Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS62610.roa
File: AS62610.roa (raw, json)
Hash identifier: MYRUy3vZVvIRJr9KLwsoqX1wVh7WHQijEx16vABvcVk=
Subject key identifier: 15:E8:77:52:60:0F:8E:87:87:87:6B:1A:F9:70:76:AD:0D:25:24:D5
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 46D5A7C87B3512EF5921B4F2C906C5C57BCD4DCD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS62610.roa
Signing time: Thu 30 Oct 2025 07:07:52 +0000
ROA not before: Thu 30 Oct 2025 07:02:52 +0000
ROA not after: Thu 29 Oct 2026 07:07:52 +0000
asID: 62610
IP address blocks: 143.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d5:a7:c8:7b:35:12:ef:59:21:b4:f2:c9:06:c5:c5:7b:cd:4d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 30 07:02:52 2025 GMT
Not After : Oct 29 07:07:52 2026 GMT
Subject: CN=15E87752600F8E8787876B1AF97076AD0D2524D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:25:06:0b:d5:a2:de:97:e0:25:88:ea:f0:
2a:77:f8:f3:15:3a:7b:fb:93:01:d7:cb:4a:6a:f3:
f8:9c:a5:64:4c:fd:34:80:e5:43:b0:b6:88:c1:13:
6e:98:ce:49:c6:b9:7d:85:d2:e0:14:e2:31:43:db:
7f:10:2c:f2:a6:9a:67:33:c8:a3:95:db:79:51:a3:
11:5b:38:41:1c:ce:93:58:c1:46:9c:10:20:e1:d4:
f0:6f:09:36:fc:a6:15:a7:a5:dc:bc:30:fe:0d:d2:
06:cd:71:fc:bf:98:c9:d8:1b:c8:b2:e5:63:35:76:
4e:b4:c7:f4:18:0d:15:36:da:7b:f1:61:ea:d7:97:
2b:42:c5:5a:e9:4a:24:2b:bf:8d:5d:5b:2f:20:fe:
ae:ef:f3:4d:e4:55:50:f3:d7:c6:dc:af:ea:5e:d6:
21:3d:89:39:2e:3f:45:9f:7b:ae:02:51:7a:2c:9f:
97:23:62:af:76:5c:fa:88:b2:78:16:e7:e9:97:cb:
9d:dd:a1:84:bf:f7:dd:83:70:6b:ed:a8:2d:d5:2d:
c5:7a:67:f6:24:a0:d1:76:85:f4:cf:24:8a:1b:24:
1f:4d:62:6a:6c:2f:01:4b:a8:8c:bd:7a:a2:5b:2e:
3c:79:93:56:eb:d8:5c:21:8e:e4:26:2a:4b:f1:ec:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:77:52:60:0F:8E:87:87:87:6B:1A:F9:70:76:AD:0D:25:24:D5
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS62610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:bd:ae:58:22:23:96:47:9f:2d:08:19:96:1b:f0:a7:5e:
8f:d7:14:8a:c1:76:74:36:78:81:10:4a:49:a6:9b:51:62:3e:
df:90:76:a2:a7:93:c0:a8:6a:23:fa:97:45:7b:c6:75:2b:4d:
85:6d:d3:9a:cf:f1:74:d6:b9:f5:4f:31:6e:74:56:bc:c0:ef:
62:22:ba:f6:c7:1d:57:79:98:e2:fa:ce:c9:cb:80:3c:21:81:
06:1d:a4:16:bd:68:65:92:c8:3d:72:0a:d0:1d:4e:21:43:3d:
54:18:7b:01:17:d4:21:61:e2:30:d7:0a:0b:f3:9c:d8:06:ff:
5d:99:c2:6a:5d:26:5c:10:44:ad:9f:2c:43:a6:24:34:3d:b9:
08:ee:ed:60:c4:a2:29:5a:bf:96:3a:ba:6a:79:66:b7:70:86:
81:5f:8a:ed:4b:07:2b:76:d9:15:ab:b8:ca:dc:2e:8b:64:e4:
72:07:a2:a0:f9:b0:93:75:7a:25:66:3f:6c:93:28:ac:47:c2:
b1:0f:5f:f4:47:58:fb:2c:38:1d:68:30:ce:90:95:fa:33:03:
fe:d3:b7:d2:ee:ad:94:f8:b9:e1:47:70:35:1d:b3:a6:fd:bf:
97:b0:17:ed:fc:9a:f6:04:04:21:a0:20:27:76:08:53:6c:2c:
d5:79:06:10
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIURtWnyHs1Eu9ZIbTyyQbFxXvNTc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTEwMzAwNzAyNTJaFw0yNjEwMjkwNzA3NTJaMDMxMTAvBgNV
BAMTKDE1RTg3NzUyNjAwRjhFODc4Nzg3NkIxQUY5NzA3NkFEMEQyNTI0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPByUGC9Wi3pfgJYjq8Cp3+PMV
Onv7kwHXy0pq8/icpWRM/TSA5UOwtojBE26YzknGuX2F0uAU4jFD238QLPKmmmcz
yKOV23lRoxFbOEEczpNYwUacECDh1PBvCTb8phWnpdy8MP4N0gbNcfy/mMnYG8iy
5WM1dk60x/QYDRU22nvxYerXlytCxVrpSiQrv41dWy8g/q7v803kVVDz18bcr+pe
1iE9iTkuP0Wfe64CUXosn5cjYq92XPqIsngW5+mXy53doYS/992DcGvtqC3VLcV6
Z/YkoNF2hfTPJIobJB9NYmpsLwFLqIy9eqJbLjx5k1br2FwhjuQmKkvx7IedAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUFeh3UmAPjoeHh2sa+XB2rQ0lJNUwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjI2MTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFAsw
DQYJKoZIhvcNAQELBQADggEBAI0pva5YIiOWR58tCBmWG/CnXo/XFIrBdnQ2eIEQ
Skmmm1FiPt+QdqKnk8CoaiP6l0V7xnUrTYVt05rP8XTWufVPMW50VrzA72IiuvbH
HVd5mOL6zsnLgDwhgQYdpBa9aGWSyD1yCtAdTiFDPVQYewEX1CFh4jDXCgvznNgG
/12ZwmpdJlwQRK2fLEOmJDQ9uQju7WDEoilav5Y6ump5ZrdwhoFfiu1LByt22RWr
uMrcLotk5HIHoqD5sJN1eiVmP2yTKKxHwrEPX/RHWPssOB1oMM6QlfozA/7Tt9Lu
rZT4ueFHcDUds6b9v5ewF+38mvYEBCGgICd2CFNsLNV5BhA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:30:12 2025 by rpki-client