Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: 2DFZEu0kCTw+2+wk70ZOcyrolqzkw+7Bo5PlAKh8HwE=
Subject key identifier: BA:0D:1C:73:14:C4:DD:5D:8A:21:53:75:4B:3D:3A:BF:95:10:32:13
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2150F22FC12817B8EF56FAEA59FC666413A34926
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62240.roa
Signing time: Fri 28 Aug 2026 06:55:26 +0000
ROA not before: Fri 28 Aug 2026 06:50:26 +0000
ROA not after: Fri 27 Aug 2027 06:55:26 +0000
asID: 62240
IP address blocks: 5.181.125.0/24 maxlen: 24
45.89.242.0/24 maxlen: 24
45.137.126.0/24 maxlen: 24
191.96.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:f2:2f:c1:28:17:b8:ef:56:fa:ea:59:fc:66:64:13:a3:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 28 06:50:26 2026 GMT
Not After : Aug 27 06:55:26 2027 GMT
Subject: CN=BA0D1C7314C4DD5D8A2153754B3D3ABF95103213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:b5:47:3f:9f:09:5e:9e:8b:98:b7:44:8c:
b8:cc:6b:bb:fd:34:c2:cb:b4:4e:8d:5b:07:bd:c3:
2c:e7:f6:33:ad:90:62:7e:f2:c6:4a:f3:c3:a4:f2:
21:d7:51:13:a5:2c:14:56:3b:89:3b:85:17:47:b8:
f4:f4:bd:16:57:c2:b9:4e:0c:81:37:c9:ba:b2:86:
f5:6e:af:ef:c9:69:05:80:fe:56:c7:5a:ed:b3:38:
19:88:65:44:cc:a6:65:c8:be:8d:6d:ec:ad:bb:f6:
51:5a:8b:29:b1:fe:df:c1:fe:54:5e:69:ca:2c:14:
fd:9b:a4:39:d6:fe:73:79:51:58:c7:e7:1e:75:53:
a4:eb:ae:e5:12:1c:94:1c:d0:4a:b9:df:40:c9:15:
01:29:e0:a5:ed:ec:6d:c5:76:52:93:ab:e2:97:1a:
a4:14:12:9b:f9:ec:c1:4c:03:dd:93:df:e6:7f:9f:
14:e6:ee:12:14:3b:c9:22:46:02:28:05:21:d3:cc:
d3:b7:d1:79:65:b5:4d:b2:88:e8:da:4d:6a:d7:8a:
8e:fd:39:6d:e1:83:93:9a:36:25:c4:7e:0a:c3:65:
71:89:93:de:30:27:e1:09:05:e5:ab:a1:7b:41:64:
74:b9:78:c6:bd:26:bb:c2:84:50:be:c8:35:c1:db:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:1C:73:14:C4:DD:5D:8A:21:53:75:4B:3D:3A:BF:95:10:32:13
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.125.0/24
45.89.242.0/24
45.137.126.0/24
191.96.230.0/24
Signature Algorithm: sha256WithRSAEncryption
13:95:9a:af:0a:27:a7:f8:b9:c7:4a:d5:aa:66:70:51:7b:36:
14:5a:49:ee:7d:60:fa:cd:e8:76:94:9e:56:1e:18:3e:8b:e8:
96:7d:ce:db:02:f1:a7:02:82:f5:7e:33:80:53:3e:d1:17:9c:
6c:d3:60:27:79:52:6b:cc:dd:a0:dc:6d:3d:ce:14:f8:9f:77:
e5:85:90:60:31:f6:6d:77:81:0b:3c:22:3c:8f:dd:d2:25:d9:
18:55:8c:e7:4d:fb:0e:de:13:d6:d1:26:55:a9:ba:a9:91:92:
7b:11:43:a0:1c:25:b5:a2:f9:5e:3d:19:c0:5a:00:6a:6f:e2:
3c:db:d6:16:2e:4f:fa:24:5f:78:62:79:de:d9:43:68:1d:08:
aa:b3:61:b9:6c:9c:11:71:74:a7:e0:69:b0:24:e9:69:73:87:
27:a4:70:8f:f5:e7:ba:b5:1b:ac:29:18:89:6e:52:02:78:97:
2f:3b:24:ff:04:d1:66:a7:73:08:34:f8:41:c2:7b:d3:28:3e:
7f:64:5a:bf:40:98:c2:de:d7:a0:61:2f:99:2b:5e:49:52:92:
25:2e:a3:40:40:7c:86:f2:06:15:a9:fa:37:fc:7a:8e:c3:71:
db:76:b1:cc:eb:db:7c:b5:bc:e4:46:35:2e:52:a7:be:4a:43:
a0:d1:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:19:16 2026 by rpki-client