Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: LyqTnxu/tCqbesJ7M/jZ+4v+b0SEQoAQW75V+bHkyfE=
Subject key identifier: F5:F9:36:BB:49:4E:D9:63:0B:E9:23:30:FB:07:0B:1E:A8:4B:B8:24
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 253E5654EA3BC7EFB408D3C218C4F8A419C91913
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
Signing time: Fri 18 Jul 2025 00:02:06 +0000
ROA not before: Thu 17 Jul 2025 23:57:06 +0000
ROA not after: Fri 17 Jul 2026 00:02:06 +0000
asID: 62240
IP address blocks: 140.150.236.0/22 maxlen: 22
146.103.28.0/22 maxlen: 22
147.79.2.0/23 maxlen: 23
155.117.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3e:56:54:ea:3b:c7:ef:b4:08:d3:c2:18:c4:f8:a4:19:c9:19:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 17 23:57:06 2025 GMT
Not After : Jul 17 00:02:06 2026 GMT
Subject: CN=F5F936BB494ED9630BE92330FB070B1EA84BB824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c8:79:b5:af:08:41:16:bd:28:69:24:f8:3f:
fd:f2:3c:ac:48:4a:13:f6:71:5d:92:09:10:4d:68:
13:32:14:40:df:cc:69:22:86:8d:ac:a3:b6:f0:09:
58:c2:ab:16:05:55:82:72:b8:cd:79:17:f2:1c:4c:
1a:94:e7:38:ce:d0:3e:f9:e7:16:8c:55:dd:aa:e0:
ad:92:74:85:4f:86:ab:6b:57:23:cf:dc:58:d6:46:
a5:43:ba:ac:c7:84:54:93:81:a6:9f:70:1b:b6:fb:
e5:0b:ea:65:d0:94:d1:15:6d:89:7d:8d:b5:59:53:
09:60:02:ce:24:a1:2d:ec:cc:1d:e2:b4:07:97:2d:
7a:d3:ee:29:a3:28:62:98:b8:83:5c:f9:e1:62:13:
88:9d:52:34:fb:91:5c:f4:48:0a:57:5c:03:00:85:
07:27:12:fe:dc:14:17:f0:dd:20:37:4a:ce:8d:4d:
23:0e:3b:53:b8:1a:f0:31:35:f5:a9:42:8b:8f:38:
d2:f7:d3:f9:f4:14:77:50:4e:6a:d2:df:9f:80:a3:
12:8b:96:c3:87:79:7d:2e:9d:ee:9a:f2:dc:27:1f:
e1:50:3b:21:59:ca:47:47:86:d5:93:bc:d9:9a:b1:
ac:19:5b:9a:84:7d:b5:f9:ab:e4:43:f9:72:58:c5:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:36:BB:49:4E:D9:63:0B:E9:23:30:FB:07:0B:1E:A8:4B:B8:24
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/22
146.103.28.0/22
147.79.2.0/23
155.117.40.0/22
Signature Algorithm: sha256WithRSAEncryption
86:cf:c7:f4:28:ef:cb:fc:6f:da:f7:70:8c:64:47:32:77:41:
e0:66:d0:fd:da:b0:6e:05:03:81:5c:89:83:38:ce:47:ac:d6:
c3:aa:55:30:c1:54:bf:32:fd:8e:ca:3f:b9:8b:b7:f8:76:c5:
79:ca:f3:36:88:4f:b1:fb:26:e8:ea:09:4d:00:c2:58:28:bf:
fc:0d:fc:63:ee:7e:e8:6f:13:98:ed:cf:17:a3:99:30:46:0e:
b0:af:bb:8b:87:73:3c:a5:88:75:61:90:88:67:f7:3b:c7:ff:
53:64:4b:7d:88:ec:04:db:79:a2:21:7d:32:ec:6b:11:93:c4:
04:3c:0c:e0:a4:65:10:c0:e7:83:46:a6:2e:ec:e3:7b:4c:21:
b5:d8:49:ee:62:07:d6:02:5b:e5:67:63:0c:94:59:b9:fe:f5:
c5:a4:d1:83:f9:f3:7f:bb:55:fe:dc:ad:c7:67:55:75:1b:9a:
8e:1f:68:88:bd:93:c3:32:26:01:dc:c3:2f:f9:89:5b:de:58:
68:f9:cc:99:13:ec:f4:17:ee:24:f4:aa:bd:1e:c8:50:03:c9:
dc:be:df:f0:92:c3:ff:6a:9c:c6:51:7d:89:e9:fa:97:87:97:
2e:b5:35:17:a3:c3:a2:ef:0b:2b:4b:f3:2d:8e:79:eb:62:bb:
0f:fe:5b:e2
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUJT5WVOo7x++0CNPCGMT4pBnJGRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MTcyMzU3MDZaFw0yNjA3MTcwMDAyMDZaMDMxMTAvBgNV
BAMTKEY1RjkzNkJCNDk0RUQ5NjMwQkU5MjMzMEZCMDcwQjFFQTg0QkI4MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5yHm1rwhBFr0oaST4P/3yPKxI
ShP2cV2SCRBNaBMyFEDfzGkiho2so7bwCVjCqxYFVYJyuM15F/IcTBqU5zjO0D75
5xaMVd2q4K2SdIVPhqtrVyPP3FjWRqVDuqzHhFSTgaafcBu2++UL6mXQlNEVbYl9
jbVZUwlgAs4koS3szB3itAeXLXrT7imjKGKYuINc+eFiE4idUjT7kVz0SApXXAMA
hQcnEv7cFBfw3SA3Ss6NTSMOO1O4GvAxNfWpQouPONL30/n0FHdQTmrS35+AoxKL
lsOHeX0une6a8twnH+FQOyFZykdHhtWTvNmasawZW5qEfbX5q+RD+XJYxeTtAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU9fk2u0lO2WML6SMw+wcLHqhLuCQwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjIyNDAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAKMluwD
BAKSZxwDBAGTTwIDBAKbdSgwDQYJKoZIhvcNAQELBQADggEBAIbPx/Qo78v8b9r3
cIxkRzJ3QeBm0P3asG4FA4FciYM4zkes1sOqVTDBVL8y/Y7KP7mLt/h2xXnK8zaI
T7H7JujqCU0Awlgov/wN/GPufuhvE5jtzxejmTBGDrCvu4uHczyliHVhkIhn9zvH
/1NkS32I7ATbeaIhfTLsaxGTxAQ8DOCkZRDA54NGpi7s43tMIbXYSe5iB9YCW+Vn
YwyUWbn+9cWk0YP583+7Vf7crcdnVXUbmo4faIi9k8MyJgHcwy/5iVveWGj5zJkT
7PQX7iT0qr0eyFADydy+3/CSw/9qnMZRfYnp+peHly61NRejw6LvCytL8y2Oeeti
uw/+W+I=
-----END CERTIFICATE-----
Generated at Tue Jul 22 18:58:57 2025 by rpki-client