Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60068.roa
File: AS60068.roa (raw, json)
Hash identifier: iDgSNcH4CJXt+B62gh5WKXp06wokr8K5RedKI0gdlJg=
Subject key identifier: 56:BE:3F:5D:90:D0:8D:DD:2B:16:66:6C:2F:5D:DB:66:A4:01:B3:C4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2CF008E66584AEBED3EA4853FC0780553C040DF9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60068.roa
Signing time: Wed 07 Oct 2026 16:01:25 +0000
ROA not before: Wed 07 Oct 2026 15:56:25 +0000
ROA not after: Wed 06 Oct 2027 16:01:25 +0000
asID: 60068
IP address blocks: 147.79.26.0/24 maxlen: 24
162.141.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f0:08:e6:65:84:ae:be:d3:ea:48:53:fc:07:80:55:3c:04:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 7 15:56:25 2026 GMT
Not After : Oct 6 16:01:25 2027 GMT
Subject: CN=56BE3F5D90D08DDD2B16666C2F5DDB66A401B3C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:12:c4:55:9d:e4:7f:d4:ba:4b:69:f8:6c:
c0:8b:0a:78:a5:7f:38:23:c0:4c:4d:59:92:0c:81:
88:7f:c1:5f:a6:9b:bb:d5:42:f3:e3:75:11:b0:fe:
d0:7f:7f:56:fe:03:a3:3a:cd:d3:38:71:46:c4:1a:
a1:0b:9e:9a:4c:20:9e:cd:54:b2:f2:bd:d9:7d:89:
cd:dd:b0:4e:81:09:9e:c9:95:0d:aa:b4:88:e8:71:
db:25:08:5f:d1:80:bb:51:14:31:41:47:2c:c0:9b:
00:ec:4d:e0:1f:1b:d8:be:7a:17:84:b8:e2:44:05:
4d:76:0b:1a:8f:2b:0f:85:e5:39:0b:68:27:5d:b6:
2b:76:13:33:f6:d7:76:9e:5a:09:6d:5e:54:b2:82:
f1:f5:0f:a8:26:b5:27:7d:87:cc:9f:df:f7:eb:d9:
c7:0a:f5:b6:8c:ae:b7:34:f6:36:a5:ad:01:3a:4f:
6d:ab:fb:2a:52:27:fb:f0:87:df:d9:72:6e:36:16:
3a:2c:3e:79:d8:f3:1b:32:19:f6:71:d4:51:47:46:
71:a5:de:86:f6:74:ed:69:0c:49:e2:89:6c:c1:7f:
b6:9c:0d:37:f7:86:75:3d:54:79:71:06:44:65:23:
d6:0f:ba:2b:b1:1a:77:93:1a:10:ca:df:fc:52:88:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:3F:5D:90:D0:8D:DD:2B:16:66:6C:2F:5D:DB:66:A4:01:B3:C4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.26.0/24
162.141.166.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a2:ce:53:7b:e3:ef:03:4c:35:20:d0:18:2e:d0:9e:c4:0e:
c9:f1:e6:4a:9e:53:64:97:f0:f5:a1:73:69:25:1b:d5:f5:00:
7f:91:69:ee:e0:91:3d:dc:13:06:74:47:bd:1b:03:f1:d0:bc:
d0:12:f1:ee:ca:f9:f5:64:9f:c9:78:f0:97:44:7d:b3:b5:95:
1b:bd:0c:53:4b:a8:06:ae:24:da:a2:fb:38:8a:4b:75:25:d8:
84:89:6d:ed:b3:6d:75:00:4a:c3:7c:6e:4e:92:bf:8b:75:62:
da:60:66:cd:37:99:e7:a4:b5:c0:8b:b6:93:5e:a0:6c:51:63:
d8:86:4e:b1:39:85:58:dd:5d:8b:62:20:5b:0b:aa:a5:c3:87:
09:c5:f9:f8:44:f6:37:10:0c:04:98:15:3c:29:cd:8f:31:04:
a4:61:8e:a6:16:59:9b:ba:86:bb:35:09:34:3f:94:2d:af:50:
e4:22:a6:fc:47:38:d6:36:65:0e:66:59:e1:75:a9:06:10:a3:
da:f3:d5:20:8a:12:8c:3c:6f:0c:7a:57:7d:ed:81:b7:3b:e2:
75:76:94:22:31:67:eb:82:9e:04:2d:55:f3:4a:87:3f:21:4f:
ca:05:86:e9:76:bc:d1:20:af:d1:d0:11:bb:5f:24:b3:07:e4:
cb:56:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:36:21 2026 by rpki-client