Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6762.roa
File: AS6762.roa (raw, json)
Hash identifier: zYZZ84AtJluyAOvfMabLQ6cJfoenuNYFBxOX2tUSiyE=
Subject key identifier: 7C:61:38:58:81:3F:1F:E0:3D:71:BF:4E:26:7C:16:62:84:25:C6:2A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04CB3B52A7DD89C0DB358876DEF240FB268005BE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6762.roa
Signing time: Mon 23 Feb 2026 12:55:39 +0000
ROA not before: Mon 23 Feb 2026 12:50:39 +0000
ROA not after: Mon 22 Feb 2027 12:55:39 +0000
asID: 6762
IP address blocks: 96.62.128.0/24 maxlen: 24
96.62.129.0/24 maxlen: 24
96.62.130.0/24 maxlen: 24
96.62.148.0/24 maxlen: 24
96.62.180.0/24 maxlen: 24
96.62.181.0/24 maxlen: 24
96.62.182.0/24 maxlen: 24
96.62.185.0/24 maxlen: 24
96.62.186.0/24 maxlen: 24
96.62.187.0/24 maxlen: 24
96.62.192.0/24 maxlen: 24
140.233.168.0/24 maxlen: 24
140.233.169.0/24 maxlen: 24
140.233.170.0/24 maxlen: 24
147.79.5.0/24 maxlen: 24
147.79.22.0/24 maxlen: 24
150.241.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cb:3b:52:a7:dd:89:c0:db:35:88:76:de:f2:40:fb:26:80:05:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 23 12:50:39 2026 GMT
Not After : Feb 22 12:55:39 2027 GMT
Subject: CN=7C613858813F1FE03D71BF4E267C16628425C62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:16:86:0c:c7:4d:1f:90:17:6c:fe:0e:2a:
ad:65:b9:f8:e0:34:ed:82:9b:df:05:b9:bf:d3:69:
33:05:5d:18:20:04:17:75:ab:0e:9d:ea:9c:1e:ca:
6b:59:63:40:02:26:87:68:5d:29:27:05:76:84:5e:
66:22:51:da:c3:3e:46:89:0e:2a:bd:4e:29:42:83:
78:76:8b:45:93:f6:29:e7:b9:bf:c4:67:13:d5:09:
57:88:80:b6:9e:08:6b:f5:34:5e:7b:16:56:25:d7:
b9:a6:15:07:0a:d7:d1:6d:a9:5d:d4:00:b6:3f:43:
c3:ff:64:ba:59:e1:5a:f3:7d:82:7d:c0:bd:77:08:
8e:f9:b5:3e:6a:4e:8c:c3:c0:24:fa:33:10:94:76:
56:a8:5b:48:dc:ce:d8:0b:4d:3d:7f:18:ad:5e:a6:
8d:83:69:41:6d:a6:b0:0e:19:dd:6a:09:c9:f8:6b:
41:ac:ac:a2:02:30:b9:7f:7c:04:e0:d1:e2:c4:75:
e1:29:4d:80:46:dd:ed:6d:43:aa:27:8a:92:87:7a:
d5:00:00:ab:b1:ac:18:bb:f1:25:e9:41:b0:f8:05:
ea:78:84:d7:3b:01:e9:55:5b:b9:92:6a:3a:9f:d8:
92:ff:23:50:c3:f8:df:ea:7b:3f:3d:91:bf:c6:f6:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:38:58:81:3F:1F:E0:3D:71:BF:4E:26:7C:16:62:84:25:C6:2A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.128.0-96.62.130.255
96.62.148.0/24
96.62.180.0-96.62.182.255
96.62.185.0-96.62.187.255
96.62.192.0/24
140.233.168.0-140.233.170.255
147.79.5.0/24
147.79.22.0/24
150.241.248.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:fd:6e:a5:3d:db:2d:25:09:82:9c:d0:98:b0:c0:90:29:
a2:8b:e9:be:4b:67:76:62:85:7b:b7:ed:75:36:b5:0e:54:ca:
a3:89:52:d6:6f:65:52:b7:52:d1:2d:fb:d7:6f:8b:e0:11:ff:
1b:be:ee:c1:35:c5:bd:68:22:f5:13:45:2c:14:ad:47:8c:9e:
f7:c7:ea:61:2d:19:bc:d0:3d:e0:26:b1:9e:db:f1:4a:d5:e3:
22:b4:96:52:5d:cb:5f:08:80:a4:b0:c6:11:fc:a4:04:c2:c1:
a0:76:b2:4f:8b:ce:1f:10:87:a5:50:91:2f:5f:70:a1:07:aa:
7d:8a:1e:9c:12:72:dd:df:9e:94:8f:03:59:ff:3c:ab:34:51:
d9:b7:e0:19:20:55:3e:62:61:7b:05:d7:b7:29:80:17:0b:f9:
8e:ba:20:3c:db:40:6f:92:0b:a1:44:74:70:fd:33:ae:b7:6f:
2c:bb:fc:54:ca:ca:7c:46:e7:25:24:47:63:3e:85:97:54:19:
11:c0:69:3b:67:bd:77:c2:86:09:6a:dc:c0:ed:80:db:42:b4:
9d:79:70:ec:f2:76:8d:4a:64:47:fc:1f:a9:9d:eb:fd:96:b7:
77:7e:22:f8:69:25:5e:26:ad:a0:f8:a8:e3:a9:12:b5:80:eb:
f6:b4:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:28 2026 by rpki-client