Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS62240.roa
File: AS62240.roa (raw, json)
Hash identifier: 9PXZVkwfe/4sUtvpSjgQDLb4V90gxu9u5mD6VJ8gK78=
Subject key identifier: 3F:F8:06:BC:26:23:67:5B:35:94:5E:FF:A7:2A:32:EF:0D:B4:BB:D4
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5988286844C9F48D191FAA4871C046B28E2DD1EF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS62240.roa
Signing time: Sat 20 Jun 2026 08:00:48 +0000
ROA not before: Sat 20 Jun 2026 07:55:48 +0000
ROA not after: Sat 19 Jun 2027 08:00:48 +0000
asID: 62240
IP address blocks: 51.194.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:88:28:68:44:c9:f4:8d:19:1f:aa:48:71:c0:46:b2:8e:2d:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 20 07:55:48 2026 GMT
Not After : Jun 19 08:00:48 2027 GMT
Subject: CN=3FF806BC2623675B35945EFFA72A32EF0DB4BBD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:ee:4d:44:57:93:9c:c7:b9:b1:fe:99:32:
87:c1:6f:49:52:7a:77:33:db:02:6b:d7:b7:9f:80:
a8:aa:29:20:08:fb:6a:00:4d:bf:77:d5:9a:f6:9f:
20:6c:05:5f:a2:f8:fb:b0:32:ef:ff:e8:f4:b5:96:
05:10:89:63:96:8d:15:da:f2:17:8f:6b:31:d0:5e:
2f:a2:d9:3d:a1:4f:5e:9f:06:ab:99:35:9d:b8:85:
d4:7d:c5:5b:e1:84:77:ad:ac:16:f2:0f:82:04:d5:
dc:e3:18:29:a5:1d:45:b4:7a:40:7d:86:38:ac:41:
12:31:a0:01:1e:86:09:d9:b1:73:9e:dd:59:3d:94:
40:3f:6f:f0:b4:89:26:8a:05:30:2a:dc:82:dd:78:
8d:13:bd:41:90:a3:40:dd:9b:47:20:1e:1e:b2:5c:
ce:29:ab:3c:59:e4:9d:29:eb:77:c6:a4:09:f3:c9:
ef:b5:98:ce:7e:ff:98:8a:ba:90:3d:90:e3:2b:d7:
a0:4c:b6:8a:34:29:71:ec:ba:04:e2:6a:6a:4f:5c:
e2:d8:00:44:63:98:36:00:87:44:3c:5f:ce:fa:49:
60:89:df:f8:d6:e8:cb:ed:e4:dd:71:09:55:67:aa:
cf:0a:5e:22:d2:01:27:67:20:9a:f3:97:f3:c3:fc:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:06:BC:26:23:67:5B:35:94:5E:FF:A7:2A:32:EF:0D:B4:BB:D4
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS62240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f9:db:d8:8f:45:8f:ca:63:e4:4a:fa:13:2a:27:ba:15:16:
54:1b:f2:72:b5:35:ca:9a:50:56:55:78:f4:a0:9b:ed:9b:6b:
fd:69:bb:ab:1b:0c:15:cf:06:0d:50:49:d7:15:6c:15:1d:93:
f5:2c:8c:52:e5:27:11:6b:14:47:85:c9:9c:4c:6a:7b:22:68:
11:b7:35:d0:2d:13:76:d1:dd:96:26:7a:3b:cb:ec:16:f9:6f:
ea:86:02:75:7a:72:85:2e:9b:50:7c:d3:5a:a6:88:c9:57:ce:
07:b8:94:12:db:b8:98:2e:cd:48:8e:aa:e6:48:88:3f:b9:8b:
d8:ef:e6:65:21:37:df:c1:ad:04:07:cc:9e:71:4d:a4:89:2c:
db:02:2f:de:29:2e:5e:fd:f8:fd:d6:6a:ce:ed:82:1c:72:8f:
1e:65:95:4d:a3:38:06:9f:95:4b:18:60:81:25:b6:33:ba:ba:
ef:ea:5e:a6:ee:7e:68:36:4f:13:f2:d5:3f:f5:5c:a8:50:5f:
3a:d2:8f:21:c9:5e:fb:c2:bb:b2:e3:48:23:6f:97:d5:01:4a:
d8:5c:a8:07:b0:29:4e:93:42:70:79:88:c2:18:ab:56:e1:1e:
bb:29:12:a5:7a:74:98:a7:7d:34:1f:98:5c:2d:b6:46:5e:a1:
ed:e4:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:44:56 2026 by rpki-client