
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: rxi5DdFbHq7WMvYVmC8U68S3QDCnjrVw49U516zcBvg=
Subject key identifier: 65:1F:74:25:8E:2C:99:0A:0E:37:DF:FB:B8:1D:23:E6:AB:B5:72:03
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 2DFD2D13C43AB2263AC2C8C043EDA5B991B74693
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS62240.roa
Signing time: Fri 30 Oct 2026 22:53:35 +0000
ROA not before: Fri 30 Oct 2026 22:48:35 +0000
ROA not after: Fri 29 Oct 2027 22:53:35 +0000
asID: 62240
IP address blocks: 79.176.94.0/24 maxlen: 24
109.64.138.0/24 maxlen: 24
109.64.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fd:2d:13:c4:3a:b2:26:3a:c2:c8:c0:43:ed:a5:b9:91:b7:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 30 22:48:35 2026 GMT
Not After : Oct 29 22:53:35 2027 GMT
Subject: CN=651F74258E2C990A0E37DFFBB81D23E6ABB57203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8f:28:1e:85:c6:d4:49:05:99:32:3c:e6:97:
56:c9:e8:b5:d6:0e:ca:6c:52:5f:e2:8d:43:23:1b:
69:07:7b:7f:d6:3e:6d:ba:85:ec:4c:cf:1f:a0:6e:
8f:6f:51:96:c7:b3:b9:cd:30:07:bf:de:39:36:9e:
b6:b5:b3:95:01:c4:76:05:34:86:a6:53:77:09:4d:
c3:9a:cc:36:21:22:81:11:2d:b4:a7:fc:de:3f:f2:
64:ef:91:f4:ae:a7:0a:9b:d9:b9:24:b5:e8:37:b5:
10:41:eb:8d:1e:3c:eb:3b:44:47:04:11:90:ef:47:
b5:ca:63:c4:5a:79:46:4f:a6:98:62:e2:ba:80:18:
fb:6a:d9:14:32:a7:8a:b7:a1:a2:7f:95:55:42:3c:
59:00:42:63:69:b2:6a:9f:b2:ea:1e:88:b2:1b:51:
89:f9:3d:0d:56:c9:99:30:53:aa:de:45:23:74:1d:
97:23:d3:3e:44:a1:0f:8d:d5:1b:78:d2:f3:5c:44:
8d:74:7b:ca:cc:e7:2e:16:00:2c:5d:08:67:e2:a2:
27:52:d2:fd:7c:6b:63:5a:21:3f:03:b7:f9:cd:49:
51:94:c7:07:23:8c:c6:87:77:5a:b0:8e:12:fe:aa:
42:70:1d:74:73:f4:ef:51:85:ff:c1:4c:98:f1:fd:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:74:25:8E:2C:99:0A:0E:37:DF:FB:B8:1D:23:E6:AB:B5:72:03
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.94.0/24
109.64.138.0/24
109.64.143.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5e:43:42:f5:05:cc:94:23:5f:8b:26:c2:f1:52:91:8c:86:
5d:3e:3e:3a:28:1d:7f:f7:5a:29:d8:88:bd:ac:28:cd:7c:ad:
db:19:bc:2c:7b:85:3a:df:e2:b7:b6:ef:2c:b1:3c:a7:88:ac:
69:dd:20:d6:46:de:4f:0e:be:d2:38:32:15:9b:0d:98:5d:45:
45:d8:18:b1:ae:ba:1f:92:7a:e4:a3:83:9c:77:a6:c2:5d:c1:
f1:68:5f:f5:e2:3c:2b:2d:be:3a:8b:34:72:17:fb:e4:1b:19:
d0:58:40:6a:37:7d:66:16:73:56:e0:00:aa:a1:b9:42:41:12:
58:40:2b:b8:e7:ac:0e:4a:05:e7:f1:8c:fe:21:b8:46:e8:13:
90:2d:e4:62:19:19:3c:65:4c:be:79:b8:55:87:fb:5e:1d:f7:
a7:28:18:46:eb:44:de:d4:2a:90:4b:19:c1:0f:21:6d:4e:5a:
5d:8f:b0:5b:ef:b8:57:ba:55:a9:88:a7:7d:7f:f1:9e:e2:d4:
81:c1:6b:df:b9:c0:fe:41:c9:b5:6a:22:d7:21:74:fe:3e:79:
9f:62:6c:1a:04:2d:65:6c:98:72:68:64:0f:6d:d2:71:27:32:
65:ae:78:42:d7:e3:07:bc:6b:d4:48:91:c0:1b:32:5d:3e:b5:
da:c7:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:59:39 2026 by rpki-client