Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60064.roa
File: AS60064.roa (raw, json)
Hash identifier: fVX5x+gAG4Ply1zTUFzkfOmQco9FymgOiOoJRlHcoSo=
Subject key identifier: 98:21:DD:C7:89:78:06:D8:01:DD:51:F4:DC:A6:8C:21:45:11:BB:40
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 44790EB4DD071AECAA1D13CD5F3D54C6C9887662
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60064.roa
Signing time: Fri 27 Mar 2026 17:06:24 +0000
ROA not before: Fri 27 Mar 2026 17:01:24 +0000
ROA not after: Fri 26 Mar 2027 17:06:24 +0000
asID: 60064
IP address blocks: 84.75.130.0/24 maxlen: 24
84.75.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:79:0e:b4:dd:07:1a:ec:aa:1d:13:cd:5f:3d:54:c6:c9:88:76:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 17:01:24 2026 GMT
Not After : Mar 26 17:06:24 2027 GMT
Subject: CN=9821DDC7897806D801DD51F4DCA68C214511BB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:a5:cb:82:f2:a6:85:fa:49:ff:5e:c1:da:
86:c0:36:01:27:d9:26:96:fe:f4:9b:0d:89:0e:69:
49:eb:8f:9b:2f:66:aa:63:5f:6d:83:fe:1a:56:7d:
2f:00:84:cb:67:53:d1:cb:42:5a:ac:79:9b:59:d2:
73:94:9c:93:b7:8b:ed:5a:c5:82:59:9e:fe:a0:c3:
ea:06:3f:da:0e:32:b8:e9:81:c3:bc:72:e4:c0:62:
1b:f6:87:dd:ef:1e:e2:d2:32:e8:8c:ce:d0:c4:33:
ba:35:72:6a:43:b2:2e:0c:bc:75:91:fd:79:b3:27:
c1:e4:a6:32:53:d0:bc:f4:d8:1d:c8:45:f3:8d:2b:
a9:26:a6:0c:de:30:1f:ad:e8:5a:53:13:29:d1:8d:
1b:52:bb:77:c4:83:47:70:5a:f7:26:f5:0d:0c:0c:
1d:19:8a:8c:80:01:3f:3d:d0:5f:5a:fe:0b:d5:01:
8b:79:4b:c8:86:6c:af:6c:bb:07:ed:b8:b1:0a:13:
49:b3:6c:46:28:d1:0b:df:dd:93:46:b3:0d:ae:59:
1c:0d:22:13:7b:39:3d:87:ff:35:b5:3c:c9:61:e0:
64:07:a7:73:3c:05:4a:84:ad:71:b8:73:24:20:ea:
25:a1:0b:33:d2:8e:2f:9d:63:c4:fe:0a:b2:8c:9d:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:DD:C7:89:78:06:D8:01:DD:51:F4:DC:A6:8C:21:45:11:BB:40
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS60064.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.130.0/24
84.75.135.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:0c:f2:f4:33:eb:e2:a9:90:84:7a:40:56:fd:3c:be:c3:
0e:4b:60:ca:c9:6b:d3:a6:90:db:ac:16:57:e8:06:87:09:02:
7e:06:e9:84:56:d7:13:b4:c6:0a:6a:91:04:6e:62:87:d1:1f:
8e:49:d2:31:01:0b:1c:91:9e:45:52:74:9c:45:e4:07:44:8d:
c5:68:22:20:57:a1:27:f7:88:ee:53:77:a1:e4:a5:49:3e:af:
ee:ff:f1:a9:63:87:c4:21:b3:40:1a:e8:94:c1:ef:49:cb:f8:
a0:af:a1:05:fd:c5:e5:db:5e:fa:46:1c:1b:fd:29:69:84:7f:
93:f4:a3:7a:fc:4d:34:0c:e2:12:47:ab:53:b9:03:d7:6d:18:
dd:71:c3:9d:85:27:eb:cf:4c:83:8e:2b:54:34:9b:b5:5d:55:
c0:47:ea:ba:88:bd:4d:d2:9c:64:a6:f0:41:b2:b1:ee:a0:6f:
0e:77:22:d5:14:70:5b:88:5c:32:21:97:c6:ef:c9:f5:ee:6e:
37:17:9a:94:d7:cd:e1:43:ca:88:92:ce:28:06:36:b3:8a:d7:
3b:b3:d8:90:ea:79:61:d5:e5:07:26:40:29:a5:b2:bc:e7:8a:
9b:22:fb:80:f4:54:81:9a:da:6a:55:7a:93:b3:69:e6:90:4a:
c9:5a:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:52:00 2026 by rpki-client