Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60068.roa
File: AS60068.roa (raw, json)
Hash identifier: EWvTS1c6/CjiVzuVJkhVUSlWgNbYkDUDhx6vnVpTDyw=
Subject key identifier: 2F:AC:24:18:F5:A7:F0:E0:E1:A9:18:80:7C:80:20:92:02:0C:40:70
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 02CE09135A266DE1903529EFECDC84935E5B0C4A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60068.roa
Signing time: Thu 10 Sep 2026 17:13:16 +0000
ROA not before: Thu 10 Sep 2026 17:08:16 +0000
ROA not after: Thu 09 Sep 2027 17:13:16 +0000
asID: 60068
IP address blocks: 162.141.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ce:09:13:5a:26:6d:e1:90:35:29:ef:ec:dc:84:93:5e:5b:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 10 17:08:16 2026 GMT
Not After : Sep 9 17:13:16 2027 GMT
Subject: CN=2FAC2418F5A7F0E0E1A918807C802092020C4070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:78:6c:d6:51:b6:15:e1:cf:39:33:18:9c:
bb:df:9d:d8:f1:0b:09:d7:4c:7c:31:e5:55:9f:ff:
57:a8:bd:97:fa:48:88:e2:81:bd:1b:58:45:cb:e6:
45:f3:6a:a1:5a:59:9a:84:60:f5:3c:ea:a7:ea:08:
d3:07:ce:76:47:de:14:0f:30:84:c5:f0:5c:dd:b8:
6c:81:7d:a8:b3:03:bb:74:34:70:0b:c9:29:fe:c9:
04:0a:77:a7:90:07:ea:be:c5:32:48:6b:f3:c7:99:
3e:50:a4:b4:d5:68:3a:5f:cc:e8:21:0f:50:12:63:
35:42:d0:65:9a:ee:7c:07:51:b7:53:cb:95:e0:60:
a1:a7:5d:c5:00:64:b8:59:cd:0d:1e:9f:22:ca:80:
bc:18:2a:88:54:e4:6d:e1:36:a7:ef:1e:10:b0:a5:
42:ce:ff:1f:00:c3:54:6e:35:b8:5f:cc:14:eb:5c:
dc:d6:33:58:41:f1:2a:16:b2:8e:c0:cf:39:ef:ba:
22:79:59:ce:74:cd:3c:27:d2:3e:8e:83:2c:c8:83:
5c:66:69:75:17:df:8e:0c:6d:89:5e:79:ea:ba:d2:
ed:7e:f3:2d:3f:20:dd:a0:74:9e:89:e4:2d:fd:82:
ca:f5:5d:14:0b:78:88:ff:c8:29:82:e4:bc:b8:39:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:24:18:F5:A7:F0:E0:E1:A9:18:80:7C:80:20:92:02:0C:40:70
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fb:a6:88:b2:c5:74:61:6b:2d:57:7c:33:98:86:89:a1:2a:
08:22:83:ec:8b:aa:d7:76:5a:5d:1d:3b:b7:94:6c:63:da:65:
b4:74:51:a4:2d:ef:47:7d:8b:14:1b:44:f1:7c:cb:5d:45:da:
db:ca:1e:21:55:c1:44:db:ed:4c:49:52:82:96:77:d1:e4:e2:
db:9c:13:c8:df:27:44:bc:18:79:96:95:64:1c:8e:fc:8d:1f:
69:5b:87:2b:4d:e8:fb:1e:ed:93:7b:35:62:32:94:a6:36:2e:
47:0c:b5:f1:ae:49:ab:f7:f1:ab:a5:79:62:7a:0c:45:9a:83:
97:06:6e:39:21:e3:cf:fa:96:f8:98:55:ee:c7:e3:2a:fd:eb:
46:90:56:76:9b:c7:e7:6b:64:50:0f:98:2d:af:a6:94:70:e1:
95:c2:61:db:9d:2b:30:de:2a:b1:f1:01:1e:a2:46:df:5f:f3:
c8:75:dc:03:fc:05:80:79:e2:8d:71:66:81:3a:2d:7d:20:5d:
3b:a9:54:2e:d8:07:c7:f8:ef:de:f6:bb:08:bf:e4:2d:ce:cb:
ee:0f:92:cc:f4:4e:c0:c2:e8:05:c0:e0:de:f1:5a:99:74:d0:
ac:4c:d2:da:f6:f3:cc:1b:e1:92:1c:80:bf:a9:a2:2f:9d:18:
99:74:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:17 2026 by rpki-client