Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
File: AS60542.roa (raw, json)
Hash identifier: G+ZY33oTOszIxXt8q2l2ssFucO10amtADDE2uj4fYZg=
Subject key identifier: 8F:36:70:A5:65:D7:84:D9:4A:2A:59:B9:85:16:48:98:51:01:75:BB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6939D3C9C09A63D88AA2091DEB8F653AF83429FB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
Signing time: Fri 20 Feb 2026 01:55:39 +0000
ROA not before: Fri 20 Feb 2026 01:50:39 +0000
ROA not after: Fri 19 Feb 2027 01:55:39 +0000
asID: 60542
IP address blocks: 191.101.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:39:d3:c9:c0:9a:63:d8:8a:a2:09:1d:eb:8f:65:3a:f8:34:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 20 01:50:39 2026 GMT
Not After : Feb 19 01:55:39 2027 GMT
Subject: CN=8F3670A565D784D94A2A59B985164898510175BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:5b:ee:7e:53:6d:8f:40:05:20:ca:98:d8:
41:d8:65:90:2a:ad:bd:3d:fb:65:4b:a5:78:84:89:
e2:f7:21:54:50:ae:89:7b:90:50:09:f0:7b:00:8d:
89:b6:70:8e:17:a9:b4:8d:f7:3b:87:1f:10:49:2c:
2c:a3:4b:69:95:62:74:6c:05:38:e9:55:89:fc:3f:
74:2e:fc:f9:d9:57:b2:b4:89:f5:c6:99:26:0a:b0:
e3:df:f3:1f:5d:9f:61:45:ea:d3:6f:88:ef:6b:f5:
fe:c1:f4:ee:50:70:94:c9:ae:c1:39:b4:51:3a:73:
b6:88:f7:a5:c3:59:08:90:61:97:c5:e7:33:be:02:
6d:2b:1c:ac:f2:7b:93:7f:32:cf:6a:30:d2:ef:9d:
71:53:5f:99:0c:bd:70:d4:76:6c:7e:11:c9:11:70:
3e:e5:48:a4:52:96:34:ef:3a:42:7b:13:a0:95:e3:
45:70:fd:50:f5:84:9f:9d:dc:c7:5c:22:3e:50:b9:
b3:56:68:1d:79:d7:c6:02:54:18:8f:08:cd:1b:89:
71:6b:6a:21:d0:09:bf:88:5a:4b:ae:63:cd:e6:d2:
3c:c7:81:3f:0e:69:5c:ba:5d:38:57:a6:f7:bd:cd:
bc:99:67:8b:ed:23:80:27:97:77:bf:ab:57:90:d2:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:36:70:A5:65:D7:84:D9:4A:2A:59:B9:85:16:48:98:51:01:75:BB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS60542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.243.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c7:a3:44:6e:f9:68:57:68:f3:0d:de:37:d0:05:bc:91:85:
6c:f8:fb:2c:85:ef:bc:27:fe:a8:cf:2c:d4:f2:38:47:07:e2:
18:47:d5:e6:b5:c9:0d:3e:47:6f:41:e8:f2:01:7b:ef:88:3a:
74:c8:dd:3b:66:7b:9d:66:f0:52:82:e0:8d:d8:3e:56:a5:d1:
8c:a9:b4:c7:bc:11:3c:23:c6:ea:4c:3b:8b:be:28:7c:48:67:
f2:29:30:df:70:4b:e5:c5:ff:99:0b:88:00:38:cc:ac:e9:c8:
5e:4d:69:d0:d2:34:e6:9c:00:64:89:e2:05:9b:a8:b7:11:32:
58:6c:11:d3:2e:33:0e:df:3c:a7:aa:00:3b:97:b3:c5:76:27:
a7:ca:cc:9b:43:b1:41:eb:c5:4f:b2:ce:e6:87:ef:6d:a4:7b:
9c:42:8d:97:89:5c:17:35:96:bf:1b:2c:10:12:82:ac:16:77:
66:83:8a:a4:2d:d7:ae:ed:0e:75:07:94:1c:8b:17:5b:46:4e:
ae:3b:73:30:cd:57:26:a6:c4:62:f7:33:b0:29:ba:8a:75:0f:
e8:95:c7:f1:74:a8:23:87:1b:12:fe:05:c1:ca:b1:23:54:19:
49:bc:45:d0:5b:c5:fa:62:71:a3:f4:4d:f1:9a:9f:e9:65:fa:
82:63:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:38 2026 by rpki-client