Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60602.roa
File: AS60602.roa (raw, json)
Hash identifier: mo0Pi7P3aoPVkMdqPlpf0kJ2K/Fe5qr8rOhQj7skIpo=
Subject key identifier: 5F:C8:A8:A2:C1:54:68:EE:EB:59:CD:31:27:FA:5E:70:9F:8C:EC:4B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0E5A3F71DA1FD308DF704661FC75C093A79A4AA1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60602.roa
Signing time: Thu 21 May 2026 10:01:26 +0000
ROA not before: Thu 21 May 2026 09:56:26 +0000
ROA not after: Thu 20 May 2027 10:01:26 +0000
asID: 60602
IP address blocks: 141.11.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5a:3f:71:da:1f:d3:08:df:70:46:61:fc:75:c0:93:a7:9a:4a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 21 09:56:26 2026 GMT
Not After : May 20 10:01:26 2027 GMT
Subject: CN=5FC8A8A2C15468EEEB59CD3127FA5E709F8CEC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:c6:ff:9c:ed:e4:8d:e8:bd:fb:50:c5:3b:
54:32:25:1e:eb:48:34:7e:26:1c:eb:20:09:36:e1:
92:fb:0c:a0:75:62:43:58:18:ec:0e:cd:2e:4f:04:
dd:fa:2e:13:f9:8a:1f:9f:17:36:b4:75:13:4f:7b:
bb:46:2f:48:5a:ff:6d:a4:a9:35:ae:4c:cd:ff:f8:
d0:71:de:76:83:64:5e:0a:68:bc:00:fe:27:67:3f:
6c:a6:83:b7:08:2e:5e:e4:02:6e:cc:30:1d:15:2e:
70:b0:e5:69:2b:ee:77:b1:61:71:c1:80:53:5e:7a:
d9:df:29:d2:5f:c9:52:a3:16:88:23:8f:38:e8:73:
c6:55:1b:72:f8:7c:ae:13:ec:67:30:99:b7:45:6a:
5c:c4:33:97:bb:a3:72:57:00:65:88:ff:16:c1:ee:
18:ed:86:02:56:c5:39:c7:18:87:34:a7:75:fb:9c:
d0:91:04:48:89:e8:15:7b:4f:2b:b5:21:cd:d6:7b:
ae:3e:f2:7f:a0:b3:88:7f:06:79:09:34:31:14:7b:
58:2d:d0:0b:a2:08:72:e7:0e:57:c3:b6:c5:2e:3a:
12:1e:8e:00:4c:6d:a5:0c:3d:32:33:09:fe:6c:dd:
77:e3:2f:65:be:1d:29:ed:82:73:70:ee:19:71:7a:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:A8:A2:C1:54:68:EE:EB:59:CD:31:27:FA:5E:70:9F:8C:EC:4B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60602.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:15:14:29:7c:c5:db:f6:4e:21:f9:0c:49:81:5f:40:52:70:
15:f5:ea:d8:ad:85:34:82:b6:00:24:9e:0e:41:fd:16:94:48:
bb:44:98:99:39:87:c8:67:30:59:b5:5c:2e:12:47:e1:e7:4b:
b0:38:ba:46:92:9c:b7:c4:73:63:d5:7a:95:f1:59:5d:ce:7f:
d2:76:dc:7e:f9:a2:85:67:ea:00:0e:bb:01:cb:6c:a5:e7:2f:
70:5d:c4:3b:b1:20:88:04:bb:f0:4e:ef:a3:42:00:38:81:7f:
4f:16:a6:b5:de:16:09:fa:90:0d:14:15:e5:a8:8e:2e:28:1b:
97:6f:6a:68:93:9f:80:49:d9:27:1f:fa:34:77:d5:bd:f9:f3:
a3:4c:75:4b:99:3a:9f:05:25:64:0a:79:2b:77:38:2f:fe:65:
f1:60:db:26:33:cd:32:bc:52:e1:57:23:31:7d:3a:e2:d0:19:
51:40:02:4f:df:fb:f8:0a:44:a9:88:0d:3c:d9:3d:60:89:d0:
50:45:7d:f0:90:dd:2a:04:00:30:fa:d2:21:dd:16:48:2b:2d:
b5:df:f7:ca:4b:ca:76:dd:a9:f5:c5:22:b4:c1:e5:a6:75:98:
20:cd:cf:6b:1e:a1:71:1a:34:5f:f8:e2:73:73:48:66:d3:70:
67:36:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:31 2026 by rpki-client