Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: 7poApDwnXZ7E/cTJBVdc9AIPTMkP4OSHFuF2/d3x+gc=
Subject key identifier: 99:88:D2:B0:81:D9:2F:10:D0:26:7C:A9:D5:47:FF:A8:C2:2F:F7:64
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 35D527B8E3FD44171610B38C6F3B0C541FE61B5E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
Signing time: Wed 06 May 2026 08:26:18 +0000
ROA not before: Wed 06 May 2026 08:21:18 +0000
ROA not after: Wed 05 May 2027 08:26:18 +0000
asID: 62240
IP address blocks: 82.25.6.0/24 maxlen: 24
82.27.93.0/24 maxlen: 24
82.38.112.0/22 maxlen: 22
82.38.146.0/24 maxlen: 24
82.39.232.0/24 maxlen: 24
178.83.44.0/22 maxlen: 22
178.83.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d5:27:b8:e3:fd:44:17:16:10:b3:8c:6f:3b:0c:54:1f:e6:1b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 6 08:21:18 2026 GMT
Not After : May 5 08:26:18 2027 GMT
Subject: CN=9988D2B081D92F10D0267CA9D547FFA8C22FF764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:cc:69:9b:a0:b1:03:9a:d8:03:a0:9f:40:
21:0c:cc:58:aa:56:14:79:04:5c:9d:49:2b:76:0e:
1b:46:e8:44:22:24:8d:3e:85:7e:e5:1b:e3:1f:49:
d1:8c:c9:5b:f6:79:c0:f6:de:42:4c:75:86:fa:f3:
17:59:73:f1:23:3c:11:d0:d5:16:bf:5b:cc:5d:b7:
ec:b4:45:ef:f2:af:0c:12:a0:49:a5:74:f8:ff:1d:
2d:80:54:1d:f9:04:ba:2b:4d:72:1f:5d:5e:b8:af:
4e:ad:f0:6a:14:8c:0a:67:c4:0a:4d:87:c9:40:59:
7b:49:2a:85:66:b5:67:d6:e8:59:61:ac:49:69:07:
60:64:7e:ce:2d:9b:d4:d3:7f:cf:e4:4f:c6:b1:d3:
79:a7:d9:1f:5b:8f:1e:4f:ca:89:96:25:93:b2:5d:
06:6c:7e:a6:6e:77:ce:b7:13:1b:30:2e:5b:8e:83:
93:03:2b:c9:db:88:dc:3e:2e:c2:31:83:26:cc:c3:
0d:5c:4a:6a:75:a9:f7:79:e9:8c:c7:ca:25:7c:91:
45:f4:95:9e:6a:3c:74:cc:bc:49:6e:68:cd:3f:fe:
6f:d6:68:68:9c:fc:ee:54:db:8d:43:1f:17:36:4e:
0a:63:e4:18:d8:b1:e0:56:96:a1:21:24:17:f5:b2:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:D2:B0:81:D9:2F:10:D0:26:7C:A9:D5:47:FF:A8:C2:2F:F7:64
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.6.0/24
82.27.93.0/24
82.38.112.0/22
82.38.146.0/24
82.39.232.0/24
178.83.44.0/22
178.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:63:7a:c3:66:81:3a:12:cf:a0:b0:4c:96:dd:36:ce:33:22:
10:56:fe:db:5a:8c:10:23:2b:53:6b:29:19:4f:29:dd:f3:36:
d9:74:be:31:da:7f:69:7a:51:9a:71:9a:54:85:b1:3e:84:2d:
2b:0a:a9:a5:e2:fb:59:83:5d:f8:fa:a5:9e:71:98:93:44:10:
96:8b:45:8f:0c:55:47:70:b5:ca:d1:96:c4:2f:cd:6e:3d:61:
28:c3:ef:f5:a7:e3:8c:32:ec:c2:7e:d7:63:92:66:50:6c:4d:
9f:e7:e3:e2:bc:81:5e:5a:77:1d:0b:98:f4:90:0d:6b:5a:4c:
ea:a5:88:8f:52:59:a6:34:e1:3a:49:c5:7b:0a:03:48:5f:cf:
46:3c:f0:7a:92:ba:43:98:16:cd:44:be:01:86:47:b3:be:2d:
78:c1:0c:77:ea:b2:48:05:18:ab:7b:b4:c5:01:d9:cf:50:0d:
e6:8f:1c:1b:44:61:d4:ae:d6:2d:5d:1b:2a:ce:1f:21:bd:83:
70:dc:b0:fe:d7:5f:25:1d:ba:43:b1:01:be:f8:3a:82:78:67:
9e:b4:20:0a:7c:38:13:3e:a4:be:60:d3:ab:72:96:71:7a:85:
9d:46:43:2e:81:59:57:29:1d:2e:13:4f:e3:bb:7d:0e:31:32:
17:a2:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:46:48 2026 by rpki-client