Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: Mz0kpLbrgxgH3W1FgsbRK4x/tRxg9MYfL0Wg3vYSU3I=
Subject key identifier: 01:86:AE:A8:6D:96:C9:15:3B:0F:D3:F2:FC:80:AE:30:53:FC:54:BE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 391602DE410D4F7E61DF938B528C1DF82061198E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
Signing time: Fri 20 Feb 2026 08:08:15 +0000
ROA not before: Fri 20 Feb 2026 08:03:15 +0000
ROA not after: Fri 19 Feb 2027 08:08:15 +0000
asID: 62240
IP address blocks: 82.27.93.0/24 maxlen: 24
82.39.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:16:02:de:41:0d:4f:7e:61:df:93:8b:52:8c:1d:f8:20:61:19:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 20 08:03:15 2026 GMT
Not After : Feb 19 08:08:15 2027 GMT
Subject: CN=0186AEA86D96C9153B0FD3F2FC80AE3053FC54BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:a0:33:c4:f6:d7:6a:73:b0:d2:1d:5f:60:
95:9b:65:d0:e1:a6:ac:de:98:ba:10:e9:6c:68:48:
15:52:2d:ba:61:8e:c2:de:57:05:2b:72:2f:98:47:
bd:af:05:86:4d:da:c0:31:5c:11:93:0b:b2:38:99:
c3:5a:48:89:57:b5:19:61:e4:c9:58:1d:12:1a:13:
e7:17:23:2c:9c:46:64:d2:37:a3:f9:59:47:04:9a:
1b:c7:be:ee:b2:23:12:75:de:ee:2a:a7:97:17:56:
db:67:c7:e7:d6:fb:77:4a:2c:fb:c6:6f:50:05:1e:
c1:3a:85:78:f9:40:f7:d8:fb:7c:0a:cb:4f:69:d4:
2e:ca:55:4e:2e:12:89:f8:0d:a7:d2:f5:57:26:36:
09:05:29:23:eb:45:89:bd:1f:b3:cc:09:07:6c:86:
fe:6f:20:7f:a1:e8:fb:fd:90:55:ad:dc:75:7a:b1:
60:17:70:c3:21:90:f7:e2:d5:2f:54:20:13:f8:d3:
d8:ea:f5:cc:83:57:c5:cd:96:fb:a0:f9:19:d0:1c:
d0:3d:bf:41:89:27:58:f5:bd:38:0d:94:64:20:c5:
9b:0e:c5:ce:d4:74:0e:d9:5d:e5:f1:49:50:1a:64:
8a:c7:f4:f8:bc:84:77:79:ea:1b:23:b4:ed:0d:4c:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:AE:A8:6D:96:C9:15:3B:0F:D3:F2:FC:80:AE:30:53:FC:54:BE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.93.0/24
82.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bd:5f:4b:74:45:17:54:f7:6c:72:3a:39:2c:5c:47:98:10:
10:6e:cc:9d:76:cb:67:97:50:84:e8:4b:46:23:cd:d8:6c:be:
61:1d:46:ba:01:d0:f3:b4:ba:0e:72:d1:b3:20:d8:26:12:63:
39:f8:b7:1b:9f:3a:2e:b8:e4:3b:cc:d8:bb:d6:1e:27:c7:1e:
57:eb:2f:5d:a7:3e:23:d6:12:b7:43:df:2c:04:cb:b8:dc:2f:
16:88:67:65:95:51:d6:95:01:d5:65:33:c0:28:9a:a5:20:8b:
98:a9:9a:2e:72:99:68:36:52:f3:f5:94:78:5d:43:5a:b2:11:
18:82:b3:22:fd:60:54:5c:84:fa:49:13:49:b1:53:74:b1:56:
48:d7:b6:a3:16:62:bd:b9:67:4d:d6:ba:6f:2f:7b:4d:81:3d:
15:ee:35:c4:dd:ce:16:8b:12:cc:5b:d1:0a:78:41:ed:2e:a8:
aa:75:7d:b5:30:fc:1b:25:31:0c:1b:c9:af:d8:f6:3b:9a:c7:
57:cd:1c:f9:d6:19:47:de:17:cf:29:91:89:7e:86:31:bd:24:
6c:03:5d:a7:74:77:01:80:e7:e8:d4:16:1f:94:e2:7a:67:ea:
34:37:33:de:34:a3:54:51:a6:71:5f:2b:3d:30:82:10:8e:6f:
da:68:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:51 2026 by rpki-client