Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/60TOPVfsN5pgJZGd8in-8hmiCDQ.roa
File: 60TOPVfsN5pgJZGd8in-8hmiCDQ.roa (raw, json)
Hash identifier: wz0fI5J0oyRKc9opLJ8t6/QjHmyjX9i2OHs+2QaT2hE=
Subject key identifier: EB:44:CE:3D:57:EC:37:9A:60:25:91:9D:F2:29:FE:F2:19:A2:08:34
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 019F2368C915FEC43047D8ACFBF3A14D89FE
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/60TOPVfsN5pgJZGd8in-8hmiCDQ.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212865
IP address blocks: 62.65.141.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c9:15:fe:c4:30:47:d8:ac:fb:f3:a1:4d:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb44ce3d57ec379a6025919df229fef219a20834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:e0:36:88:bb:15:0e:c6:06:f3:21:64:fa:
ff:1e:9e:32:b2:45:f1:c2:3d:0a:49:25:f0:85:03:
72:e9:f6:a4:e9:4f:5e:86:3a:24:97:d8:2b:61:81:
4b:54:a4:ea:87:9f:7b:fd:2c:94:62:c6:0e:12:47:
fc:d5:34:32:0e:51:a0:3e:07:55:f0:51:3c:d8:c5:
e9:11:2b:8e:f0:ec:a3:89:98:eb:90:60:9e:03:f3:
fb:85:a4:b8:ec:2f:cb:d4:9f:d9:26:6f:7a:27:43:
24:fb:20:e2:2a:bf:7d:c9:f6:42:b4:c0:43:be:c5:
cc:18:5a:94:9d:f6:5a:74:4f:81:65:89:bb:0f:07:
91:ec:e3:e4:80:66:e3:9d:5b:d4:d4:94:90:03:51:
89:45:a0:c6:a2:50:04:f6:b9:74:fd:08:fd:b1:53:
bc:6d:46:0e:53:c4:f7:85:7c:f1:ae:bf:9b:24:db:
ae:fb:b0:49:ff:ce:50:4e:3d:b6:81:18:60:0c:89:
a7:b3:9c:f0:3d:4d:67:2c:bd:e9:c5:fe:13:6d:d1:
5e:22:65:4b:12:d4:bc:56:35:a6:ea:77:fe:7c:d6:
fe:40:08:cb:3a:2e:b9:c8:0e:6e:94:2d:f8:a5:e3:
14:b3:35:2d:59:0e:10:94:0e:0f:b6:b7:91:aa:f8:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:CE:3D:57:EC:37:9A:60:25:91:9D:F2:29:FE:F2:19:A2:08:34
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/60TOPVfsN5pgJZGd8in-8hmiCDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
36:30:e0:16:80:c6:aa:71:c9:24:3f:94:1d:11:e7:f2:ff:70:
07:cd:94:41:37:49:70:9a:27:a2:af:10:11:04:9b:6f:27:dd:
13:cf:61:dc:09:58:97:02:ad:fc:a1:93:73:86:b9:15:a7:5a:
59:4c:0d:59:ac:d2:ad:08:a1:96:eb:7b:3e:93:fc:fa:09:81:
71:bf:23:72:3f:97:bd:1c:a2:2c:67:ce:21:66:09:19:e4:be:
f2:28:d3:f7:b1:ee:7c:01:c6:62:d6:07:ce:e4:cb:5b:67:21:
98:95:c7:6d:75:94:af:8c:9c:f7:91:e7:91:5b:c9:85:d1:2e:
8c:de:e4:bd:e2:52:04:89:de:1c:c6:1d:83:72:03:91:25:82:
82:97:a6:d1:e2:57:0c:2a:4a:68:92:41:7e:f6:44:ab:7f:60:
6a:7d:70:5c:69:71:8b:1f:25:26:31:75:fc:77:3d:96:54:50:
48:08:ad:b1:8b:4d:a9:d7:2d:74:48:12:a2:4c:44:9d:13:71:
85:01:0f:c4:9b:0f:1f:0f:3d:1b:6e:03:ba:e9:fa:8d:5a:1f:
a7:54:aa:88:1e:66:74:39:51:44:2e:28:c5:37:ef:80:43:83:
e4:f4:43:96:39:2e:2b:3d:a9:14:8d:0c:16:a1:08:ee:09:7d:
a8:48:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:21 2026 by rpki-client