Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60602.roa
File: AS60602.roa (raw, json)
Hash identifier: 32nI61wcyLa4Q3IFUC9UK2xepD59f7V+gltDnk1sSJA=
Subject key identifier: 36:71:10:95:AC:E0:3C:E8:F1:7F:8F:7C:5D:31:BC:B7:CE:B7:29:14
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6EF4D4A337351E25874735261F3A010D7C803951
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60602.roa
Signing time: Sun 06 Sep 2026 07:19:01 +0000
ROA not before: Sun 06 Sep 2026 07:14:01 +0000
ROA not after: Sun 05 Sep 2027 07:19:01 +0000
asID: 60602
IP address blocks: 143.20.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f4:d4:a3:37:35:1e:25:87:47:35:26:1f:3a:01:0d:7c:80:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 6 07:14:01 2026 GMT
Not After : Sep 5 07:19:01 2027 GMT
Subject: CN=36711095ACE03CE8F17F8F7C5D31BCB7CEB72914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:41:0b:7c:cf:93:89:69:a3:87:b8:c6:72:
10:37:dd:16:5d:88:1b:54:91:4d:5f:0f:aa:9a:fc:
33:20:cc:6e:93:ec:17:f7:4a:ef:18:cc:a0:9a:8a:
6f:22:77:57:3a:94:4b:cc:80:16:8d:db:05:aa:b1:
03:63:67:b6:57:1c:aa:fc:6b:66:ff:8b:ed:ec:1c:
37:c6:33:c6:13:de:ff:c0:59:ea:04:86:fd:d3:4e:
5b:71:83:eb:63:4f:c6:52:27:48:68:cf:fe:18:1d:
8c:bd:cc:c7:92:31:cc:20:30:22:17:3a:be:cd:ba:
e1:f1:c1:9c:33:20:c7:60:79:aa:ef:f6:b8:d4:66:
82:af:e3:d8:57:80:5b:87:fa:35:0e:db:1b:8a:b0:
7d:27:e8:34:76:5c:eb:1b:d5:a3:9b:90:32:c8:ba:
eb:ae:c6:55:cc:9c:98:71:90:47:9b:b4:ab:12:3e:
d3:71:b2:67:c9:bc:ac:d7:97:d7:d4:be:50:3e:c9:
56:47:12:7c:70:87:31:4f:6c:a5:a9:2b:55:25:51:
b8:d9:fb:14:5a:4f:d9:c7:7b:a0:27:4b:00:0c:3e:
e0:4b:10:2f:c2:5f:26:e3:bf:dc:a5:aa:38:50:37:
6e:0f:c5:19:15:a1:e3:dc:3f:35:80:74:52:3b:96:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:10:95:AC:E0:3C:E8:F1:7F:8F:7C:5D:31:BC:B7:CE:B7:29:14
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS60602.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:25:78:95:a8:97:f8:7d:44:d5:cd:cf:2a:c9:55:fb:b5:b8:
7e:a8:70:3c:23:ef:47:84:34:22:9a:7f:a6:ea:4d:26:0f:e2:
ef:2d:80:0f:b5:ee:1a:27:1f:0f:3e:e1:1e:77:2b:fe:7f:70:
d7:10:b1:3c:a2:41:fd:6e:7e:d2:48:28:66:52:10:af:d0:ad:
61:c3:41:11:10:0c:dc:f1:ef:9c:62:1d:92:ac:aa:f5:eb:df:
a2:4a:26:76:74:f0:fa:a6:c5:78:17:44:7f:ca:93:d8:2e:4e:
f5:3b:54:56:f1:c5:e1:8a:ea:b9:2d:56:a1:74:10:a8:7a:24:
af:e8:0a:b4:af:16:e3:e5:6a:bc:34:0e:31:8e:05:6d:39:68:
10:57:f9:20:78:c5:b4:2e:d1:14:e9:8f:30:8c:73:f1:e6:ff:
16:68:a3:35:72:7c:af:6f:d5:a3:2b:65:96:2a:c8:ff:fb:a8:
a8:c7:fe:45:e9:c5:bd:b1:23:89:d5:15:66:5a:86:81:bb:53:
7d:43:ab:c3:51:52:68:6e:2b:4d:6d:b6:a3:dc:f9:ae:d8:c5:
f0:19:ac:44:8d:91:3c:a6:8b:2c:4d:47:06:c5:31:23:7c:5c:
8c:7b:03:05:26:29:12:89:1e:6c:b6:65:29:95:42:03:d9:44:
47:9c:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 00:03:50 2026 by rpki-client