Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/60I3Phq7ncPvOgRQ8eIlDkzNvEE.roa
File: 60I3Phq7ncPvOgRQ8eIlDkzNvEE.roa (raw, json)
Hash identifier: D5jC1eixYKJj2kWLVdKg4/VrGFpyVeytvmi/AQ2YXaE=
Subject key identifier: EB:42:37:3E:1A:BB:9D:C3:EF:3A:04:50:F1:E2:25:0E:4C:CD:BC:41
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A183B8220EB0FEC98BDBCD19EE126965FD
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/60I3Phq7ncPvOgRQ8eIlDkzNvEE.roa
Signing time: Wed 28 Oct 2026 18:14:04 +0000
ROA not before: Wed 28 Oct 2026 18:14:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.232.83.0/24 maxlen: 24
89.126.229.0/24 maxlen: 24
89.126.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:b8:22:0e:b0:fe:c9:8b:db:cd:19:ee:12:69:65:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 28 18:14:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb42373e1abb9dc3ef3a0450f1e2250e4ccdbc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:07:54:05:6d:ae:78:4c:60:bf:4c:ee:39:
97:da:c5:64:de:29:16:29:d6:89:31:9b:ba:22:bb:
2c:5d:c2:88:91:50:f1:f5:f0:11:fa:de:bf:b1:04:
b8:95:27:b5:d0:8f:57:80:18:34:1a:9e:97:01:c8:
b3:e0:8f:b0:d6:da:7b:b4:5a:06:61:87:7c:2d:82:
28:7a:71:bd:13:92:4d:6b:5e:2e:d0:ce:ff:3b:0d:
60:66:e7:08:95:fc:e8:b7:6d:e5:54:ea:a5:56:54:
8f:a9:19:73:5c:95:2d:c5:39:c3:73:e0:ba:04:4f:
53:e3:04:03:e6:ab:fb:2e:e9:f5:7a:98:4b:f5:b5:
7d:39:fd:ee:de:ae:71:a8:9a:71:d0:09:2b:f6:e9:
a6:77:de:a4:84:d6:06:34:56:80:37:12:07:c7:e4:
12:c5:f4:2c:4d:10:c1:75:4c:50:7a:a3:57:0e:b4:
5b:ec:b4:ee:42:06:c4:9c:1e:6b:81:57:5b:4a:5d:
ed:aa:73:45:e0:ae:23:5f:34:59:52:4a:73:fb:8d:
ea:73:6b:91:dc:8d:a7:c7:4b:4f:aa:41:38:a4:a1:
e2:5a:fd:fb:64:9b:3c:11:9f:6a:8f:d8:ea:a4:09:
58:dc:51:4e:34:3e:0b:30:31:85:25:71:6e:76:95:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:37:3E:1A:BB:9D:C3:EF:3A:04:50:F1:E2:25:0E:4C:CD:BC:41
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/60I3Phq7ncPvOgRQ8eIlDkzNvEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.83.0/24
89.126.229.0-89.126.230.255
Signature Algorithm: sha256WithRSAEncryption
2c:96:8b:97:7f:3b:62:d7:f6:da:94:ba:d1:ca:b2:9e:10:2b:
cf:45:9d:cd:83:eb:c2:6d:46:c4:ab:fb:53:a0:f6:c4:fe:6d:
e6:a2:45:ef:93:c1:d7:4c:b5:3d:1a:1c:0b:68:e9:08:2a:e6:
da:b7:09:21:5b:c9:50:94:dc:94:d9:f8:a9:46:fd:b5:54:1b:
28:9a:e4:d9:5c:af:fd:11:48:a4:cc:dd:72:1e:af:6b:13:eb:
1a:38:14:ba:e1:fd:5c:c8:44:3c:f7:40:97:a3:cf:0f:73:53:
b7:47:2d:23:99:c8:e9:96:2f:05:e9:df:aa:62:96:73:62:f6:
2a:c7:74:ef:2a:e4:71:b3:63:36:af:89:0c:cb:f8:61:41:2e:
d4:fd:a6:25:c4:8a:1d:3f:e8:4e:4f:a0:60:fc:1e:1e:b9:c0:
c0:63:ba:b6:c5:34:2b:21:7e:ff:37:71:64:57:d9:e5:da:fa:
4f:55:02:4e:a8:01:41:49:a7:4e:76:9f:88:df:6e:be:0c:ce:
ab:10:bd:98:ef:9a:19:e5:a7:c9:92:3c:6b:b1:c5:fa:ca:2c:
26:05:a8:bc:ce:6d:2e:8d:51:d6:a0:cc:ac:ee:97:ac:f3:dc:
d2:67:54:1f:b7:25:c6:82:2d:9f:8d:0c:5d:43:6d:4c:37:82:
f7:a5:4e:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:09:21 2026 by rpki-client