Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
File: AS62610.roa (raw, json)
Hash identifier: 6mep9AY1iu9nFTZ4G4v9GxQOHMRS69kKaZv6oCiyIIg=
Subject key identifier: 58:19:BA:56:85:E4:27:DB:7F:88:69:19:FA:42:B2:FD:DF:99:49:41
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 18C5A45BDAFC15B1BFB6EE67433B8C91CD502672
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
Signing time: Thu 30 Oct 2025 07:07:53 +0000
ROA not before: Thu 30 Oct 2025 07:02:53 +0000
ROA not after: Thu 29 Oct 2026 07:07:53 +0000
asID: 62610
IP address blocks: 143.14.254.0/24 maxlen: 24
167.148.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c5:a4:5b:da:fc:15:b1:bf:b6:ee:67:43:3b:8c:91:cd:50:26:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 30 07:02:53 2025 GMT
Not After : Oct 29 07:07:53 2026 GMT
Subject: CN=5819BA5685E427DB7F886919FA42B2FDDF994941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:de:f3:50:5e:77:d3:ba:43:ce:93:9d:28:
1e:9c:e6:cc:90:33:2b:2b:ca:10:22:b7:0a:7c:78:
1e:32:ef:f3:fb:70:4f:7e:85:41:60:29:4e:94:a4:
57:72:bd:3c:c1:51:1f:8a:93:eb:26:68:30:af:b7:
19:86:ba:0c:65:95:62:7a:c8:73:92:98:be:41:92:
d9:96:23:c0:6b:f4:5b:7e:a3:32:87:a0:f2:21:14:
e6:0e:aa:86:53:1a:e4:a0:81:6f:ad:dd:61:28:c7:
74:9f:a8:27:d8:56:5e:9b:57:4d:25:bb:df:10:35:
c1:aa:67:67:f6:47:a8:78:1e:9f:a7:e1:ef:d1:f6:
76:77:88:c0:3d:1a:e9:63:e0:d9:65:1b:25:3d:57:
b1:c6:8c:9b:ae:72:64:92:d9:bb:b4:14:3e:81:00:
23:18:8d:99:11:7f:a3:38:3b:71:ac:38:b0:3a:80:
a4:cf:7c:4b:d6:33:7b:8e:1d:26:97:4e:72:05:97:
15:fa:15:07:fe:9e:55:06:7e:49:2e:7f:6f:6f:a6:
fb:c1:7a:55:fc:9b:7e:31:2e:b2:e8:32:bd:54:f4:
7b:88:22:59:4c:96:ea:b2:55:3f:00:79:77:4a:85:
0c:11:67:4d:40:6b:59:58:28:b9:57:1f:8f:6a:9a:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:BA:56:85:E4:27:DB:7F:88:69:19:FA:42:B2:FD:DF:99:49:41
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.254.0/24
167.148.154.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fc:68:78:99:fd:3c:6b:22:b1:ad:02:c4:70:12:d5:d0:c2:
02:6c:f7:7a:c6:c0:d1:48:13:77:34:39:15:71:cb:86:16:ec:
9b:9d:00:f1:7a:84:a5:fb:8b:a2:e5:b5:55:2e:81:9c:c7:41:
71:ab:4e:c4:c9:a1:93:3a:f9:8c:53:1d:ae:5c:6e:88:19:a6:
8e:53:61:6f:45:ce:ae:c0:0c:49:ca:c5:6a:72:9c:24:fa:77:
53:fb:59:fa:ae:47:68:97:9f:12:97:04:a0:80:31:16:41:ff:
3f:77:f5:78:1f:c1:40:a3:d9:dc:28:3c:4d:01:9d:2a:3e:59:
0e:c4:b4:9a:4f:95:c3:3b:3b:84:e8:ee:77:53:74:7b:d7:f6:
48:c6:ad:b9:0a:66:c0:4c:33:3d:d9:07:55:4a:53:c5:8f:be:
d8:94:48:df:f2:6b:50:9e:e7:68:2f:83:0f:cf:c1:22:6f:ca:
b0:2c:96:e0:86:e1:66:61:b5:f3:05:ff:fd:0a:9b:84:87:af:
0f:fc:d8:fc:0d:b3:95:ea:d1:63:d0:f3:bc:ab:43:e8:0c:50:
b4:de:f5:49:51:39:af:f9:5a:01:82:6b:e6:c6:4e:56:c7:e0:
0e:e8:6e:fe:92:60:13:fc:b4:bd:f3:67:ea:b9:36:6d:f7:c7:
c9:cf:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:19 2025 by rpki-client