Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62068.roa
File: AS62068.roa (raw, json)
Hash identifier: P/FaePNwDzS08aTnotsOZKYiCR/iqYTTdNN2uU79Xq8=
Subject key identifier: 84:10:76:39:49:A1:D8:64:79:67:77:7F:4D:75:C2:9B:C8:07:EC:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 59A8C99A867C0C4199274761AE799D03544E1A8D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62068.roa
Signing time: Wed 01 Apr 2026 22:11:52 +0000
ROA not before: Wed 01 Apr 2026 22:06:52 +0000
ROA not after: Wed 31 Mar 2027 22:11:52 +0000
asID: 62068
IP address blocks: 167.148.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a8:c9:9a:86:7c:0c:41:99:27:47:61:ae:79:9d:03:54:4e:1a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 22:06:52 2026 GMT
Not After : Mar 31 22:11:52 2027 GMT
Subject: CN=8410763949A1D8647967777F4D75C29BC807EC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:d3:14:70:99:c7:48:a5:30:a2:b5:4e:a5:
65:e4:d2:bc:cc:62:06:a9:2c:28:8b:e0:66:16:42:
7c:03:ba:60:c0:25:6f:bf:5a:3c:7a:8e:de:62:15:
70:57:ba:e9:81:07:d5:86:05:53:e3:f8:ba:ea:62:
e4:f1:93:8d:fb:b5:ad:b8:7f:6c:2d:13:8d:db:40:
b4:b8:8c:65:87:9b:c9:16:cb:c9:92:49:35:f8:7a:
99:5f:f1:9f:d5:fd:09:ad:c0:d7:1f:bb:96:af:04:
7d:6e:fe:ac:c2:dd:a1:28:e0:f8:4a:ee:90:4b:81:
90:0c:ea:6a:40:53:ab:30:6a:ef:cd:24:59:c9:d4:
89:c3:61:17:c2:60:19:2d:54:c2:54:f0:71:31:00:
a9:da:3b:89:2c:0b:ca:60:83:e8:ab:b5:9f:fc:0e:
a5:16:d5:d6:e2:93:3f:6c:e7:05:99:83:38:52:34:
ee:78:69:fc:9b:8e:6e:ba:b1:ec:66:5d:72:af:ae:
be:8d:4c:bb:a0:4d:49:36:f7:55:24:c9:7f:d5:f2:
68:a1:28:38:7a:90:91:4b:ca:62:37:ca:7b:de:68:
0b:0c:65:61:ca:be:fb:90:0c:e5:61:2a:83:7c:63:
fe:f4:b7:8b:c9:3d:f8:07:87:74:49:01:6a:4c:56:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:76:39:49:A1:D8:64:79:67:77:7F:4D:75:C2:9B:C8:07:EC:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:15:ee:d8:83:d4:7e:8c:c7:6c:63:82:e2:c3:66:9d:2f:8c:
22:ee:1e:63:5d:a1:eb:d9:b8:dc:99:94:96:ce:14:61:c5:67:
53:2b:a5:1a:f2:b0:e9:82:b5:b7:5c:61:a2:53:1f:dc:d3:bd:
0f:b6:a4:ee:a4:d5:d6:8a:3b:24:65:8f:69:e6:df:68:52:65:
5e:61:3b:e4:22:3e:0b:6a:99:27:73:37:03:d9:a8:fa:20:f4:
aa:d2:c4:af:af:5d:ca:c3:7d:2b:15:45:3a:5f:be:4e:22:8f:
1c:12:d4:90:d3:80:bf:20:2a:32:93:60:1d:53:2b:9e:af:9b:
7a:cd:32:95:93:84:fd:2e:38:45:bf:9d:c3:4f:b5:1c:97:b8:
6b:5d:fc:54:bb:78:7d:57:a2:e1:d9:25:aa:90:43:86:a3:85:
ff:e2:90:05:75:a3:88:1d:9a:7d:1b:44:fc:ff:f1:b4:cd:41:
5b:de:b6:a2:28:a7:bc:f4:d0:e4:68:d1:84:bb:f5:07:ba:dd:
f2:73:92:3f:d9:8e:7e:e0:c1:ed:5e:67:d5:5c:61:25:80:f3:
47:3f:71:11:51:e8:d5:be:83:eb:c4:f9:03:ee:af:fa:c1:6c:
04:d7:09:9e:31:2b:db:0e:fa:75:b1:e6:3c:67:0c:6c:b1:59:
02:ca:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:07 2026 by rpki-client