Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: BzHqdaZj6KfDYuG1hPxNELhIMVqisD4UAqOXnKNygDY=
Subject key identifier: 51:23:E9:B5:F0:11:A3:42:17:8A:CF:D9:85:C9:47:07:1E:89:E6:B1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 37A0CAEDBCB155278F0F81C65311364F2A0ABB27
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
Signing time: Wed 06 May 2026 08:26:20 +0000
ROA not before: Wed 06 May 2026 08:21:20 +0000
ROA not after: Wed 05 May 2027 08:26:20 +0000
asID: 62240
IP address blocks: 143.14.221.0/24 maxlen: 24
162.141.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a0:ca:ed:bc:b1:55:27:8f:0f:81:c6:53:11:36:4f:2a:0a:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 6 08:21:20 2026 GMT
Not After : May 5 08:26:20 2027 GMT
Subject: CN=5123E9B5F011A342178ACFD985C947071E89E6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:8c:6a:46:84:11:29:bc:d3:d5:d8:db:e3:
0c:7a:99:42:54:ad:8a:34:7b:ca:b2:f1:4c:d6:e0:
06:04:27:2e:fb:ba:65:e0:b5:42:64:2b:6b:cb:ec:
3f:54:ab:4d:14:e9:0a:08:6d:06:7e:ad:c5:95:f6:
f8:f8:50:89:ba:16:a7:5a:19:67:d4:d2:28:1d:fa:
f3:62:82:bb:6e:cb:c9:a0:fa:a6:2b:98:39:41:dd:
57:1c:ac:20:d6:e0:8c:be:ce:9a:29:9a:53:52:3f:
db:11:74:5a:01:cd:5b:45:88:4f:66:5b:06:a4:34:
dc:56:1e:33:1d:40:ed:fc:e6:9a:cb:da:4f:01:c2:
9e:c9:6c:05:a3:de:03:3b:3b:af:9d:4e:5c:f5:63:
fb:d8:d4:81:4f:13:bf:a8:7d:bd:67:a8:18:82:c7:
5b:83:d5:f3:a9:fa:3a:84:ee:96:c1:4d:b1:6b:56:
5c:1e:19:d7:ab:be:d6:b9:9f:b0:5a:de:a4:e3:b4:
7e:d7:86:8c:e2:68:63:a8:97:1b:21:78:c5:a1:ad:
0f:a5:8f:40:4b:a5:f8:cf:5b:b6:c8:74:51:d7:60:
e1:6f:ef:a7:1a:81:30:08:1a:6f:58:80:ae:47:2e:
c6:b6:ce:e3:64:29:e5:8e:42:22:45:14:0b:ad:36:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:E9:B5:F0:11:A3:42:17:8A:CF:D9:85:C9:47:07:1E:89:E6:B1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.221.0/24
162.141.55.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ea:32:3d:9a:80:47:ad:6c:84:fe:69:ce:f2:58:16:09:6c:
49:3f:12:5e:4b:7e:6f:35:52:ec:71:f4:1d:a0:ec:f5:ce:01:
90:9e:8c:84:27:0c:45:d4:a4:45:21:66:3f:69:8b:51:9c:2d:
a4:8c:97:cb:2e:08:49:67:4b:b3:40:22:ba:cf:e7:b3:0c:db:
af:0c:c3:92:90:04:93:c3:3e:5e:3d:19:11:07:fe:31:cf:7b:
31:ea:4a:c8:72:ac:b7:c7:e6:87:ae:f6:b2:04:4a:96:3f:1f:
c3:30:25:d6:b4:c6:a6:70:f2:d5:0e:c7:18:27:cf:b1:17:ec:
fb:94:fe:aa:d5:1d:fb:b7:b4:2e:11:c6:32:6f:31:ea:ff:b7:
65:d1:f1:1e:c7:bc:f6:7f:38:9f:48:aa:35:39:2d:02:1d:0f:
e1:e2:2b:2c:fb:2e:95:3c:81:3e:f5:02:d7:0b:28:f4:af:9f:
7c:91:bd:e2:cb:00:98:f7:af:94:c2:f8:bb:58:26:6e:63:55:
75:93:b7:46:33:1f:fc:83:5e:0e:47:dc:35:4a:df:4b:f0:52:
95:86:ce:8f:c3:fa:fc:78:2c:53:8a:92:cf:5f:f4:87:db:45:
18:8b:36:8b:bb:bb:69:5e:9c:62:fe:a0:13:a6:fd:39:2f:09:
9f:b1:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:09:49 2026 by rpki-client