Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60672.roa
File: AS60672.roa (raw, json)
Hash identifier: 5g1D7fzaPtlcBfR2jYVIy4l2f9IZeg3sFdpH88/twXI=
Subject key identifier: E0:84:E8:93:9D:63:92:A9:5F:68:E9:D3:54:DE:E1:B7:6D:F7:CD:BA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1263CCED494C581C211C7C1D13711E741A75E9E3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60672.roa
Signing time: Thu 26 Feb 2026 12:46:29 +0000
ROA not before: Thu 26 Feb 2026 12:41:29 +0000
ROA not after: Thu 25 Feb 2027 12:46:29 +0000
asID: 60672
IP address blocks: 147.79.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:63:cc:ed:49:4c:58:1c:21:1c:7c:1d:13:71:1e:74:1a:75:e9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 26 12:41:29 2026 GMT
Not After : Feb 25 12:46:29 2027 GMT
Subject: CN=E084E8939D6392A95F68E9D354DEE1B76DF7CDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:27:76:bd:c1:45:cf:7f:e6:f0:4d:dd:01:
1e:a0:ba:c0:70:20:82:e7:e7:fb:c6:c5:05:47:92:
16:0a:be:0b:38:36:17:b6:22:20:5c:df:a8:4a:7b:
81:ad:eb:09:e4:fd:f5:2a:99:7b:74:b8:92:17:99:
8f:bb:19:ee:c5:40:92:e7:c4:a8:ec:99:ad:c7:c4:
93:1e:dc:de:8a:84:87:96:0d:3f:c3:b0:c8:65:ae:
19:39:32:7c:fd:26:ea:e4:60:b5:3e:81:c1:91:41:
1c:99:ca:89:47:a1:de:4c:18:a2:0d:24:c9:d8:f4:
ec:b5:8a:09:89:31:74:b7:80:af:09:03:98:bb:52:
3e:5b:59:6b:f0:b4:c4:97:89:54:c7:78:39:01:8d:
e6:78:3e:85:2d:08:aa:45:83:a9:78:37:05:c6:92:
48:ea:e4:b2:00:e7:99:01:34:74:86:c0:75:85:15:
12:18:e0:10:6c:59:5e:cb:f1:9e:45:28:f8:d2:90:
9c:e7:9a:8d:b1:02:1e:f6:e0:75:82:6c:35:cf:fa:
b9:32:89:cd:e5:ee:89:4b:ad:bd:27:b2:ec:b6:f0:
ba:50:ed:63:d1:d4:b5:e9:58:5c:dc:eb:0b:91:b8:
ba:e1:6b:63:62:b0:76:5a:b8:0b:55:1f:60:b6:d4:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:E8:93:9D:63:92:A9:5F:68:E9:D3:54:DE:E1:B7:6D:F7:CD:BA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:aa:1b:b3:00:5f:ef:25:7b:06:2a:03:8f:65:95:04:f4:c3:
ee:79:b0:e8:ac:ee:f4:40:39:97:be:a8:97:fc:06:be:b4:d8:
e5:5a:95:d7:9e:28:b2:b5:fb:fc:05:fd:a7:58:45:38:d4:ae:
10:6a:31:7c:b7:23:10:84:ac:a5:d1:8c:73:c9:ed:88:72:29:
65:5a:c6:1a:2a:94:d4:b6:dc:57:26:ee:95:3b:82:0a:56:39:
ae:48:0b:7c:2b:7a:cf:86:d3:6b:56:0e:81:a0:c8:14:9a:f4:
91:40:cc:77:74:5b:7f:f2:56:56:cf:4c:fc:4f:11:b8:29:c3:
c9:7f:73:a2:75:2b:b8:2f:20:df:2c:29:e8:41:61:69:30:01:
75:f3:31:c8:86:ce:bc:06:f7:8b:57:c3:46:bd:97:96:14:42:
5c:74:70:81:e4:9f:8f:c1:90:b5:17:8d:9a:cd:fb:65:a3:3f:
13:d5:12:f5:a6:11:4b:32:a0:6d:ff:e6:0b:bb:0a:cf:81:c0:
70:b2:58:b2:96:e0:1f:7b:53:34:c6:2f:50:81:36:40:2a:db:
9b:a0:97:5f:7d:1d:71:fd:6b:7f:e9:0a:24:8e:77:3c:27:3f:
e2:84:e3:f8:80:3d:46:1d:15:e7:dd:49:12:df:0b:6e:c7:77:
7c:fc:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:29:22 2026 by rpki-client