Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS60647.roa
File: AS60647.roa (raw, json)
Hash identifier: +QWNE0MZ4AU7tga55PPiI7ikpPAsLOyE4j02b2uzo/8=
Subject key identifier: 48:39:AD:E0:2B:9F:B7:F5:AA:53:14:65:3C:34:1D:EF:F8:6C:6D:05
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 3240267FEEC71889CF6EA7F6F71950A8328B5AFC
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS60647.roa
Signing time: Thu 09 Jul 2026 13:23:03 +0000
ROA not before: Thu 09 Jul 2026 13:18:03 +0000
ROA not after: Thu 08 Jul 2027 13:23:03 +0000
asID: 60647
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:40:26:7f:ee:c7:18:89:cf:6e:a7:f6:f7:19:50:a8:32:8b:5a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 9 13:18:03 2026 GMT
Not After : Jul 8 13:23:03 2027 GMT
Subject: CN=4839ADE02B9FB7F5AA5314653C341DEFF86C6D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:b9:7d:4d:32:69:c2:92:cd:36:48:55:05:
83:c7:d0:89:a6:f9:21:cc:ef:0e:b6:a2:0c:62:34:
cf:b9:4c:5e:76:52:8d:9a:40:a8:e1:b5:18:36:0d:
19:db:30:82:58:86:b9:33:d8:b6:ca:4c:cf:da:09:
60:8f:52:d3:84:a3:28:e2:46:2a:73:97:8e:6a:2e:
da:6b:dc:96:7d:27:75:de:1b:4b:02:53:0a:23:35:
ae:18:c7:3c:94:27:9f:23:bb:19:78:37:54:85:8c:
91:e5:dc:1d:6c:b4:d7:82:b0:22:34:31:0b:fe:b2:
bf:29:bf:04:40:e3:2b:99:64:7a:f7:d9:a7:6e:62:
64:01:31:b9:0f:a5:e3:a5:c6:2b:16:35:5f:82:ab:
a4:8d:c8:10:4b:f7:47:6e:92:62:46:f2:dd:ee:12:
57:1c:c3:f6:45:0b:50:a5:71:17:fe:02:ff:bb:fd:
63:8c:00:d1:00:69:f5:33:e5:f9:74:84:7c:81:48:
a7:43:40:25:19:04:f6:01:64:7d:9c:13:2f:66:7b:
50:da:64:a6:71:b6:0e:e0:be:45:1d:5c:8b:30:53:
a1:dd:4e:b2:f2:85:a8:2d:97:71:2e:85:de:64:7b:
3e:97:d4:46:fe:de:f0:c7:e2:ce:4b:4a:0d:ca:3c:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:AD:E0:2B:9F:B7:F5:AA:53:14:65:3C:34:1D:EF:F8:6C:6D:05
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS60647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:3c:4c:b3:3b:f1:a5:0b:02:28:83:81:b6:6d:29:45:1a:2e:
24:90:27:7e:9f:4c:c1:00:28:70:28:19:d4:77:4f:08:65:31:
5a:a3:53:a5:a8:be:46:21:73:97:fe:a8:67:4b:70:c7:01:02:
d5:f6:14:f1:b6:af:2c:53:4f:2b:fd:8f:2b:01:aa:a8:79:97:
bf:6d:ca:55:99:21:af:f4:28:99:ca:21:a4:de:a7:64:08:1b:
dd:2b:38:2e:d0:89:63:09:75:49:8a:59:f1:5d:34:84:f6:75:
09:cf:94:12:38:05:ff:8f:6b:83:01:7c:1e:c3:db:eb:de:a0:
10:c6:a6:fb:f6:bc:5c:99:49:70:28:e9:22:f8:7e:2a:01:c3:
f3:6b:d1:48:3c:33:d5:cb:ed:80:97:f5:3f:99:65:4c:6f:77:
76:3a:ab:fd:4d:d0:63:56:25:c2:33:4c:58:12:f0:8b:68:93:
82:bc:8a:f3:05:4c:95:19:26:d6:18:c9:3a:fb:e8:60:d4:7f:
4b:ae:31:64:c7:c9:38:30:98:c4:e6:09:c3:5a:3f:c8:a7:ca:
1c:d4:1f:2c:5a:f7:03:cd:9b:e5:ef:a1:63:8b:58:07:97:89:
c8:bf:7f:05:a3:89:23:7e:5c:e6:a7:a1:d2:e9:18:88:ba:b1:
f3:a0:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:25 2026 by rpki-client