Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
File: AS62610.roa (raw, json)
Hash identifier: 5E86MurvPESiXHPdsObELQe8f9Dav6Njb6oRDrD+UFc=
Subject key identifier: 9A:75:68:F1:25:E6:C5:3F:FC:61:2A:9A:6C:F4:8D:F1:45:74:06:DC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 614DDD8787BB52D68AD31C6C8738F8CD763C6DA7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
Signing time: Sat 07 Feb 2026 07:17:37 +0000
ROA not before: Sat 07 Feb 2026 07:12:37 +0000
ROA not after: Sat 06 Feb 2027 07:17:37 +0000
asID: 62610
IP address blocks: 167.148.120.0/23 maxlen: 23
167.148.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4d:dd:87:87:bb:52:d6:8a:d3:1c:6c:87:38:f8:cd:76:3c:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 07:12:37 2026 GMT
Not After : Feb 6 07:17:37 2027 GMT
Subject: CN=9A7568F125E6C53FFC612A9A6CF48DF1457406DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:86:b3:05:c6:6f:bd:b1:1a:6c:44:b5:3c:
f9:83:c7:f4:0a:00:ac:c7:9d:f8:65:87:30:b7:75:
58:3f:f5:9c:55:c6:b3:7f:1a:e4:fb:42:e0:92:87:
a9:77:11:96:5d:84:9f:9c:7a:24:f8:68:c8:24:9e:
d2:48:1f:49:18:42:6d:ae:e3:e0:f4:74:e9:94:5d:
d6:e4:12:a0:8b:00:ff:b0:21:bc:e4:0b:88:62:32:
5b:22:38:87:f4:75:31:ee:18:64:29:6d:c1:21:60:
9a:69:42:6d:ba:ba:5a:51:dd:12:08:f4:d0:9a:30:
c8:62:94:2e:4d:71:c1:48:7f:71:f6:6d:2a:3a:e4:
d5:31:39:c0:82:c2:11:ab:13:ec:6d:d0:04:c1:66:
f3:fe:28:a5:59:1a:83:19:d1:05:05:f2:ec:71:f5:
da:a9:12:f1:53:dc:71:e8:c4:78:35:ce:ed:47:63:
71:e2:7e:70:f4:16:77:75:73:0a:c3:2a:16:91:f2:
9b:78:ba:56:b0:be:33:2b:ea:54:da:1c:4f:53:fc:
ab:bf:1e:ab:af:5c:61:89:c9:4d:24:fa:c0:ad:3b:
10:9f:49:81:e0:ff:13:f3:a3:3e:ad:e0:c3:e1:f8:
86:37:d5:48:7b:f7:40:13:71:10:95:6a:75:03:dc:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:68:F1:25:E6:C5:3F:FC:61:2A:9A:6C:F4:8D:F1:45:74:06:DC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.120.0/23
167.148.169.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d6:97:22:fb:35:4b:8c:71:00:dd:60:2c:25:26:2c:04:62:
e8:6c:11:7e:25:2a:fa:fb:3f:ce:61:30:bc:a6:6e:a6:ed:bb:
8f:40:ea:bf:79:42:90:f1:5b:a6:f1:34:ab:c6:e3:e8:a3:fc:
c3:68:48:d8:b8:7d:5e:92:76:60:69:5a:63:e0:de:9a:f3:0d:
03:b0:d0:99:38:fa:d5:46:60:84:6a:66:51:64:43:bf:30:12:
06:bb:b1:95:d9:d0:99:39:db:71:81:a0:e3:a5:91:03:a9:e1:
88:03:ba:bf:c0:85:1b:5d:08:5c:54:9b:10:0b:ea:21:ae:bd:
a2:b5:92:ed:10:5d:cd:3b:a4:cc:1b:8f:da:1f:62:c8:cd:9b:
2c:bc:ee:b9:64:01:a6:31:b4:7f:08:7c:9a:32:d6:10:63:60:
f4:93:8e:f7:bd:fc:da:24:28:07:f2:89:89:85:51:53:50:ac:
e0:ac:e0:ed:26:73:4d:77:1c:64:ab:d5:f4:78:2d:77:9f:9e:
7d:58:93:87:19:9e:7a:3b:f7:3b:6a:c9:0a:1d:b9:05:ee:7b:
d6:5f:23:2b:3b:e9:ed:36:f5:41:92:30:a5:fc:ef:2a:ba:40:
25:70:ca:3f:e8:0d:d9:5e:74:69:eb:49:e6:cf:00:c3:d9:32:
c6:7e:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:06:24 2026 by rpki-client