Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: ZIKN1ef4tzfYBn/ND1G53WsoPsJ9kBmX4Rj5h2Vr8qY=
Subject key identifier: 16:F2:5C:E8:83:D9:27:E1:AD:AD:E1:27:10:C2:13:38:A0:70:A1:3A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1BA3DD58FEA9F11295CDE218084A8411F8E1968B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60117.roa
Signing time: Fri 31 Jul 2026 13:26:54 +0000
ROA not before: Fri 31 Jul 2026 13:21:54 +0000
ROA not after: Fri 30 Jul 2027 13:26:54 +0000
asID: 60117
IP address blocks: 143.20.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a3:dd:58:fe:a9:f1:12:95:cd:e2:18:08:4a:84:11:f8:e1:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 31 13:21:54 2026 GMT
Not After : Jul 30 13:26:54 2027 GMT
Subject: CN=16F25CE883D927E1ADADE12710C21338A070A13A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:50:d1:4f:a3:42:55:9e:1c:4d:b2:ac:ed:
05:db:54:61:09:a1:c9:d2:fb:f7:6f:a5:f8:0b:19:
35:9a:8f:b7:7b:95:f3:e7:ac:0c:b4:b0:db:08:81:
45:d2:a0:bb:c8:b7:4b:67:f8:61:9f:2c:05:1b:74:
d2:f6:16:2b:a8:c9:83:5d:e6:fb:0f:8b:a5:35:2b:
04:f8:d6:90:c5:52:2f:ab:a6:62:e2:9e:af:6d:a5:
60:d0:36:37:55:ea:eb:23:4a:86:eb:a4:99:37:e7:
3d:7b:e6:64:15:06:c1:70:58:8c:f5:07:f6:80:26:
4f:07:fb:d8:a3:26:01:09:09:e9:88:d1:dd:7c:93:
7e:fd:7a:ca:64:0a:06:14:9e:54:a2:7a:2b:e0:50:
2e:f9:a0:05:97:f5:32:22:5b:9d:9e:27:73:aa:cc:
e3:71:50:8a:e7:63:51:9f:24:47:f9:14:46:10:80:
f9:a2:b7:aa:7f:47:ad:6b:af:7e:8c:76:03:fe:49:
4e:5b:7b:2f:93:84:5a:ce:ab:57:4f:68:e8:00:1f:
c9:a7:81:68:d4:c2:6d:9e:cf:47:a1:dc:8b:07:5e:
33:a6:14:31:ce:79:19:0e:b1:6a:43:f8:1b:0b:f1:
80:3a:7f:57:fd:17:25:6b:a9:d8:99:a5:69:bc:ee:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F2:5C:E8:83:D9:27:E1:AD:AD:E1:27:10:C2:13:38:A0:70:A1:3A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.141.0/24
Signature Algorithm: sha256WithRSAEncryption
99:de:fa:0a:5b:9b:47:06:5f:dc:9d:b2:ca:ad:0d:a7:e7:dd:
19:58:aa:99:2a:ce:1c:ea:eb:76:df:01:bd:73:b6:54:34:06:
de:5b:ca:76:1c:ff:3a:bb:24:d4:7f:f8:0c:79:4d:13:dc:0a:
c3:fa:5b:20:9d:47:c6:22:9f:2f:a7:c2:ca:c8:7d:7d:9a:d7:
23:50:78:6e:be:f3:a4:1c:0c:64:93:ea:d4:58:5c:60:87:c2:
b1:81:86:1e:67:79:71:8a:70:15:1c:c4:e8:2f:3b:40:c1:49:
28:82:6c:cc:bc:4b:2b:50:cd:f7:42:f4:2c:b5:02:40:64:10:
a1:c3:35:4a:49:54:f9:be:1c:f3:45:86:c6:5e:24:21:94:ed:
80:ca:4c:24:73:e1:9d:47:bc:06:5c:36:b1:ad:d9:a7:36:68:
68:11:9b:ed:8f:e5:80:25:06:5a:32:69:93:52:0f:91:4d:80:
45:d1:2f:34:f3:3a:66:0a:81:19:48:8a:2d:0c:de:ab:e6:bf:
43:f2:2a:0d:de:89:1a:a0:2f:18:87:0a:f1:33:1d:22:36:6d:
5b:99:74:73:f0:d9:f5:88:f3:90:30:52:c7:8c:da:b9:94:7f:
9c:cf:b3:6c:ee:10:b9:86:b2:74:cf:9e:52:46:2d:8e:87:8a:
34:44:f5:e6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUG6PdWP6p8RKVzeIYCEqEEfjhloswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA3MzExMzIxNTRaFw0yNzA3MzAxMzI2NTRaMDMxMTAvBgNV
BAMTKDE2RjI1Q0U4ODNEOTI3RTFBREFERTEyNzEwQzIxMzM4QTA3MEExM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRk1DRT6NCVZ4cTbKs7QXbVGEJ
ocnS+/dvpfgLGTWaj7d7lfPnrAy0sNsIgUXSoLvIt0tn+GGfLAUbdNL2FiuoyYNd
5vsPi6U1KwT41pDFUi+rpmLinq9tpWDQNjdV6usjSobrpJk35z175mQVBsFwWIz1
B/aAJk8H+9ijJgEJCemI0d18k379espkCgYUnlSieivgUC75oAWX9TIiW52eJ3Oq
zONxUIrnY1GfJEf5FEYQgPmit6p/R61rr36MdgP+SU5bey+ThFrOq1dPaOgAH8mn
gWjUwm2ez0eh3IsHXjOmFDHOeRkOsWpD+BsL8YA6f1f9FyVrqdiZpWm87m9ZAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUFvJc6IPZJ+GtreEnEMITOKBwoTowHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjAxMTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFI0w
DQYJKoZIhvcNAQELBQADggEBAJne+gpbm0cGX9ydssqtDafn3RlYqpkqzhzq63bf
Ab1ztlQ0Bt5bynYc/zq7JNR/+Ax5TRPcCsP6WyCdR8Yiny+nwsrIfX2a1yNQeG6+
86QcDGST6tRYXGCHwrGBhh5neXGKcBUcxOgvO0DBSSiCbMy8SytQzfdC9Cy1AkBk
EKHDNUpJVPm+HPNFhsZeJCGU7YDKTCRz4Z1HvAZcNrGt2ac2aGgRm+2P5YAlBloy
aZNSD5FNgEXRLzTzOmYKgRlIii0M3qvmv0PyKg3eiRqgLxiHCvEzHSI2bVuZdHPw
2fWI85AwUseM2rmUf5zPs2zuELmGsnTPnlJGLY6HijRE9eY=
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:35 2026 by rpki-client