Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62874.roa
File: AS62874.roa (raw, json)
Hash identifier: Bm1UCmklVoApmt4WN4RUIcWTGkPWnuYZlQ3ijIpuUF4=
Subject key identifier: 48:3F:CA:37:2F:C5:91:81:E4:FC:8C:F2:75:9E:60:1F:9C:FB:22:46
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5BD93508A079D670C64BA103D0D610B6DBCECCC1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62874.roa
Signing time: Wed 07 Oct 2026 13:46:42 +0000
ROA not before: Wed 07 Oct 2026 13:41:42 +0000
ROA not after: Wed 06 Oct 2027 13:46:42 +0000
asID: 62874
IP address blocks: 82.21.236.0/24 maxlen: 24
82.22.216.0/24 maxlen: 24
82.22.239.0/24 maxlen: 24
82.24.210.0/24 maxlen: 24
82.24.234.0/24 maxlen: 24
82.26.226.0/24 maxlen: 24
82.29.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d9:35:08:a0:79:d6:70:c6:4b:a1:03:d0:d6:10:b6:db:ce:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 7 13:41:42 2026 GMT
Not After : Oct 6 13:46:42 2027 GMT
Subject: CN=483FCA372FC59181E4FC8CF2759E601F9CFB2246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:36:62:1d:5e:bc:1a:bc:37:24:0e:ef:4a:
19:f7:6c:b7:2a:aa:bc:61:39:5b:de:26:0f:27:0a:
81:6a:2b:c2:fb:16:ca:b5:58:b8:86:ab:52:a0:37:
9d:63:25:93:58:f0:83:7c:33:b8:d8:db:4a:ad:ac:
6a:36:1c:60:19:5c:b5:90:70:bb:dd:2e:0f:0d:56:
09:dc:69:6c:3a:09:3e:79:d1:21:64:9e:d5:43:eb:
e5:20:cb:c3:b5:98:2c:2d:7b:68:d7:7b:bb:e2:c5:
44:20:8e:ec:d7:cd:89:f7:ad:bb:b7:22:5c:b6:72:
90:f9:b7:cc:e7:d6:8f:35:a9:e2:73:78:6b:c2:46:
4f:61:04:ef:49:a4:d5:92:66:bc:24:51:a8:e1:7d:
1b:ac:81:28:07:3c:6c:dd:ba:cd:ca:66:b3:01:c7:
4e:a1:b7:68:44:93:4c:25:7d:26:11:be:bc:53:ca:
6e:fe:51:f1:e9:c6:e0:cb:19:97:a2:8f:c5:6f:4e:
4d:40:46:e5:4e:7e:22:17:4b:c4:fa:6f:2f:c6:29:
f4:f5:57:a8:8a:25:f0:ec:e1:4d:38:dd:34:9b:eb:
22:dc:f4:e6:f7:e4:f4:c1:d2:6f:7d:ef:62:61:ac:
c9:d6:ea:db:31:7e:5b:60:86:db:98:83:53:f5:fe:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:CA:37:2F:C5:91:81:E4:FC:8C:F2:75:9E:60:1F:9C:FB:22:46
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.236.0/24
82.22.216.0/24
82.22.239.0/24
82.24.210.0/24
82.24.234.0/24
82.26.226.0/24
82.29.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c0:91:b7:e8:c8:40:83:9a:da:e4:5d:88:b8:bd:02:5e:05:
9b:ce:78:85:f0:9d:cc:40:cd:83:a6:05:f6:bc:da:37:1a:84:
af:c6:91:76:54:cc:13:1b:cf:42:d7:6b:b8:b4:81:64:26:b9:
f5:62:a9:1d:cf:d7:cc:c6:2a:60:04:73:aa:a3:42:09:0b:10:
e6:4e:9c:73:53:4e:ca:8c:dc:1f:d4:e5:47:51:65:d9:0e:07:
40:af:3f:cb:da:9c:86:3b:60:d6:0f:ae:d0:52:a3:ed:65:67:
f0:05:b0:22:14:04:e3:a3:8e:88:86:b6:76:83:22:26:7f:26:
9e:43:fe:8f:66:95:5c:6e:3d:1b:1c:d8:7d:c8:f8:c6:92:fc:
c1:8b:dd:2a:d7:59:92:33:b7:9a:dd:c9:98:29:f8:53:9d:f2:
ea:f7:3c:92:0b:43:dd:f5:9d:e5:45:a3:85:72:e0:fd:f5:c7:
aa:9f:4c:9b:f3:61:a0:19:33:d7:ac:4f:af:07:a2:80:ce:39:
16:0c:62:b8:36:6a:ca:fd:17:01:9f:9f:8e:54:72:44:3f:7c:
f3:f6:98:bd:c8:9a:96:65:b7:d9:04:b8:6e:5e:ae:c4:ee:d3:
df:50:87:82:ad:c2:39:5a:46:d0:9d:e1:fc:4d:42:f3:db:25:
b9:0d:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:02:35 2026 by rpki-client