Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
File:                     AS62390.roa (raw, json)
Hash identifier:          TmuzeBNiRY01GRJ0ZNRHopba6EECo2LATcTlOqs1jGg=
Subject key identifier:   6A:24:2F:8E:50:36:B9:7C:AE:4E:49:24:E3:71:F9:19:24:4C:D6:EA
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5F86917F2FCE219FC93784EE75618341F8BD8EA4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
Signing time:             Tue 11 Aug 2026 00:00:21 +0000
ROA not before:           Mon 10 Aug 2026 23:55:21 +0000
ROA not after:            Tue 10 Aug 2027 00:00:21 +0000
asID:                     62390
IP address blocks:        82.27.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:86:91:7f:2f:ce:21:9f:c9:37:84:ee:75:61:83:41:f8:bd:8e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Aug 10 23:55:21 2026 GMT
            Not After : Aug 10 00:00:21 2027 GMT
        Subject: CN=6A242F8E5036B97CAE4E4924E371F919244CD6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:ac:f1:0c:68:c7:5e:39:f8:07:be:cd:da:
                    82:ea:8a:4b:85:b1:eb:8e:5f:79:44:3a:dc:48:76:
                    75:ff:c4:f7:cc:b1:05:69:2b:d5:0f:82:e3:4a:6c:
                    fd:d9:01:6e:03:f3:87:57:0f:a5:91:b2:94:7c:c9:
                    98:ac:f0:ee:eb:cd:0a:b7:aa:db:c6:53:ca:27:17:
                    e2:c4:80:9e:e1:35:1d:b1:dd:5c:09:a1:3d:0e:e0:
                    65:6c:5d:48:8a:af:41:72:c3:d9:9a:6f:3e:cd:bf:
                    28:9d:18:35:fd:b3:92:e4:f9:96:d5:46:3b:85:2f:
                    7a:4f:1e:f2:32:8f:38:60:e8:2a:8b:cb:38:c8:50:
                    1a:6c:bb:0a:c4:aa:dc:b1:c4:76:eb:eb:14:f9:3c:
                    9e:4b:93:6f:6f:bd:cf:43:f5:86:3c:af:9f:17:83:
                    a4:ce:6c:b8:7f:61:9c:3b:6a:08:6d:60:25:53:5a:
                    e0:27:4f:dd:e4:63:32:fb:22:d2:e3:ee:92:26:ba:
                    72:74:11:34:35:e2:9c:ad:f3:cc:9f:89:0d:34:a7:
                    b9:64:c9:2b:16:19:51:03:e6:a5:4f:09:ec:2d:fe:
                    ff:98:6b:2f:f5:ae:a7:43:2c:2c:85:a6:d5:c4:62:
                    74:a6:cb:bb:fb:54:ed:a5:09:6d:25:aa:a5:c9:a8:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:2F:8E:50:36:B9:7C:AE:4E:49:24:E3:71:F9:19:24:4C:D6:EA
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.27.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:2e:0f:0a:7d:74:51:39:6f:73:fd:ce:74:09:ac:a8:5a:
         5e:96:02:5f:9a:0e:f7:c3:b6:af:22:f4:2a:8b:7f:9c:b5:e0:
         41:a6:fa:b9:da:bc:77:b5:ca:6a:79:c5:bc:72:bd:ad:8d:04:
         0a:f2:f9:b2:5e:65:ac:cf:27:1f:b7:79:d6:58:6a:af:3e:c2:
         d1:e7:a6:a1:b9:b2:59:d8:a4:6a:07:03:83:65:35:fe:5e:d4:
         00:03:09:c1:f2:95:ef:55:9e:97:d2:b0:74:1e:bb:34:db:36:
         db:8d:44:bf:87:21:5b:7e:70:af:6e:47:48:6b:4d:d7:cf:71:
         0e:43:e2:18:a9:8e:8f:63:2a:65:cb:f4:47:f0:5a:36:b8:72:
         48:6a:a0:00:ca:e6:8a:19:ca:0e:53:51:be:1d:70:a6:9e:04:
         c9:50:8a:03:12:28:e2:69:00:45:6b:bf:b7:7f:68:ef:17:11:
         5a:40:85:6d:f7:2a:29:d8:e5:de:84:fa:01:62:f7:d0:43:fd:
         e0:dc:09:c5:c5:d9:67:76:7c:0e:fa:ca:c5:40:a8:c7:17:4e:
         d0:12:d9:51:2a:ed:e9:7c:96:5c:ee:5c:06:71:ad:b8:3f:66:
         3f:81:72:c6:05:33:d7:86:b8:7f:7d:6c:3e:77:8d:22:2a:cf:
         3f:62:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:30:03 2026 by rpki-client