Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: yTsTdzoEdZ3fMeRxEAXimpiVZME41107UgZJE24dnWo=
Subject key identifier: E1:B2:DE:D9:4B:63:1A:46:B1:39:87:64:C5:E7:94:57:FC:A3:73:6E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1FBC94E11BE177C4EFA3BD0022F6BAFD3F2EF7C5
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS62240.roa
Signing time: Sat 06 Jun 2026 08:17:02 +0000
ROA not before: Sat 06 Jun 2026 08:12:02 +0000
ROA not after: Sat 05 Jun 2027 08:17:02 +0000
asID: 62240
IP address blocks: 51.194.163.0/24 maxlen: 24
51.241.133.0/24 maxlen: 24
51.241.138.0/24 maxlen: 24
51.241.143.0/24 maxlen: 24
51.241.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:bc:94:e1:1b:e1:77:c4:ef:a3:bd:00:22:f6:ba:fd:3f:2e:f7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 6 08:12:02 2026 GMT
Not After : Jun 5 08:17:02 2027 GMT
Subject: CN=E1B2DED94B631A46B1398764C5E79457FCA3736E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:26:94:bc:c2:24:22:0b:b2:12:38:74:84:
be:f5:cc:b7:4f:2f:33:1c:97:dc:ae:94:aa:0f:27:
03:d1:34:e1:46:4d:8e:49:98:51:fd:48:49:91:37:
97:81:06:cd:87:fd:0e:ca:fe:7b:eb:9e:18:09:df:
50:77:a6:3b:82:4e:a6:3a:79:b4:24:fb:c0:81:4c:
fd:50:e0:4f:b0:c2:dd:dc:f6:b1:33:b1:25:4a:a6:
3c:8f:fe:40:90:35:ff:30:ad:dd:2a:98:95:29:d1:
52:0c:11:86:91:1c:3d:94:76:cb:fd:65:cd:79:95:
2d:dc:47:fb:3f:bd:c1:cb:ba:02:c2:b7:df:29:c8:
91:e5:55:4a:8f:31:39:cb:59:1e:72:dd:c9:35:4c:
14:71:56:df:65:b8:dc:58:c8:be:2e:17:c9:e7:0e:
07:82:73:67:c4:1b:f1:f7:92:df:18:67:65:ca:0e:
b2:97:87:a7:95:a8:20:2f:b2:b5:53:f7:41:0a:3a:
c9:8a:40:2e:ef:41:4b:8e:cb:a5:97:ab:c1:86:24:
a1:47:38:9b:78:6e:3e:01:f2:47:8f:ec:65:e3:1a:
7a:a1:b3:ee:87:32:81:1f:b4:62:0d:7e:92:6b:bd:
89:3f:bf:40:74:c0:63:fa:0e:7e:7f:c9:09:a6:5c:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:DE:D9:4B:63:1A:46:B1:39:87:64:C5:E7:94:57:FC:A3:73:6E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.163.0/24
51.241.133.0/24
51.241.138.0/24
51.241.143.0/24
51.241.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0d:82:f8:ad:bf:7c:26:61:46:d6:77:34:cb:8b:e0:a3:54:
a1:35:b8:c3:45:97:f3:77:47:2e:10:14:e4:fa:e4:bf:09:0b:
f0:e8:72:10:a6:60:bc:36:29:36:41:f8:dd:23:ca:56:09:3a:
2e:e2:bc:03:ee:bb:54:bd:00:23:66:e3:75:7f:82:d6:a2:c9:
24:0d:c5:06:fd:f3:35:f9:3c:e1:3d:b2:79:da:4f:d7:c4:3e:
9b:62:89:93:5f:18:4d:0a:a1:5c:5e:83:dc:01:ed:0c:68:ad:
67:fe:ea:0a:4c:0b:a6:aa:01:06:50:aa:ce:16:45:19:e6:f0:
a5:9b:50:f2:81:1c:3c:24:17:aa:fa:7f:a2:00:ba:6e:59:10:
56:bc:63:a8:ec:58:62:fd:8e:6c:4d:5d:be:21:ec:dd:40:23:
99:6f:a1:88:63:e9:80:61:35:51:52:05:7a:7e:ee:a9:a0:7d:
e1:71:72:8c:a7:c4:ac:a7:98:61:bd:b4:61:a2:75:2a:4e:d3:
04:90:39:78:ba:3b:9a:30:dc:62:a6:de:87:cb:65:6e:cb:cc:
32:a0:f1:a7:f5:77:8d:ae:e5:ed:b0:7d:d6:e6:db:54:11:aa:
0b:b9:2c:f8:6f:32:1a:61:44:79:a9:1b:1f:1a:b2:77:9c:90:
8c:bd:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:54 2026 by rpki-client