Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
File: AS62390.roa (raw, json)
Hash identifier: v+HJrRVHaS4hU52sT1RaxFOcQG1VEj9SpbgP9NsIdqI=
Subject key identifier: 5F:B9:9E:DD:80:E4:FF:B5:35:4F:30:59:99:40:81:66:4B:6A:48:48
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0789BE3747F2F00EDCC275494609CBEB5348F903
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
Signing time: Sat 31 Jan 2026 21:53:38 +0000
ROA not before: Sat 31 Jan 2026 21:48:38 +0000
ROA not after: Sat 30 Jan 2027 21:53:38 +0000
asID: 62390
IP address blocks: 82.29.112.0/24 maxlen: 24
82.41.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:89:be:37:47:f2:f0:0e:dc:c2:75:49:46:09:cb:eb:53:48:f9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 31 21:48:38 2026 GMT
Not After : Jan 30 21:53:38 2027 GMT
Subject: CN=5FB99EDD80E4FFB5354F3059994081664B6A4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:fd:1d:b7:3b:65:11:16:a5:77:57:be:1c:
83:27:f5:35:1f:63:b3:3e:b4:3e:65:2e:84:73:8e:
ba:3b:37:98:d0:94:40:97:21:6f:d0:cf:3c:3f:13:
8e:57:05:c4:36:92:75:42:26:91:20:c6:40:f0:52:
f9:c7:24:94:b8:e0:30:14:24:da:e9:4b:99:73:e0:
54:6b:c6:e0:7a:fc:46:74:62:24:44:ec:11:76:df:
36:69:4f:d1:51:79:65:ab:f0:03:f1:c0:a6:e5:d2:
7b:f0:6b:87:32:7f:68:b9:20:16:01:3c:f3:9f:f0:
06:ca:6c:1c:51:86:9b:6b:ba:cf:a6:34:2b:04:fa:
24:01:5a:9f:99:c2:bb:19:4a:ef:88:1e:db:7d:a4:
6c:87:5b:34:fe:e6:05:fc:d5:99:8d:82:31:40:44:
ca:11:ba:03:6a:cb:9d:d7:f8:e7:61:f4:4a:40:cc:
e1:2c:db:10:7b:ae:79:08:a1:00:b3:d9:09:17:4b:
02:42:ea:40:67:f4:d3:3a:64:54:35:d1:14:4f:dd:
30:14:c9:26:bc:7c:11:ef:84:fa:ff:5e:dd:2e:67:
f0:b0:9a:e2:a8:03:e2:16:ce:69:c8:03:cc:d3:d5:
fc:6e:9a:e2:ae:1a:af:98:5f:45:71:58:f5:92:73:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:9E:DD:80:E4:FF:B5:35:4F:30:59:99:40:81:66:4B:6A:48:48
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.112.0/24
82.41.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6f:4b:53:15:3e:d6:a2:ca:60:18:09:ab:1d:b5:7f:9a:08:
15:0b:1c:e2:d3:2c:48:c5:05:49:f5:f1:e9:32:16:d9:30:d0:
73:64:06:d5:b4:51:e5:ed:eb:b8:ac:af:34:ae:47:99:6a:7d:
53:2b:03:ed:b1:a7:ab:f3:57:95:7a:5a:a0:48:1a:07:07:24:
f7:4a:63:de:8d:54:ec:1b:b3:5b:66:95:bc:ce:34:ed:7d:02:
f8:a7:4b:1d:18:d8:80:4a:ab:75:5a:5b:c6:b3:66:30:2f:c5:
3a:70:44:f5:b5:ae:a7:9e:52:ce:9f:77:19:0d:7c:46:53:a4:
b1:ba:4e:e9:45:2f:ec:6b:19:f5:ac:17:3d:76:4a:79:35:9d:
5e:87:d7:b8:73:87:d2:13:18:51:72:6d:e8:1d:20:65:dc:2e:
69:5b:c8:9e:d2:0b:66:a8:68:c3:25:4d:52:b0:9d:2a:b1:1f:
1f:ee:cd:86:9a:79:52:9f:50:e7:d7:c9:04:b6:87:06:55:15:
66:9d:ef:81:2e:32:c8:b7:b7:08:07:b9:13:d6:5c:42:a7:e7:
4c:10:f9:2a:98:cb:df:ff:c4:f4:37:31:76:21:55:d7:82:c1:
62:d8:5b:3f:e5:0a:79:13:c8:cb:f3:d6:a3:78:c3:79:b7:bf:
71:0f:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:54 2026 by rpki-client