Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/60bYQFIRxfiNZZtyrd8v132OhQo.roa
File: 60bYQFIRxfiNZZtyrd8v132OhQo.roa (raw, json)
Hash identifier: yoh+4hIc2iMYV+qe0Nix7m4JiW6PSX9beruheEeiPEw=
Subject key identifier: EB:46:D8:40:52:11:C5:F8:8D:65:9B:72:AD:DF:2F:D7:7D:8E:85:0A
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F1937EE0657BE8D126BBBEEA1D1DD4A86
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/60bYQFIRxfiNZZtyrd8v132OhQo.roa
Signing time: Tue 30 Jun 2026 15:48:43 +0000
ROA not before: Tue 30 Jun 2026 15:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215375
IP address blocks: 2a09:3f06:420::/48 maxlen: 48
2a09:3f06:6769::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:37:ee:06:57:be:8d:12:6b:bb:ee:a1:d1:dd:4a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 30 15:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb46d8405211c5f88d659b72addf2fd77d8e850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:47:16:80:54:e2:a1:2e:ec:7a:2c:4d:98:
36:2d:89:58:7f:03:66:93:91:4b:91:0e:d4:95:12:
c4:f9:c5:b1:07:3d:64:aa:84:b3:c8:bd:bf:ca:67:
6f:53:aa:23:26:a5:b8:78:d7:34:6c:01:0a:51:59:
5b:5c:c2:5b:22:c9:07:c9:a5:8a:d8:e9:03:bd:79:
95:49:61:d4:90:2a:46:de:8a:cb:b9:1f:2c:3a:f0:
b6:34:b5:c8:1c:f2:c5:26:8b:00:9f:60:f0:44:29:
a4:05:85:97:86:ef:21:ca:17:95:11:ea:4a:d1:20:
44:0d:5e:7d:bc:69:09:6e:17:5f:f8:d2:25:32:63:
30:55:e8:8e:1b:f2:c1:c1:a6:e5:e6:4c:a6:e4:29:
b5:32:86:bb:e0:12:e6:9c:48:ff:b0:f3:48:ed:1f:
42:3c:87:07:1a:50:2a:2e:de:64:90:92:93:bc:d1:
46:66:d4:e5:ef:c2:f4:d3:94:2b:2d:44:d5:9f:1d:
57:19:28:9a:4c:22:8f:48:6d:54:e9:02:7e:71:8d:
c4:f6:31:f9:55:0e:43:b8:89:ba:ee:ea:b2:69:b4:
bc:3e:bf:64:c6:3b:93:90:d7:6c:3a:aa:2e:1c:a4:
dd:c9:8e:3f:b5:13:88:c1:56:4d:fa:e0:da:e9:ba:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:D8:40:52:11:C5:F8:8D:65:9B:72:AD:DF:2F:D7:7D:8E:85:0A
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/60bYQFIRxfiNZZtyrd8v132OhQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f06:420::/48
2a09:3f06:6769::/48
Signature Algorithm: sha256WithRSAEncryption
17:53:ee:1e:df:3a:d6:cd:c3:34:f3:45:dd:1e:bc:5b:b5:fd:
89:19:7d:c3:0d:d3:a2:02:43:30:4b:a3:db:fd:53:b9:aa:a9:
ae:55:11:f4:d4:7b:e4:ba:fc:5e:91:b6:de:e2:3e:17:43:f9:
c0:e2:d5:a4:a4:9f:df:f1:9b:16:a7:d5:66:06:63:9f:01:c2:
54:3c:31:92:84:e8:89:20:47:67:f6:53:8a:3b:0c:5f:d6:64:
59:42:32:6d:61:33:f9:e1:07:38:2d:e3:97:8e:b5:95:3e:a4:
06:c6:b6:b1:22:98:f2:2b:07:9e:ce:03:78:24:cb:02:21:2d:
1a:9e:d1:11:f2:34:5b:02:b5:2f:38:05:e8:3f:aa:c5:fd:aa:
d6:fe:d7:b7:0e:d4:f1:35:c3:d6:98:56:3e:7f:bc:6a:15:a2:
64:6b:fb:83:10:2a:c5:07:b1:be:39:79:87:29:07:82:42:72:
8c:ad:52:14:3f:b5:33:41:17:58:be:bc:46:eb:7e:95:e4:1a:
24:6c:d6:4d:8e:17:09:8b:bc:33:1e:6d:80:22:4f:1d:56:61:
d9:f4:fa:61:70:94:d6:b4:78:b1:01:04:31:c7:f7:e8:f9:c3:
3e:b8:aa:b8:2e:2d:5b:27:45:36:de:48:dd:85:8d:e0:a4:bc:
c9:7d:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:05 2026 by rpki-client