2:5e:3e:d4:39:d8:a3:a2:83:7c:21:9e:6a:d8:2a:41:20:
6e:bd:cf:e8:8b:3a:9d:84:56:be:c1:03:13:ad:a9:b9:3f:6f:
10:cb:a7:8f:6b:4c:c6:a1:7f:a2:27:8a:d6:a4:3a:05:99:5f:
00:3a:7a:46:64:3c:f0:9f:6e:42:14:19:dc:72:8b:0d:f4:11:
ae:af:53:05:72:3a:36:5a:d2:7e:3b:78:f0:1b:93:5e:3c:56:
a0:f8:46:d5:a6:6f:0e:3f:ca:17:a3:a1:78:99:ac:c4:85:1e:
ae:5a:21:b4:51:92:6e:48:e6:95:2f:ce:63:4b:f6:37:b0:ad:
80:78:ed:81:22:72:ac:eb:0e:10:2f:8d:cc:c3:49:6c:d6:9e:
1d:3f:23:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/eFgMUV0JMTdooqfk9RpHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODA3MjExNjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjRjM2FmYTg1ZDFkMDRmMWVkNmQ1YmYyYzY0MzU1NGQ0ODVjNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnlvODGm3uwV/qj4HnmHFxSY36xJ
SnzeJA05GRg0vfa1MijutfFwi99KKeT/AUlYbrhRmOx1XxzEltptpl8ClluTU54X
r9oto8PfvAvLq3dAexdScBKO/Ox0sXbVcqR3YqdXIU+nhc98CD6mRroJQAInEwCr
l0fDPJzm0fK6iRDG/aPzTNFhym0EM41uHuCngbDFEVKDXmy9ZhoYrU7UVVxfKMIy
UghOTUd4/C8wB4G03ZGZW6jFhfKUV2K6EVylYKZ1dWRwuMlleHVNZgkN7oNw6wtb
ckrjEhE43uv58wntnwa10C/lLpAFh2Dkwf3rz/ScI+b1qPzazVNxOoYHhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOtMOvqF0dBPHtbVvyxkNVTUhcYSMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNjB3Ni1vWFIwRThlMXRXX0xHUTFWTlNGeGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgBMA0G
CSqGSIb3DQEBCwUAA4IBAQAURyYgq/KSiywK95+Mt+V2mBLNVki0gxf8t3tTvfbb
NG5yiXu2Ah2w3IC+dkoT44sP1RG1IdbCyt3RDYq4fFqAWUH3KRChTabB0JA2HpFA
GN45Hc+KPCHldpV/sT5yY9uxNZhFV1lllEKS/ky38l4+1DnYo6KDfCGeatgqQSBu
vc/oizqdhFa+wQMTram5P28Qy6ePa0zGoX+iJ4rWpDoFmV8AOnpGZDzwn25CFBnc
cosN9BGur1MFcjo2WtJ+O3jwG5NePFag+EbVpm8OP8oXo6F4mazEhR6uWiG0UZJu
SOaVL85jS/Y3sK2AeO2BInKs6w4QL43Mw0ls1p4dPyPN
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:10 2026 by rpki-client