Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: jkhGYM17Y+j7Fg9uY4sxSFGBsUw7rKDln7FHQreudj4=
Subject key identifier: 43:70:9E:90:AD:1C:25:3F:B5:55:05:54:7D:74:DD:5A:ED:1E:C3:FF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C42EE54914BE72A4A36E92A88A31C05625C1E9F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
Signing time: Fri 17 Apr 2026 08:34:12 +0000
ROA not before: Fri 17 Apr 2026 08:29:12 +0000
ROA not after: Fri 16 Apr 2027 08:34:12 +0000
asID: 62240
IP address blocks: 82.27.93.0/24 maxlen: 24
82.38.112.0/22 maxlen: 22
82.38.146.0/24 maxlen: 24
82.39.110.0/24 maxlen: 24
82.39.232.0/24 maxlen: 24
178.83.44.0/22 maxlen: 22
178.83.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:42:ee:54:91:4b:e7:2a:4a:36:e9:2a:88:a3:1c:05:62:5c:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 17 08:29:12 2026 GMT
Not After : Apr 16 08:34:12 2027 GMT
Subject: CN=43709E90AD1C253FB55505547D74DD5AED1EC3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:fe:ef:bb:36:5c:09:ef:70:d5:b2:52:b6:
2c:54:50:6b:97:1c:5a:9d:6d:72:7f:e5:45:61:8c:
2a:26:ae:cd:42:b6:0e:f7:4a:b7:82:ec:77:f3:af:
ee:e7:25:6a:d5:51:28:5d:a8:11:8e:f8:2a:5a:3e:
47:7e:69:27:1a:c4:cf:d0:88:df:99:64:dd:f8:66:
fc:23:8c:73:e0:99:67:49:6e:ab:7b:0d:b1:a5:34:
86:73:d2:bb:4a:ac:19:e9:ab:e7:4e:2c:8b:72:7e:
50:32:cd:ab:12:6e:4c:34:ec:07:c5:b0:f6:34:d4:
3c:bb:f0:5c:8c:c4:c8:c8:8d:04:5d:31:08:2a:60:
fe:12:a5:16:2b:5e:b5:98:b0:68:87:06:3f:2a:1f:
fb:75:45:8a:20:55:8f:ff:3b:01:f1:5a:28:bf:4e:
87:89:ed:cb:36:55:85:b9:35:56:50:49:84:0f:6d:
d6:29:f9:a0:06:06:7b:6e:84:47:1c:07:b5:1b:c5:
d0:46:9e:6e:b7:11:95:b8:46:78:13:0f:ba:21:80:
e3:eb:82:87:29:dd:0b:d3:2e:2a:38:a2:95:f8:7a:
9f:f9:d1:b2:8c:7b:fa:0c:6a:51:ef:e5:97:aa:62:
1f:a1:c7:06:e3:83:72:eb:32:e0:20:cf:f7:71:26:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:9E:90:AD:1C:25:3F:B5:55:05:54:7D:74:DD:5A:ED:1E:C3:FF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.93.0/24
82.38.112.0/22
82.38.146.0/24
82.39.110.0/24
82.39.232.0/24
178.83.44.0/22
178.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
37:40:76:20:17:37:82:f9:b8:45:95:c8:6e:47:9c:86:57:36:
69:1c:3c:f7:96:4b:4b:72:72:88:6c:2c:c7:c0:51:34:04:44:
ee:ce:6e:86:c9:2e:a7:ff:70:fc:03:b5:b0:fa:39:bb:b8:af:
2f:53:e4:bb:7b:a4:48:17:46:aa:96:7c:9e:44:48:92:3c:bb:
21:5a:a2:b0:16:7a:ab:82:ef:cc:58:3e:79:8e:ed:ca:e9:83:
da:4d:b8:5f:58:e6:38:83:20:70:d6:95:65:16:3c:46:9b:4d:
90:1a:1b:16:83:dc:ee:18:3f:b3:9a:4b:a4:be:eb:71:be:57:
a8:3a:4d:8a:89:71:c4:30:69:fd:ab:66:79:7b:b9:d6:60:6c:
99:58:8f:1e:cf:e2:e9:5f:44:f1:88:b4:54:e1:11:10:c3:a5:
5c:95:df:e9:26:72:b6:b2:ea:95:34:a6:da:f1:01:3b:ea:f4:
7a:29:f2:56:58:71:fd:0e:da:4a:74:f1:02:39:60:5a:de:b3:
61:88:16:8a:45:7c:85:1d:df:ef:66:31:f5:bf:d9:3f:9f:23:
65:f7:5a:4c:e2:d8:fe:84:c4:fc:b9:64:85:8d:46:9c:81:a9:
94:38:e9:ef:bc:6e:4e:ef:40:28:f5:e0:1f:84:99:44:68:d1:
60:63:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:38:34 2026 by rpki-client