This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          FX3XD+zKs/chkKz6KjnNtMUiunynzeYIrXKelS0axOE=
Subject key identifier:   22:47:7A:2C:49:78:C2:6A:B5:0B:E6:D3:2D:D1:65:29:78:0E:2C:7E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       378111353885B03A31CF22FF730AC9FAE798C829
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
Signing time:             Tue 20 Jan 2026 08:10:14 +0000
ROA not before:           Tue 20 Jan 2026 08:05:14 +0000
ROA not after:            Tue 19 Jan 2027 08:10:14 +0000
asID:                     62240
IP address blocks:        82.27.92.0/24 maxlen: 24
                          82.27.93.0/24 maxlen: 24
                          82.29.109.0/24 maxlen: 24
                          82.39.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:11:35:38:85:b0:3a:31:cf:22:ff:73:0a:c9:fa:e7:98:c8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 20 08:05:14 2026 GMT
            Not After : Jan 19 08:10:14 2027 GMT
        Subject: CN=22477A2C4978C26AB50BE6D32DD16529780E2C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:01:9e:c6:4e:f4:76:f5:83:9a:de:2c:7a:
                    2c:e7:86:9d:51:92:df:4a:5f:60:69:6f:aa:1f:0f:
                    3e:31:9b:ff:cc:17:33:e3:ec:66:fb:d7:34:8f:d5:
                    e0:46:51:46:1b:61:dd:57:c5:05:0c:86:13:0f:70:
                    4a:f1:5e:26:e2:9a:3d:c0:32:24:a3:c2:8e:71:b3:
                    6e:98:62:49:cd:a1:af:bb:2a:75:a6:d9:b4:a5:9d:
                    aa:9f:1b:33:48:ae:b4:14:2b:34:44:12:be:61:98:
                    37:54:21:4b:00:67:1b:35:2c:4a:37:82:65:3e:04:
                    52:4c:c2:27:1f:54:4d:fa:c7:5f:95:e2:75:e7:b5:
                    83:38:bd:c6:21:05:fb:cc:65:22:35:41:f9:cb:41:
                    86:07:cd:7b:1b:75:4a:34:a9:d1:3f:ad:01:b8:4e:
                    50:a3:7a:e8:d6:f1:95:5b:2b:80:98:1d:92:08:98:
                    46:99:fd:2d:3e:3f:08:4b:cd:5f:6c:bd:90:fb:1d:
                    bc:ff:4d:fc:61:e2:19:bb:00:bc:1d:cb:6b:df:c6:
                    be:52:ed:dd:7b:f9:67:17:0e:4f:65:83:2c:26:80:
                    a6:99:d0:aa:91:3e:bf:7d:ae:1e:b1:17:d9:9a:d8:
                    b2:91:6d:96:9d:14:6a:19:14:f0:d1:38:87:0b:7b:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:47:7A:2C:49:78:C2:6A:B5:0B:E6:D3:2D:D1:65:29:78:0E:2C:7E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.27.92.0/23
                  82.29.109.0/24
                  82.39.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:39:75:29:c0:05:ce:e9:ce:8c:a0:d3:4c:14:96:f3:4f:5a:
         1a:06:86:f4:f3:09:6e:31:cb:6a:bd:b3:b8:d9:d6:01:76:fb:
         1e:df:b7:2a:45:be:39:30:21:79:1c:af:2e:25:06:2a:d4:45:
         f5:1a:d9:f0:3d:e0:40:a5:72:b3:23:28:d5:ec:e4:dd:99:74:
         e2:31:d1:f7:20:ea:81:f1:54:c4:b0:14:d5:38:d8:dc:24:0e:
         21:b6:88:4a:e2:c5:5d:d4:3d:3b:9d:ce:1e:ca:47:62:f5:29:
         2d:0e:54:17:0f:f7:0c:14:05:fe:a5:d2:8b:71:a6:f3:b4:ad:
         48:a1:04:3e:9e:47:cb:8f:bf:a2:8b:25:62:35:09:a9:cf:cb:
         11:48:03:5f:3b:63:06:e4:23:42:bc:bb:f8:88:c4:e2:0f:1f:
         1b:0e:f6:ee:9e:8c:e4:0b:85:a0:c5:49:26:7e:ef:03:81:8e:
         79:de:bb:3c:02:36:56:e0:03:87:10:a1:45:78:30:ea:db:67:
         6e:c5:0e:9c:a1:d2:46:52:44:4d:44:72:09:52:d8:c2:a9:15:
         ad:04:cd:56:86:b2:28:f4:d6:bc:53:04:5a:d0:c6:37:68:6c:
         de:82:9d:c4:59:35:d6:79:65:cb:b7:61:9f:22:86:06:71:11:
         6d:f1:4d:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:05:37 2026 by rpki-client