Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/60LlAarT6Q8MazN5bO-kxvOMIh0.roa
File: 60LlAarT6Q8MazN5bO-kxvOMIh0.roa (raw, json)
Hash identifier: Lfg1YPoN7WrTI4fEXLb/+E3ZSTPufHWvRFG2wU50WIY=
Subject key identifier: EB:42:E5:01:AA:D3:E9:0F:0C:6B:33:79:6C:EF:A4:C6:F3:8C:22:1D
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01A1D43C23859D22837B4E32149BF689E1C3
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/60LlAarT6Q8MazN5bO-kxvOMIh0.roa
Signing time: Fri 13 Nov 2026 09:27:53 +0000
ROA not before: Fri 13 Nov 2026 09:27:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62454
IP address blocks: 43.251.163.0/24 maxlen: 32
176.100.38.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
185.14.92.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
2a00:ccc7::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:3c:23:85:9d:22:83:7b:4e:32:14:9b:f6:89:e1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Nov 13 09:27:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb42e501aad3e90f0c6b33796cefa4c6f38c221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:4a:c6:f3:f7:fa:4d:96:23:f9:49:53:e3:
6d:9e:6c:3e:b9:56:28:a1:9b:16:0d:21:12:bb:b2:
fb:b2:18:3f:29:61:b4:12:88:70:ee:2d:b6:df:3a:
b2:a6:72:be:6f:3e:85:d5:e1:c5:1d:d7:83:5a:cc:
fc:fd:fb:06:20:3c:9f:54:b8:1e:58:f6:5b:a4:b0:
d2:2f:8d:cd:92:e5:70:fe:ff:f3:6e:8a:3d:62:51:
cf:90:3b:2e:8c:b4:17:c6:76:1d:99:d2:86:ee:e8:
9b:45:c7:47:b9:c7:28:df:21:71:ea:0f:b3:c2:ad:
2e:05:fb:cb:fe:8e:be:65:70:6c:62:96:1a:be:0c:
e3:b8:b5:9e:74:1b:a9:a5:c5:44:12:77:e5:79:b3:
06:94:e2:95:a3:3e:41:d0:ab:e5:4c:78:b8:6e:d7:
57:dc:af:00:08:ad:b1:cd:95:95:9e:47:8b:a4:34:
fb:45:28:ff:95:99:aa:9e:d5:77:d5:82:55:45:d7:
66:fe:c4:3c:1a:15:bc:f6:16:f9:15:d5:99:44:c4:
39:e1:8d:45:23:14:25:b1:2e:2d:29:c4:78:bc:cf:
81:00:92:ec:4e:fb:03:60:ea:b9:9a:f6:9c:d3:7d:
a3:c4:ce:cb:54:70:31:93:2c:f5:5f:4f:3e:96:ba:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:E5:01:AA:D3:E9:0F:0C:6B:33:79:6C:EF:A4:C6:F3:8C:22:1D
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/60LlAarT6Q8MazN5bO-kxvOMIh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.251.163.0/24
176.100.38.0/23
185.14.92.0/23
IPv6:
2a00:ccc7::/32
Signature Algorithm: sha256WithRSAEncryption
95:65:48:29:96:df:2d:ea:9d:0b:54:7c:20:d8:0d:d5:2d:55:
a0:68:a4:34:f9:46:09:b2:65:9f:f9:d4:b5:37:ef:ec:38:ec:
cb:d9:4a:0d:58:db:fb:42:c8:71:a6:2a:f8:ea:04:3f:b6:7b:
55:61:5f:58:eb:c1:fd:05:e1:4f:36:05:7f:ed:80:48:f0:35:
37:f8:ba:59:53:d3:61:f7:46:1c:f6:a5:06:e2:05:ff:e2:5c:
28:ac:41:e0:13:2c:fd:93:6d:38:fd:3c:dc:10:16:ab:2a:d0:
87:a8:38:83:f8:ca:0a:43:e2:ef:74:47:11:c1:42:05:b7:d5:
c1:98:99:73:6e:a8:55:3a:82:5b:df:a8:5c:d8:5b:fd:ef:8d:
40:1c:62:ea:cd:ed:89:fa:f7:a0:1b:b8:66:6e:85:3b:72:24:
4e:36:6c:0c:28:cc:fb:a7:c0:23:93:89:f7:d0:c8:a2:c5:a0:
4b:04:20:29:9c:95:c9:14:cb:28:cf:8f:86:d9:b6:e4:00:fd:
2d:91:e3:01:ab:c8:06:84:fa:be:d3:88:a2:0c:bf:be:7d:06:
6f:de:38:ff:26:85:cb:4f:4f:a4:1e:fe:39:f8:ff:a9:f5:37:
c9:33:0f:44:03:61:23:f4:cc:19:f1:03:92:08:64:06:ec:8f:
c5:98:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:37 2026 by rpki-client