Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62217.roa
File: AS62217.roa (raw, json)
Hash identifier: KbYqCTeYgrt7oE/1aeLKoMKafH7Grsdfa6Wn8neYQeg=
Subject key identifier: 21:44:74:01:D4:DC:57:7D:5E:41:76:AE:4F:DB:E0:FB:89:AE:8A:61
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 571FB66418B5506C4A4C1E30BF8A5F8BA9F6DAE1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62217.roa
Signing time: Wed 16 Sep 2026 08:49:35 +0000
ROA not before: Wed 16 Sep 2026 08:44:35 +0000
ROA not after: Wed 15 Sep 2027 08:49:35 +0000
asID: 62217
IP address blocks: 82.22.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1f:b6:64:18:b5:50:6c:4a:4c:1e:30:bf:8a:5f:8b:a9:f6:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 16 08:44:35 2026 GMT
Not After : Sep 15 08:49:35 2027 GMT
Subject: CN=21447401D4DC577D5E4176AE4FDBE0FB89AE8A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:23:5b:fc:b4:76:29:9e:bb:b7:62:d6:6a:
5b:95:ef:47:de:86:65:8b:f4:22:7e:3b:39:02:e5:
7d:fb:01:03:95:9a:a5:38:32:0f:cc:f5:6b:66:14:
32:d5:7f:f0:0f:19:8d:4d:45:07:18:bc:94:25:cb:
8f:5b:1e:86:4a:ed:0a:f7:d7:0f:28:12:9c:42:20:
4a:2f:e8:1c:d2:18:b6:63:d5:5e:b3:5d:37:43:95:
51:15:b1:09:ec:0b:26:57:23:ab:55:9d:53:8b:ee:
3b:b2:9a:36:17:5b:5b:1b:e7:ef:d0:5e:d3:c8:e8:
a0:b0:af:6e:fa:0d:50:b4:2c:12:b0:86:95:01:3a:
4b:14:e0:16:63:7e:f5:84:c4:eb:92:b4:53:ea:f2:
3f:90:71:4e:99:d7:a3:d0:f9:bb:b0:b0:35:03:7a:
bd:70:b2:25:e4:58:c6:e1:1d:af:1a:9d:cb:b6:b1:
eb:37:d2:3a:3b:54:b9:78:12:99:7b:35:4e:b2:bb:
c5:53:07:cd:61:97:12:a8:26:7b:16:1b:49:9b:34:
c2:1e:4f:b5:12:e6:42:13:5f:dc:1a:14:75:43:00:
c3:3a:87:03:cd:95:11:c8:1b:00:ca:c8:8d:20:b6:
0f:04:2c:1f:4e:ed:ae:f1:24:ee:4e:b6:4f:76:c5:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:74:01:D4:DC:57:7D:5E:41:76:AE:4F:DB:E0:FB:89:AE:8A:61
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b0:de:4a:e6:41:84:0d:ab:af:13:48:4a:1a:13:25:5f:77:
4f:7d:38:b9:49:52:52:3f:35:94:7b:c3:a0:16:61:b2:68:53:
5f:db:bc:07:c2:49:12:b5:f9:c7:e5:d8:db:05:29:32:15:21:
36:e4:a8:a6:72:07:00:d8:2f:f3:d1:6e:5b:66:a1:2a:b8:86:
19:a6:82:9d:52:c9:dd:e9:b1:5e:4a:47:8f:7f:b6:94:2e:50:
97:d4:fb:8c:c7:51:dd:6b:f6:0d:94:bc:73:81:ff:09:e7:f6:
e5:fc:ec:86:5d:71:18:b1:27:f2:d0:83:52:da:8a:61:d8:84:
24:63:88:60:d8:7b:3c:d5:f9:38:5c:49:9a:37:4e:46:09:34:
02:f3:be:60:ec:80:5a:54:35:76:32:fb:31:ea:06:45:c4:8c:
ee:61:66:1e:af:77:0c:fb:07:0d:33:ec:8c:26:83:c6:a6:ec:
51:8c:a5:c8:96:2e:cf:6d:74:63:3c:40:a6:96:32:9f:61:f4:
44:3e:06:e6:c1:63:d8:64:ae:28:9f:4b:f1:6f:a1:91:b7:69:
c0:07:b7:98:6d:e8:60:c9:7d:97:24:13:94:bd:8a:9c:e7:00:
e0:65:1c:fb:49:57:b1:78:71:b0:00:fe:50:80:65:3d:f2:d1:
a0:4d:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:44:55 2026 by rpki-client