Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS60123.roa
File: AS60123.roa (raw, json)
Hash identifier: waKSX3kLZPrsyaZzRZJdMv2qcFW94Fi4IaZoXhlRuu4=
Subject key identifier: 78:ED:1F:0B:BE:37:FB:D0:7C:85:05:93:00:43:CB:53:6B:80:0A:77
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 52DFD31EC837870350EBD5CEE89FD0FBAB3C33F2
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS60123.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 60123
IP address blocks: 213.240.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:df:d3:1e:c8:37:87:03:50:eb:d5:ce:e8:9f:d0:fb:ab:3c:33:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=78ED1F0BBE37FBD07C8505930043CB536B800A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:d0:a4:13:78:dd:6f:de:32:3e:5e:48:32:
5a:44:0f:1d:00:14:dd:47:a6:88:7c:5d:d6:b6:e0:
cb:8f:35:ea:81:94:94:ef:c1:fa:8b:9a:e1:97:9f:
f0:e5:a4:41:d5:f6:f4:31:bb:17:56:ce:c1:7c:c3:
fa:93:07:44:87:bf:3f:36:8e:a6:69:67:02:f5:31:
1d:64:e0:01:bd:3c:88:e3:17:ac:73:74:ca:30:bb:
69:8a:1e:82:6f:de:d1:6c:96:3f:e5:98:bc:98:ee:
87:ca:13:97:ba:86:e3:69:c7:c2:c7:00:21:53:36:
47:b6:58:5f:ca:6f:22:71:5a:50:eb:e1:f5:e7:ca:
47:9e:6d:df:4f:80:23:f6:5d:00:06:68:0c:73:0b:
22:69:8a:e1:5e:af:28:bc:0a:cf:45:ce:9b:b3:b5:
bb:b7:7f:66:3f:bc:51:b1:1c:6f:2c:4d:97:d0:6b:
71:7f:09:24:5c:6f:44:c7:ad:d8:17:c3:6a:b3:4e:
59:f4:29:54:c0:29:57:52:9a:a9:0e:70:62:cb:4f:
0d:f0:b4:7d:3b:29:22:db:e5:2a:30:ec:01:f4:6a:
56:c9:b2:9d:29:42:4b:f1:18:13:ec:da:37:c5:7a:
2c:54:b5:61:09:21:05:22:1f:d0:86:bb:44:8c:2d:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:1F:0B:BE:37:FB:D0:7C:85:05:93:00:43:CB:53:6B:80:0A:77
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS60123.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.240.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4d:ad:25:ff:7b:ba:19:5a:60:0a:00:4c:cc:1a:86:aa:f8:
a6:7c:31:3d:19:33:75:b6:36:58:e3:8e:58:2b:1a:a0:03:a7:
76:e1:8e:1a:60:35:3f:ab:c2:72:8b:06:39:b0:ee:cb:2a:4b:
46:74:be:b7:a1:bb:48:f7:59:9d:44:c9:a0:3a:ce:4f:2e:a2:
5f:a5:55:39:23:89:39:7b:91:a8:bd:7b:3e:fb:ae:20:0b:9f:
b3:43:d6:9f:29:40:8d:d4:12:0b:d2:08:2b:1c:8d:55:53:7c:
e0:86:51:ea:5c:56:ed:5f:92:8c:2c:a2:28:df:d3:3e:ee:5e:
6f:6b:32:52:b2:74:9a:8d:19:1f:13:1c:da:64:c5:f3:b9:f0:
b2:63:d0:47:8f:4a:e9:d9:5d:70:9f:68:3e:b7:be:1b:5f:26:
3d:4f:43:ef:f3:5d:90:e1:f7:3c:ab:ac:95:0c:69:d4:f6:ec:
fe:dc:af:6d:92:37:03:60:d5:2c:4c:99:a6:93:18:3e:4c:31:
42:f9:93:f2:27:f3:44:fb:0e:98:94:31:49:3f:ef:bb:ec:cc:
66:26:70:4b:bb:d2:f6:1e:0d:3c:5f:18:42:e6:3b:26:2a:a9:
55:d2:c9:a4:4a:d9:3f:97:0f:9f:a6:ee:9f:5d:ff:49:14:9a:
ad:65:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:58 2026 by rpki-client