Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: ieXvQFauphwRL3Uo5B7oms8l4+p5AKIWE2JVWsbz1DE=
Subject key identifier: F4:9A:37:98:B9:2C:E3:FD:69:20:E9:F7:FF:46:0C:34:77:5B:A5:5A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4B946844E4D12D26A3651DE93777FB764B76F13A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
Signing time: Sat 28 Mar 2026 04:41:05 +0000
ROA not before: Sat 28 Mar 2026 04:36:05 +0000
ROA not after: Sat 27 Mar 2027 04:41:05 +0000
asID: 62240
IP address blocks: 82.27.93.0/24 maxlen: 24
82.38.112.0/22 maxlen: 22
82.39.110.0/24 maxlen: 24
178.83.44.0/22 maxlen: 22
178.83.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:94:68:44:e4:d1:2d:26:a3:65:1d:e9:37:77:fb:76:4b:76:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 28 04:36:05 2026 GMT
Not After : Mar 27 04:41:05 2027 GMT
Subject: CN=F49A3798B92CE3FD6920E9F7FF460C34775BA55A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:60:1a:29:ee:af:ac:d1:68:44:26:26:00:
b3:c7:eb:82:a9:68:31:e3:3d:67:33:3a:97:2d:4c:
59:e5:ad:40:3c:7b:0c:a8:a6:15:d2:90:02:22:1e:
b0:78:11:bb:8a:c8:4f:71:90:ee:2c:3a:85:9b:bc:
a9:2c:4f:57:33:78:4b:2a:3c:ee:06:9d:dc:b8:61:
3e:2b:b4:79:19:9d:15:d7:c2:ff:2b:9b:6b:88:60:
41:70:18:b7:47:0e:93:4c:0c:70:7a:4e:96:6a:84:
55:6a:76:c2:9c:2f:6b:f4:0b:61:f2:c2:34:5a:bd:
92:88:f6:5d:f5:b6:f7:e7:f8:bf:55:fb:92:a9:70:
9a:fd:64:b9:cc:27:17:e4:bf:52:5a:ee:b7:53:66:
07:ab:03:c4:f9:3d:26:72:86:7b:72:f4:eb:25:3b:
43:4f:05:2b:1e:f5:3f:cb:c0:d7:83:9f:8d:3a:cb:
f4:98:cb:4b:16:42:1c:87:56:4a:5d:aa:55:8e:fe:
56:82:f2:b5:95:24:39:63:6b:2f:12:9a:d3:21:41:
58:92:93:46:26:2d:b2:21:37:fd:f0:b3:c1:41:78:
2d:c0:85:f5:40:47:25:0f:80:de:64:47:7a:54:71:
48:18:c2:46:c7:69:47:96:24:07:1c:68:60:dd:99:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:37:98:B9:2C:E3:FD:69:20:E9:F7:FF:46:0C:34:77:5B:A5:5A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.93.0/24
82.38.112.0/22
82.39.110.0/24
178.83.44.0/22
178.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
86:18:ca:41:3c:70:76:9e:e6:d9:77:36:99:af:f0:c7:7f:3d:
8e:f8:03:90:fd:87:59:74:36:51:1c:2a:b6:e2:48:3c:de:1b:
13:04:48:4e:5d:03:e4:60:c8:7e:d4:d9:c5:38:d0:58:4c:41:
e0:de:db:e8:1a:c5:11:1c:fe:08:12:42:c5:77:a2:6c:d1:5a:
46:0e:04:55:38:13:f4:38:ca:bd:99:0a:3d:1e:6d:e3:9d:66:
83:83:ab:0c:a7:1e:0a:da:be:12:fc:75:65:44:25:93:02:9d:
40:46:d7:2d:77:f1:88:1d:e1:06:f7:57:3e:54:f3:f3:1b:19:
fe:6f:dc:bc:de:85:c5:24:d7:c6:e5:77:42:85:19:38:af:22:
b1:d0:e5:b7:d8:5c:5c:77:9e:10:85:79:16:32:d7:20:7f:85:
4e:1e:99:d2:c7:31:27:a2:22:33:2a:7f:5b:77:f6:5c:b5:7b:
d7:e8:e1:19:cd:ea:f2:1e:78:aa:a8:9b:50:60:0b:18:9f:1f:
74:46:c2:5b:f0:65:4a:6d:79:92:99:bb:b0:e3:dc:86:9a:d5:
c2:cf:e3:3c:52:02:ac:29:83:16:45:f4:9f:5d:87:26:ff:c7:
09:2c:27:7a:5c:e3:36:db:9d:a7:23:81:9d:3e:c9:a9:a1:25:
02:32:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:09:18 2026 by rpki-client