Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62610.roa
File: AS62610.roa (raw, json)
Hash identifier: POMvOluYhpCAz31oepI5UoLOlpv9g37LqUaBlUtt3X8=
Subject key identifier: 68:50:16:B6:1C:80:9F:3E:9C:8D:6E:6B:93:A9:0D:BD:4C:17:EB:E7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 531EEBED074011D2469709A0A401E957EA19647E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62610.roa
Signing time: Thu 23 Jul 2026 18:03:40 +0000
ROA not before: Thu 23 Jul 2026 17:58:40 +0000
ROA not after: Thu 22 Jul 2027 18:03:40 +0000
asID: 62610
IP address blocks: 82.21.187.0/24 maxlen: 24
82.22.13.0/24 maxlen: 24
82.38.104.0/24 maxlen: 24
82.38.107.0/24 maxlen: 24
82.38.108.0/24 maxlen: 24
82.38.109.0/24 maxlen: 24
82.38.132.0/24 maxlen: 24
82.39.64.0/24 maxlen: 24
82.39.239.0/24 maxlen: 24
82.41.235.0/24 maxlen: 24
82.41.237.0/24 maxlen: 24
82.47.211.0/24 maxlen: 24
82.47.246.0/24 maxlen: 24
84.75.132.0/24 maxlen: 24
84.75.142.0/24 maxlen: 24
84.75.145.0/24 maxlen: 24
84.75.152.0/24 maxlen: 24
84.75.166.0/24 maxlen: 24
84.75.180.0/24 maxlen: 24
84.75.193.0/24 maxlen: 24
84.75.195.0/24 maxlen: 24
84.75.199.0/24 maxlen: 24
84.75.214.0/24 maxlen: 24
178.83.87.0/24 maxlen: 24
178.83.130.0/24 maxlen: 24
178.83.186.0/24 maxlen: 24
178.83.198.0/24 maxlen: 24
178.83.232.0/24 maxlen: 24
178.83.234.0/24 maxlen: 24
178.83.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1e:eb:ed:07:40:11:d2:46:97:09:a0:a4:01:e9:57:ea:19:64:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 23 17:58:40 2026 GMT
Not After : Jul 22 18:03:40 2027 GMT
Subject: CN=685016B61C809F3E9C8D6E6B93A90DBD4C17EBE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:c1:5c:4d:38:16:e2:83:f4:cf:c8:4e:bf:
99:57:2f:3d:7f:ff:f0:b0:0d:3b:61:ef:b4:5c:94:
b9:30:62:52:88:3f:3b:4c:ed:97:22:51:2d:7f:e1:
cc:52:94:8f:4e:c6:ec:46:f1:eb:17:02:3e:44:09:
82:c4:35:c0:4e:37:57:d9:1a:bc:7c:7d:02:3b:21:
69:fa:0d:6f:72:6a:88:77:77:79:ff:46:96:c7:65:
29:0e:90:cc:b3:23:45:6d:f1:12:63:7e:ba:56:3e:
03:d0:7c:02:dd:5e:a1:79:54:e7:e8:48:7a:f9:f2:
e8:13:8c:79:ac:c4:8f:38:94:42:40:c1:fe:9e:72:
a7:bf:db:83:f9:a5:ec:04:93:84:f6:eb:b1:7c:75:
5b:8b:cf:54:e1:d3:53:d0:45:00:97:43:ec:49:5f:
84:c7:5d:8b:a1:32:91:ff:76:c3:00:6a:e4:bc:f5:
ff:6a:03:32:64:ae:c0:80:dd:d5:2a:55:d4:13:e9:
da:58:ec:50:4e:95:56:74:b0:cd:36:8f:40:af:06:
40:84:88:02:ea:38:ec:e2:e1:e8:49:6d:98:7d:fc:
01:b6:b0:82:48:65:cb:07:69:f3:f8:bc:3f:8c:76:
b0:64:f2:61:3b:2e:b0:83:a1:8c:1f:f3:ae:57:00:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:16:B6:1C:80:9F:3E:9C:8D:6E:6B:93:A9:0D:BD:4C:17:EB:E7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.187.0/24
82.22.13.0/24
82.38.104.0/24
82.38.107.0-82.38.109.255
82.38.132.0/24
82.39.64.0/24
82.39.239.0/24
82.41.235.0/24
82.41.237.0/24
82.47.211.0/24
82.47.246.0/24
84.75.132.0/24
84.75.142.0/24
84.75.145.0/24
84.75.152.0/24
84.75.166.0/24
84.75.180.0/24
84.75.193.0/24
84.75.195.0/24
84.75.199.0/24
84.75.214.0/24
178.83.87.0/24
178.83.130.0/24
178.83.186.0/24
178.83.198.0/24
178.83.232.0/24
178.83.234.0/24
178.83.237.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bb:a9:4b:79:3d:41:aa:57:65:b7:bc:96:c0:98:d7:b9:30:
97:80:fe:b0:66:60:e5:6b:49:42:41:e8:70:cc:c1:27:fa:44:
a6:5c:f6:85:f6:bf:e1:de:0c:80:0a:87:e9:24:f9:c1:9a:64:
4d:ad:1b:4a:dc:15:fd:56:60:29:89:1f:e7:70:7d:85:1e:31:
ad:c8:47:87:52:d0:d1:8d:50:95:e1:28:4a:f5:dc:8b:11:c7:
ec:1a:28:f4:bc:6d:0e:bc:09:28:3c:b5:6e:36:6b:28:d6:52:
e3:72:70:65:0c:4b:50:33:9a:30:7d:2c:6d:50:5b:76:93:99:
aa:bf:5d:52:4e:22:61:5b:4f:1b:1b:96:49:9a:e0:78:63:19:
17:89:90:4d:6e:b6:d7:f6:cb:a9:83:6d:f9:4f:fa:6d:34:f5:
81:31:10:98:2c:4c:4b:3b:b5:0f:87:c8:6e:ac:55:71:bc:f3:
4d:ea:82:72:d0:9e:b4:4d:a6:f9:36:56:a9:7f:16:58:57:e2:
49:5f:5d:d7:e1:71:bd:ef:e9:b9:1c:0e:76:e0:c3:fa:95:f8:
d6:46:aa:5f:f2:ce:d1:43:85:4b:37:b2:03:fa:c2:e0:17:34:
ac:96:b1:a3:06:88:ac:31:30:ca:14:05:59:43:07:89:fe:a7:
82:e9:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:32 2026 by rpki-client