Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62068.roa
File: AS62068.roa (raw, json)
Hash identifier: 5aqjKzdV1gxmIodWqHhuTv42+JMmQ+ekSUL4uYyjkvI=
Subject key identifier: 33:EF:95:20:9E:1D:C8:D6:6C:14:FE:6B:5E:88:C4:58:1F:1A:E6:C2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 679893F922AB3E851AE640AECD5E0FDE4DE43891
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62068.roa
Signing time: Sun 06 Sep 2026 12:02:33 +0000
ROA not before: Sun 06 Sep 2026 11:57:33 +0000
ROA not after: Sun 05 Sep 2027 12:02:33 +0000
asID: 62068
IP address blocks: 82.21.160.0/24 maxlen: 24
82.21.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:98:93:f9:22:ab:3e:85:1a:e6:40:ae:cd:5e:0f:de:4d:e4:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 6 11:57:33 2026 GMT
Not After : Sep 5 12:02:33 2027 GMT
Subject: CN=33EF95209E1DC8D66C14FE6B5E88C4581F1AE6C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:42:43:30:6c:a5:5a:1f:c6:52:43:73:24:
5d:92:5b:33:9b:ca:68:90:db:00:8f:90:86:e1:87:
31:d6:7c:d9:6b:69:62:28:28:39:a2:62:62:fa:5c:
31:29:12:bc:57:51:92:db:11:bf:53:e9:47:b9:21:
4c:c0:a1:15:84:5c:37:41:52:0d:9b:cc:2e:e7:af:
06:57:f6:30:dc:19:0a:9a:1b:ce:88:27:bd:1c:25:
36:54:a6:71:a5:e3:58:4e:74:eb:e0:33:f0:d0:aa:
cf:bb:dc:6d:06:d6:f8:e0:1e:a4:9c:a6:1e:6c:41:
5d:fb:ef:2d:2f:c7:42:0d:89:6d:76:74:39:ea:53:
89:54:cf:ed:b8:66:eb:80:d3:a4:e4:4d:0d:1b:39:
d7:78:d8:24:87:9f:f6:cb:27:06:72:52:07:ae:7c:
04:3a:af:8c:a5:3f:d8:fa:3c:5b:a7:09:43:08:59:
c6:49:1f:86:79:86:c0:68:a4:ad:25:67:21:64:2d:
eb:cd:7c:0d:df:77:e6:5f:ca:13:9f:13:8e:ac:5d:
9f:2b:2c:83:94:f7:7d:5d:8d:2a:d5:d3:bc:e2:82:
9e:23:3d:9f:97:e5:08:60:d0:ca:73:90:c6:e0:ff:
62:dd:19:ca:22:64:56:34:b2:be:96:c5:e6:75:23:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:95:20:9E:1D:C8:D6:6C:14:FE:6B:5E:88:C4:58:1F:1A:E6:C2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.160.0/23
Signature Algorithm: sha256WithRSAEncryption
77:06:5a:a0:31:4f:28:f2:9e:d4:6c:3a:8b:13:0a:07:7c:15:
ea:7b:ec:52:9d:26:0c:02:b4:70:00:00:10:64:07:be:bc:cf:
91:a8:52:0e:f7:93:0d:db:8b:85:00:7b:f8:30:2f:75:4a:a2:
7e:b5:82:76:61:40:0d:f4:57:e3:48:da:c1:5b:a5:03:cd:92:
77:70:aa:cc:f3:54:81:b5:9a:76:c8:f5:7b:a3:8d:54:78:15:
ae:1a:54:1c:9a:6e:7e:67:c8:99:d8:51:bf:b7:76:ce:35:3d:
d9:ed:77:cd:2c:06:44:3f:bc:ee:f7:08:c6:20:5e:ed:fe:7c:
52:f0:e5:e1:c2:e4:4b:c4:32:45:be:c9:ea:04:44:99:f6:3c:
f6:9a:88:c8:00:e9:ec:bb:50:ce:ee:ed:3a:c6:96:e9:01:70:
a8:9f:bf:41:11:6d:0c:b2:94:f2:25:ad:f2:b5:cb:3a:7c:bd:
37:e1:9c:37:e5:26:24:48:db:4b:64:86:59:d1:82:2b:1c:c8:
f2:9b:4b:88:63:c6:36:8a:e8:51:0b:a2:ee:9c:99:92:ce:00:
ed:49:7c:86:d4:c2:18:0b:a2:f0:8f:eb:a8:76:1f:97:a3:78:
4a:59:37:e1:37:da:29:74:62:6d:47:5d:43:8c:50:5f:0e:cb:
fb:13:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:08:31 2026 by rpki-client