Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6762.roa
File: AS6762.roa (raw, json)
Hash identifier: lNn6b9UHJg4vT/Z3xl0EWMSqOKVI7JgOrEhK9lfg+cc=
Subject key identifier: 05:CA:73:EE:D8:EC:3A:B4:BF:42:58:F4:AC:13:F4:FD:BB:65:B6:4A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 424689A7B92EEFCF858162E598BED5780DAE779D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6762.roa
Signing time: Mon 23 Feb 2026 12:55:39 +0000
ROA not before: Mon 23 Feb 2026 12:50:39 +0000
ROA not after: Mon 22 Feb 2027 12:55:39 +0000
asID: 6762
IP address blocks: 82.21.9.0/24 maxlen: 24
82.21.10.0/24 maxlen: 24
82.21.11.0/24 maxlen: 24
82.21.12.0/24 maxlen: 24
82.21.13.0/24 maxlen: 24
82.21.14.0/24 maxlen: 24
82.21.15.0/24 maxlen: 24
82.21.16.0/24 maxlen: 24
82.21.17.0/24 maxlen: 24
82.21.18.0/24 maxlen: 24
82.21.19.0/24 maxlen: 24
82.21.22.0/24 maxlen: 24
82.21.23.0/24 maxlen: 24
82.21.24.0/24 maxlen: 24
82.21.25.0/24 maxlen: 24
82.21.26.0/24 maxlen: 24
82.21.27.0/24 maxlen: 24
82.21.32.0/24 maxlen: 24
82.21.33.0/24 maxlen: 24
82.21.34.0/24 maxlen: 24
82.21.35.0/24 maxlen: 24
82.21.36.0/24 maxlen: 24
82.21.37.0/24 maxlen: 24
82.21.38.0/24 maxlen: 24
82.21.39.0/24 maxlen: 24
82.21.40.0/24 maxlen: 24
82.21.42.0/24 maxlen: 24
82.21.44.0/24 maxlen: 24
82.21.45.0/24 maxlen: 24
82.21.46.0/24 maxlen: 24
82.21.47.0/24 maxlen: 24
82.21.48.0/24 maxlen: 24
82.21.49.0/24 maxlen: 24
82.21.51.0/24 maxlen: 24
82.21.52.0/24 maxlen: 24
82.21.54.0/24 maxlen: 24
82.21.55.0/24 maxlen: 24
82.21.62.0/24 maxlen: 24
82.21.63.0/24 maxlen: 24
82.21.71.0/24 maxlen: 24
82.21.73.0/24 maxlen: 24
82.21.83.0/24 maxlen: 24
82.21.85.0/24 maxlen: 24
82.21.86.0/24 maxlen: 24
82.21.130.0/24 maxlen: 24
82.21.173.0/24 maxlen: 24
82.22.156.0/24 maxlen: 24
82.22.163.0/24 maxlen: 24
82.22.165.0/24 maxlen: 24
82.22.168.0/24 maxlen: 24
82.22.169.0/24 maxlen: 24
82.22.179.0/24 maxlen: 24
82.22.181.0/24 maxlen: 24
82.22.182.0/24 maxlen: 24
82.22.183.0/24 maxlen: 24
82.22.198.0/24 maxlen: 24
82.23.178.0/24 maxlen: 24
82.23.189.0/24 maxlen: 24
82.24.27.0/24 maxlen: 24
82.24.29.0/24 maxlen: 24
82.26.64.0/24 maxlen: 24
82.26.69.0/24 maxlen: 24
82.26.75.0/24 maxlen: 24
82.26.77.0/24 maxlen: 24
82.26.85.0/24 maxlen: 24
82.26.107.0/24 maxlen: 24
82.27.18.0/24 maxlen: 24
82.27.21.0/24 maxlen: 24
82.27.96.0/24 maxlen: 24
82.27.97.0/24 maxlen: 24
82.27.121.0/24 maxlen: 24
82.27.125.0/24 maxlen: 24
82.27.126.0/24 maxlen: 24
82.27.127.0/24 maxlen: 24
82.27.196.0/24 maxlen: 24
82.27.199.0/24 maxlen: 24
82.27.200.0/24 maxlen: 24
82.27.202.0/24 maxlen: 24
82.27.203.0/24 maxlen: 24
82.27.204.0/24 maxlen: 24
82.27.207.0/24 maxlen: 24
82.29.123.0/24 maxlen: 24
82.29.124.0/24 maxlen: 24
82.29.139.0/24 maxlen: 24
82.29.141.0/24 maxlen: 24
82.29.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:46:89:a7:b9:2e:ef:cf:85:81:62:e5:98:be:d5:78:0d:ae:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 23 12:50:39 2026 GMT
Not After : Feb 22 12:55:39 2027 GMT
Subject: CN=05CA73EED8EC3AB4BF4258F4AC13F4FDBB65B64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:39:84:69:4a:a5:5d:c4:c7:be:07:13:4d:
9a:2f:63:f3:4b:27:22:60:d4:a3:e9:c9:6b:2d:d4:
fe:96:6d:d5:3a:fa:f8:a5:c9:36:f2:5e:e8:21:23:
dd:13:83:e6:8a:0b:6e:f1:a0:56:33:cb:4f:07:d5:
76:14:dc:47:50:a9:92:34:4c:27:9d:55:fa:47:48:
30:0c:3c:2a:62:45:fa:63:c0:59:8e:0f:a1:9c:92:
f1:ac:8d:84:58:bd:6c:ef:9e:e4:30:48:59:96:29:
2b:61:19:e2:c0:71:8a:3e:fb:dd:4e:5b:89:26:90:
56:6a:88:a4:38:c0:c0:eb:bc:df:5b:23:bc:11:d1:
74:b3:23:75:2d:00:4e:d5:a2:0c:87:1e:98:8d:c2:
21:31:a4:6c:c7:e0:04:61:03:74:a3:0c:9b:f9:b7:
13:ca:be:a6:31:0c:45:9b:50:9b:30:f4:91:0e:5e:
c3:5d:70:fe:b3:22:08:69:75:f9:18:cd:8a:65:93:
30:77:dd:74:a6:90:b5:0e:6f:89:42:c1:5e:f9:ba:
e5:c1:21:3d:d0:78:b8:f9:7d:4e:7b:5a:00:c6:9a:
cb:f3:40:f3:03:71:c4:b3:fc:ad:f7:89:4b:35:6f:
dc:52:53:4b:82:c5:b6:5b:d8:cd:a3:58:cf:5c:85:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:73:EE:D8:EC:3A:B4:BF:42:58:F4:AC:13:F4:FD:BB:65:B6:4A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.9.0-82.21.19.255
82.21.22.0-82.21.27.255
82.21.32.0-82.21.40.255
82.21.42.0/24
82.21.44.0-82.21.49.255
82.21.51.0-82.21.52.255
82.21.54.0/23
82.21.62.0/23
82.21.71.0/24
82.21.73.0/24
82.21.83.0/24
82.21.85.0-82.21.86.255
82.21.130.0/24
82.21.173.0/24
82.22.156.0/24
82.22.163.0/24
82.22.165.0/24
82.22.168.0/23
82.22.179.0/24
82.22.181.0-82.22.183.255
82.22.198.0/24
82.23.178.0/24
82.23.189.0/24
82.24.27.0/24
82.24.29.0/24
82.26.64.0/24
82.26.69.0/24
82.26.75.0/24
82.26.77.0/24
82.26.85.0/24
82.26.107.0/24
82.27.18.0/24
82.27.21.0/24
82.27.96.0/23
82.27.121.0/24
82.27.125.0-82.27.127.255
82.27.196.0/24
82.27.199.0-82.27.200.255
82.27.202.0-82.27.204.255
82.27.207.0/24
82.29.123.0-82.29.124.255
82.29.139.0/24
82.29.141.0/24
82.29.143.0/24
Signature Algorithm: sha256WithRSAEncryption
33:56:47:8a:b4:fd:11:32:9e:5c:2e:48:25:68:be:6a:59:fa:
83:dc:cd:c8:ec:41:d3:83:90:54:51:58:79:cb:29:e7:3c:86:
90:35:3b:d7:e5:9a:7d:ff:94:2d:df:f8:77:d6:e8:a8:56:ba:
b6:97:69:3d:51:b3:80:07:95:d6:17:dd:a5:4e:74:73:01:21:
e5:69:49:21:1e:0a:99:28:4c:25:54:90:db:f3:10:c3:cf:48:
2f:74:df:e9:34:da:2f:85:5c:84:76:36:7c:86:61:62:e7:2f:
82:ad:73:28:9d:77:be:f8:bb:a1:cd:63:f4:b6:5e:9c:91:4a:
85:8c:e2:59:33:49:82:c0:b4:c0:87:06:43:30:78:3c:88:6c:
b0:52:e0:ac:34:58:72:03:23:ae:94:14:0b:b4:dd:97:36:9f:
ca:d3:32:a0:69:76:43:02:67:3a:5a:58:48:d2:0e:ba:1d:e1:
41:c2:89:93:6b:34:95:8d:27:6f:e1:c7:25:c5:85:5a:b2:ac:
72:33:f0:ba:02:32:24:44:fc:2a:52:0e:c3:d6:7c:63:8b:fe:
7d:df:91:7b:57:19:21:2e:f8:0f:21:5b:8c:67:38:0c:a5:20:
d0:42:ce:ed:94:78:8e:2a:b5:f3:ad:e8:e7:4d:ed:a4:a0:9c:
f9:6c:bd:64
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIUQkaJp7ku78+FgWLlmL7VeA2ud50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAyMjMxMjUwMzlaFw0yNzAyMjIxMjU1MzlaMDMxMTAvBgNV
BAMTKDA1Q0E3M0VFRDhFQzNBQjRCRjQyNThGNEFDMTNGNEZEQkI2NUI2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DDmEaUqlXcTHvgcTTZovY/NL
JyJg1KPpyWst1P6WbdU6+vilyTbyXughI90Tg+aKC27xoFYzy08H1XYU3EdQqZI0
TCedVfpHSDAMPCpiRfpjwFmOD6GckvGsjYRYvWzvnuQwSFmWKSthGeLAcYo++91O
W4kmkFZqiKQ4wMDrvN9bI7wR0XSzI3UtAE7VogyHHpiNwiExpGzH4ARhA3SjDJv5
txPKvqYxDEWbUJsw9JEOXsNdcP6zIghpdfkYzYplkzB33XSmkLUOb4lCwV75uuXB
IT3QeLj5fU57WgDGmsvzQPMDccSz/K33iUs1b9xSU0uCxbZb2M2jWM9chc+7AgMB
AAGjggNsMIIDaDAdBgNVHQ4EFgQUBcpz7tjsOrS/Qlj0rBP0/btltkowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjc2Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAYEGCCsGAQUFBwEHAQH/BIIBcDCCAWwwggFoBAIAATCC
AWAwDAMEAFIVCQMEAlIVEDAMAwQBUhUWAwQCUhUYMAwDBAVSFSADBABSFSgDBABS
FSowDAMEAlIVLAMEAVIVMDAMAwQAUhUzAwQAUhU0AwQBUhU2AwQBUhU+AwQAUhVH
AwQAUhVJAwQAUhVTMAwDBABSFVUDBABSFVYDBABSFYIDBABSFa0DBABSFpwDBABS
FqMDBABSFqUDBAFSFqgDBABSFrMwDAMEAFIWtQMEA1IWsAMEAFIWxgMEAFIXsgME
AFIXvQMEAFIYGwMEAFIYHQMEAFIaQAMEAFIaRQMEAFIaSwMEAFIaTQMEAFIaVQME
AFIaawMEAFIbEgMEAFIbFQMEAVIbYAMEAFIbeTAMAwQAUht9AwQHUhsAAwQAUhvE
MAwDBABSG8cDBABSG8gwDAMEAVIbygMEAFIbzAMEAFIbzzAMAwQAUh17AwQAUh18
AwQAUh2LAwQAUh2NAwQAUh2PMA0GCSqGSIb3DQEBCwUAA4IBAQAzVkeKtP0RMp5c
LkglaL5qWfqD3M3I7EHTg5BUUVh5yynnPIaQNTvX5Zp9/5Qt3/h31uioVrq2l2k9
UbOAB5XWF92lTnRzASHlaUkhHgqZKEwlVJDb8xDDz0gvdN/pNNovhVyEdjZ8hmFi
5y+CrXMonXe++LuhzWP0tl6ckUqFjOJZM0mCwLTAhwZDMHg8iGywUuCsNFhyAyOu
lBQLtN2XNp/K0zKgaXZDAmc6WlhI0g66HeFBwomTazSVjSdv4cclxYVasqxyM/C6
AjIkRPwqUg7D1nxji/5935F7VxkhLvgPIVuMZzgMpSDQQs7tlHiOKrXzrejnTe2k
oJz5bL1k
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:07 2026 by rpki-client