Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: XC7T/DrRdnlv4FkLlO2UXCceQ0P5uGRNdhodYzKOEtM=
Subject key identifier: C9:4E:08:9B:3F:CD:40:B9:E5:43:8E:D7:A9:E4:A7:C5:82:81:04:83
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0259F0AEA2D709C8A8B104CDEF33F44B9D711E4F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
Signing time: Tue 08 Sep 2026 06:48:29 +0000
ROA not before: Tue 08 Sep 2026 06:43:29 +0000
ROA not after: Tue 07 Sep 2027 06:48:29 +0000
asID: 62240
IP address blocks: 143.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:59:f0:ae:a2:d7:09:c8:a8:b1:04:cd:ef:33:f4:4b:9d:71:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 06:43:29 2026 GMT
Not After : Sep 7 06:48:29 2027 GMT
Subject: CN=C94E089B3FCD40B9E5438ED7A9E4A7C582810483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:ff:9b:5f:aa:3a:7d:74:f7:6e:31:72:63:
2e:b3:2a:c8:2b:69:f6:f2:9a:6c:87:90:bc:46:61:
77:d3:e8:cd:36:39:53:54:32:c5:e6:82:20:ad:39:
80:ae:96:f9:46:18:d3:a5:f7:7e:d9:80:50:0c:ec:
90:13:f6:fc:aa:90:90:d4:7f:84:84:14:f7:90:33:
c6:84:80:cb:20:d7:1f:4f:cd:89:e1:10:79:32:db:
58:17:5a:3b:7e:e0:5b:36:96:4f:5d:bd:ec:25:43:
2e:64:87:cc:33:fa:73:f6:78:33:08:5a:a5:5a:6a:
96:5c:ca:c1:a6:cf:9c:fc:92:d7:42:db:8e:2d:79:
bc:3e:de:17:3d:9e:78:15:dc:0c:ac:bf:df:dd:5d:
af:a2:02:71:72:34:eb:b0:37:3b:0c:c0:b3:24:8b:
93:95:cf:66:82:f7:30:df:ea:50:2e:9b:39:5f:60:
5f:bf:fb:ad:0a:05:5a:5c:02:52:0e:3a:db:d7:36:
bd:95:bc:f5:83:1f:36:e2:e7:fd:f8:89:80:38:76:
68:78:d5:16:5c:24:1e:88:ae:a3:60:24:c9:c4:6b:
48:53:ed:6d:06:cf:15:bc:12:bb:ae:1d:de:c5:aa:
00:d1:01:36:00:2c:ab:40:f6:f7:c3:e3:c5:5f:26:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:08:9B:3F:CD:40:B9:E5:43:8E:D7:A9:E4:A7:C5:82:81:04:83
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ec:67:01:e7:03:5f:eb:d9:dc:ce:01:6a:82:63:28:fc:bb:
79:d8:41:2c:5b:9d:95:3e:c6:56:ee:9d:82:d9:ed:aa:64:77:
b3:3b:a4:0d:c6:64:06:a4:da:f9:16:2e:96:ed:35:11:80:94:
85:35:be:fe:34:44:f8:a9:7f:19:b8:58:3f:f3:95:5c:59:fc:
c1:16:bb:fd:28:3a:92:ca:34:86:23:bc:46:18:a5:e6:b5:f4:
77:c8:30:e8:d2:fd:52:6d:d1:05:0f:9a:74:ff:36:00:aa:80:
f2:35:59:23:1e:db:9a:76:a7:8f:fa:b6:36:d3:84:6d:69:55:
86:46:a7:e6:bc:d8:b2:4c:d0:1f:da:af:f4:77:9d:19:c9:20:
4f:5e:d4:ac:23:60:8c:1f:5e:5c:1e:fd:5d:f3:be:94:69:49:
4c:cc:9c:f9:93:ac:3c:0c:10:ad:6b:bf:59:72:38:5f:d1:f2:
dd:47:e9:4d:59:99:da:fa:44:0a:dc:7e:41:ff:ab:a8:9f:07:
1e:47:67:f8:d1:bb:76:a9:22:32:0f:70:8d:88:38:9a:fd:1d:
55:ed:6c:dc:96:71:6b:df:b0:51:7d:e7:55:f4:44:31:30:ba:
42:e9:62:b4:5d:72:75:73:2b:7d:d3:b7:84:ae:2c:97:ad:b6:
d7:81:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:00:40 2026 by rpki-client