Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS62082.roa
File: AS62082.roa (raw, json)
Hash identifier: vnZ3izMrtJ4JH7rfOWOu+uvsXZMZS2hAbU6Xy2ppuF8=
Subject key identifier: F4:91:5A:99:51:E9:FF:A0:48:35:A8:84:A8:16:97:C8:72:CE:79:E4
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 466D7250F01517F88CFEB30C6FCDD2DF1DDEEF61
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS62082.roa
Signing time: Thu 03 Sep 2026 16:43:24 +0000
ROA not before: Thu 03 Sep 2026 16:38:24 +0000
ROA not after: Thu 02 Sep 2027 16:43:24 +0000
asID: 62082
IP address blocks: 177.28.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6d:72:50:f0:15:17:f8:8c:fe:b3:0c:6f:cd:d2:df:1d:de:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 3 16:38:24 2026 GMT
Not After : Sep 2 16:43:24 2027 GMT
Subject: CN=F4915A9951E9FFA04835A884A81697C872CE79E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ea:26:b9:35:b7:b6:77:9f:d1:19:c7:40:f9:
a6:86:db:a4:4f:33:31:c9:2c:29:e6:bf:f1:bb:9b:
cc:39:88:ae:4b:39:e0:56:fd:53:84:c5:eb:e3:c1:
ff:b0:c1:b6:db:e3:dd:e7:4f:88:7a:ef:c1:bf:0c:
b1:a9:09:7c:a1:d3:e2:31:39:de:da:e1:f8:dc:e3:
bf:0b:36:d6:df:81:08:c3:94:8c:81:71:61:a1:52:
cf:4b:93:c9:33:57:d6:d1:ab:06:cc:de:ab:ad:90:
d8:7b:8d:6b:4b:d0:a3:b8:a1:14:fc:ff:56:fa:01:
a4:39:2e:ec:52:64:f6:61:70:93:b5:08:4d:22:3a:
e9:42:e6:d0:79:63:f9:5a:d9:30:4f:f9:8a:20:63:
2d:2d:0c:a2:07:66:d6:92:6a:11:c9:3f:3f:4d:17:
d1:e7:32:c0:76:7f:d8:cf:4f:26:19:f3:c3:e7:f1:
04:54:42:70:f9:f3:d5:86:ec:5b:d7:6d:04:7e:76:
83:4b:3e:ec:76:9f:b5:04:5d:a5:d8:31:d6:b7:40:
f6:bc:a9:07:02:d6:86:46:c3:aa:23:e2:76:65:13:
eb:04:b5:47:b9:5c:5d:2e:cf:d2:f7:3f:f8:d7:b9:
45:88:35:8f:c7:78:30:9e:de:dd:c5:9e:8a:2b:53:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:5A:99:51:E9:FF:A0:48:35:A8:84:A8:16:97:C8:72:CE:79:E4
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS62082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.4.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e6:aa:87:5b:41:eb:f2:04:ab:0a:e8:ca:19:a9:16:2e:1a:
b5:e7:df:78:2c:eb:64:03:7d:64:c2:86:54:3c:8d:8b:a6:64:
68:ff:a6:33:d2:18:a0:41:10:dd:17:9c:80:eb:bc:c5:92:67:
0d:74:72:8f:d7:34:fd:86:46:d9:93:8b:63:a1:4d:6a:1d:43:
4b:eb:52:b3:69:b5:86:e8:07:18:6d:d7:d2:06:42:30:32:ce:
c1:2e:a2:bc:9d:07:e9:e5:88:03:8c:fb:e0:80:f1:c5:a6:15:
eb:dd:91:9f:83:f1:02:f3:de:4f:55:db:43:c3:fd:a5:d3:f2:
40:c3:57:94:f5:47:36:7b:fb:ab:9b:07:24:4f:1e:fc:67:57:
1e:6c:b8:b6:80:8c:3a:f4:3b:9e:d4:1b:a4:a5:bb:15:eb:04:
8b:52:88:ac:33:67:d8:05:a8:74:66:df:e0:11:20:34:ad:4b:
a4:0b:2f:87:10:49:cc:30:54:97:a6:65:d2:ee:b4:b6:37:0d:
26:4c:47:0b:62:57:56:88:1f:fc:cc:64:a0:60:54:1f:5c:1f:
6a:5c:6f:0e:9f:4e:0d:65:62:6c:2d:b7:be:96:b6:54:b0:86:
71:21:ea:6a:ad:fb:61:44:39:84:ac:12:67:fd:ac:f3:17:99:
fa:f5:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:04 2026 by rpki-client