Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS60439.roa
File: AS60439.roa (raw, json)
Hash identifier: V3v+iC2Cbpdv1qWPlf/y/dweIQFudCme+V8MgFHcDbY=
Subject key identifier: 31:16:62:CE:E2:CA:1D:F9:67:90:ED:71:04:B6:43:C0:0D:B1:16:25
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4EF55E02B589977C87CB0550F897948329B1A7DB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS60439.roa
Signing time: Mon 31 Aug 2026 09:24:53 +0000
ROA not before: Mon 31 Aug 2026 09:19:53 +0000
ROA not after: Mon 30 Aug 2027 09:24:53 +0000
asID: 60439
IP address blocks: 51.146.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f5:5e:02:b5:89:97:7c:87:cb:05:50:f8:97:94:83:29:b1:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 31 09:19:53 2026 GMT
Not After : Aug 30 09:24:53 2027 GMT
Subject: CN=311662CEE2CA1DF96790ED7104B643C00DB11625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:22:2f:c1:3e:c1:3d:dc:65:ea:60:5c:44:
24:06:d8:09:ab:37:4e:94:4f:77:3f:cd:00:c3:9e:
5c:aa:b6:be:26:cc:95:91:e9:c7:0c:cf:36:67:bc:
49:2a:fc:d9:0d:2d:15:65:c7:2b:09:86:63:fd:c4:
df:4e:07:ec:9e:a1:b9:0f:2a:d2:d4:45:80:bf:c4:
bd:32:31:bb:54:78:5c:e6:32:f6:1c:d5:65:da:5b:
cc:16:a7:b6:ba:ea:a8:57:cc:91:69:2e:38:27:69:
6a:d2:60:66:bc:d5:c7:0e:1e:34:62:22:4f:5f:0b:
f8:23:9a:43:17:ed:77:46:b2:66:3e:37:77:e4:94:
d4:be:b1:1e:c1:77:aa:4d:76:53:37:7e:56:f8:d1:
a9:21:f3:9a:74:d4:fc:06:ca:e7:8b:af:2b:11:ce:
e3:4f:01:7c:e9:b1:21:d1:57:96:0b:ea:d2:45:21:
7b:00:76:bf:41:ec:34:5c:01:89:f6:10:49:23:8f:
08:e9:57:32:a6:f2:43:c0:73:f6:16:9d:93:82:e4:
c5:4d:39:80:97:85:0a:95:c9:c8:ba:72:83:58:b7:
2a:2d:46:53:04:ce:5d:37:52:5d:aa:f4:92:8d:ff:
cd:c6:ce:75:34:93:7e:28:03:18:54:6e:61:27:04:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:62:CE:E2:CA:1D:F9:67:90:ED:71:04:B6:43:C0:0D:B1:16:25
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS60439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9c:48:62:b8:90:ca:b9:d6:32:90:55:6b:2e:8f:d2:aa:de:
27:ae:0f:b6:8c:82:3e:9f:6a:99:ef:a8:b2:46:52:0c:27:33:
1e:8e:46:5e:71:12:30:82:03:1a:c5:54:0b:de:fb:88:6e:84:
fc:e8:67:42:a0:4e:a4:24:ab:68:97:54:39:07:09:07:29:e5:
d6:bd:a8:01:00:a3:a3:7e:ec:df:98:90:05:dc:b1:02:5a:a9:
f2:f3:00:5e:37:d3:3e:3f:e5:cc:20:8f:71:ab:65:d7:0b:8c:
24:25:f5:be:fa:e0:22:fa:03:71:29:0c:cf:d4:ee:b6:37:ad:
8d:8e:62:f0:13:db:5b:59:29:f6:f1:4e:00:8d:a2:fd:31:42:
1e:ca:7e:a5:cf:3f:c1:50:35:5d:26:d3:c7:00:91:ae:30:9d:
a1:7c:48:4d:09:9e:5e:8a:54:ce:34:8f:36:93:8a:05:af:d0:
23:57:63:7c:59:93:b7:e5:83:06:9c:ac:82:9c:e7:6e:3f:5d:
01:76:15:f5:81:4e:07:98:79:bc:6d:2f:cd:b2:6e:92:b7:ea:
67:0e:c5:50:87:0f:89:50:d8:ca:5c:20:9c:65:3f:fd:07:39:
27:f5:0d:06:52:1f:a1:1c:c0:a8:ef:5e:11:81:6c:65:c4:53:
0e:aa:c9:5c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUTvVeArWJl3yHywVQ+JeUgymxp9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MzEwOTE5NTNaFw0yNzA4MzAwOTI0NTNaMDMxMTAvBgNV
BAMTKDMxMTY2MkNFRTJDQTFERjk2NzkwRUQ3MTA0QjY0M0MwMERCMTE2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJSIvwT7BPdxl6mBcRCQG2Amr
N06UT3c/zQDDnlyqtr4mzJWR6ccMzzZnvEkq/NkNLRVlxysJhmP9xN9OB+yeobkP
KtLURYC/xL0yMbtUeFzmMvYc1WXaW8wWp7a66qhXzJFpLjgnaWrSYGa81ccOHjRi
Ik9fC/gjmkMX7XdGsmY+N3fklNS+sR7Bd6pNdlM3flb40akh85p01PwGyueLrysR
zuNPAXzpsSHRV5YL6tJFIXsAdr9B7DRcAYn2EEkjjwjpVzKm8kPAc/YWnZOC5MVN
OYCXhQqVyci6coNYtyotRlMEzl03Ul2q9JKN/83GznU0k34oAxhUbmEnBIH/AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUMRZizuLKHflnkO1xBLZDwA2xFiUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNjA0Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAzklAw
DQYJKoZIhvcNAQELBQADggEBAAqcSGK4kMq51jKQVWsuj9Kq3ieuD7aMgj6fapnv
qLJGUgwnMx6ORl5xEjCCAxrFVAve+4huhPzoZ0KgTqQkq2iXVDkHCQcp5da9qAEA
o6N+7N+YkAXcsQJaqfLzAF430z4/5cwgj3GrZdcLjCQl9b764CL6A3EpDM/U7rY3
rY2OYvAT21tZKfbxTgCNov0xQh7KfqXPP8FQNV0m08cAka4wnaF8SE0Jnl6KVM40
jzaTigWv0CNXY3xZk7flgwacrIKc524/XQF2FfWBTgeYebxtL82ybpK36mcOxVCH
D4lQ2MpcIJxlP/0HOSf1DQZSH6EcwKjvXhGBbGXEUw6qyVw=
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:48 2026 by rpki-client