Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: lYDaPgrSMXZe5YNUsBLJk4Erza6VNjLM3OpdUX1Tjng=
Subject key identifier: DF:BC:61:6E:87:6D:36:E3:9A:DB:1F:A5:B3:5F:69:BD:0A:B9:36:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2564793E40A51A3F41E619BDE06DC575B801D8FD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
Signing time: Thu 08 Oct 2026 06:18:22 +0000
ROA not before: Thu 08 Oct 2026 06:13:22 +0000
ROA not after: Thu 07 Oct 2027 06:18:22 +0000
asID: 60117
IP address blocks: 140.150.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:64:79:3e:40:a5:1a:3f:41:e6:19:bd:e0:6d:c5:75:b8:01:d8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 8 06:13:22 2026 GMT
Not After : Oct 7 06:18:22 2027 GMT
Subject: CN=DFBC616E876D36E39ADB1FA5B35F69BD0AB93636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:5c:b7:12:da:85:e0:4e:07:d9:f0:2a:95:
7f:6c:6c:ca:af:53:6e:ba:ed:d8:e5:5c:eb:0d:d9:
e4:59:9e:46:fb:bb:06:fa:c3:23:a8:10:8b:83:8a:
cb:f2:d9:16:01:b2:72:48:3a:c4:28:3d:6f:6e:48:
bc:d6:3b:f6:be:e9:3a:6a:00:3e:ff:2d:21:4b:b9:
fb:4c:9d:81:d3:04:61:57:18:45:00:3d:e4:93:e9:
07:39:81:d5:6e:9d:a0:ed:82:9e:f1:e1:9c:9d:4b:
fa:ad:93:85:9c:38:4d:95:1a:11:59:bd:e3:a6:06:
99:c5:9f:92:ee:f5:4e:cd:f5:a8:dd:ef:bb:78:07:
e6:e1:32:ba:2d:eb:52:0b:65:6b:de:78:37:47:46:
12:0b:fa:79:ec:ae:19:11:b5:f5:ce:8d:54:ac:da:
71:8a:ea:8e:e1:51:86:6b:0b:d2:95:83:80:de:d7:
40:6d:a1:eb:8d:33:db:2e:56:f4:cc:fa:3e:f8:26:
bb:26:ec:02:11:32:00:aa:92:69:80:65:9b:1a:84:
f3:57:e0:e1:45:27:a9:81:29:d1:4f:b2:fd:f1:51:
5f:ec:59:e5:95:6d:d6:32:fc:43:b7:90:d8:e5:15:
8d:1c:e1:50:47:4a:6a:83:03:61:4d:af:54:74:00:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:61:6E:87:6D:36:E3:9A:DB:1F:A5:B3:5F:69:BD:0A:B9:36:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.239.0/24
Signature Algorithm: sha256WithRSAEncryption
86:16:44:60:c4:b9:e8:4c:ea:0b:2f:9d:21:32:e6:c7:05:a8:
72:33:d4:75:52:ae:7e:19:0b:06:6d:f1:70:ca:34:2c:a9:7d:
c7:1d:a0:40:73:7c:ff:7b:25:3d:e8:75:ed:af:49:40:ae:6e:
52:65:83:bc:27:cb:c5:de:f7:c9:56:bf:8f:e8:8f:ec:cb:0c:
e6:71:61:7e:23:18:6d:d3:9a:40:fc:39:30:3e:84:ef:d4:4c:
6c:88:3e:5b:b6:db:f5:ac:3e:19:8f:e8:7e:5e:27:30:2f:c3:
a9:da:74:84:88:fc:6c:f4:6d:81:d8:12:2f:e6:a7:89:ff:b1:
3c:81:5c:48:50:90:44:30:33:b2:ca:46:ac:a3:0e:4f:b5:98:
c0:56:a9:0b:d8:49:22:32:cb:a3:f3:95:de:1c:d8:03:43:81:
8c:fb:c7:66:c3:11:40:b4:d4:57:87:6f:aa:31:c9:11:2e:bd:
52:8e:bc:6b:c4:5f:b0:2a:ba:b3:5c:82:fc:e9:34:17:45:9a:
f1:4d:f5:3e:dc:80:d5:0f:a5:3b:ba:b6:13:11:b3:aa:d8:a2:
61:06:e9:8a:25:b9:6d:2a:18:08:ae:ed:d8:92:34:36:9f:05:
a8:1a:d2:74:65:3a:73:f9:bc:71:0f:71:b4:d8:63:b1:fd:2e:
f8:f8:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:56:39 2026 by rpki-client