Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
File: AS62068.roa (raw, json)
Hash identifier: cbJ9jAFbkyiZeync979ILK6+wSc4dVEzRIY7kQaNZ64=
Subject key identifier: B9:EF:CE:E4:BB:CA:13:85:9D:64:8A:47:45:C9:76:7F:15:D1:98:72
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 24A776F5E09AE022394F93739894F77B5A20505A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
Signing time: Thu 05 Mar 2026 10:46:45 +0000
ROA not before: Thu 05 Mar 2026 10:41:45 +0000
ROA not after: Thu 04 Mar 2027 10:46:45 +0000
asID: 62068
IP address blocks: 141.11.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a7:76:f5:e0:9a:e0:22:39:4f:93:73:98:94:f7:7b:5a:20:50:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 5 10:41:45 2026 GMT
Not After : Mar 4 10:46:45 2027 GMT
Subject: CN=B9EFCEE4BBCA13859D648A4745C9767F15D19872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:02:86:e8:6f:cd:da:c6:ea:f5:3a:57:58:
9c:51:62:ec:0c:60:cf:09:34:ac:70:3f:2d:3a:04:
c3:d6:a0:5d:26:8a:1a:8d:5c:e8:f0:90:c3:07:21:
0c:74:51:c5:ea:e9:16:42:fd:05:78:ed:0a:1d:fd:
cc:be:ef:68:02:c4:35:19:91:f6:d2:96:b9:62:18:
3f:f6:64:14:26:6e:6d:ce:a9:89:c8:97:6b:09:dc:
29:8d:2f:be:21:16:ec:fb:80:3c:d8:55:ab:68:e4:
b1:ca:ad:a0:96:8d:c7:56:48:24:25:b5:5b:c1:e3:
81:b9:43:4b:d2:ef:a1:a8:01:a9:5b:f0:57:c1:e4:
d6:ed:8a:3d:0a:31:de:ad:7e:a4:6b:4b:69:97:34:
99:44:4e:18:78:42:23:92:5b:da:cf:36:a5:c0:59:
50:62:3d:3c:8c:ad:ab:9d:9f:e5:11:07:aa:9e:28:
ee:d0:85:85:6e:0b:4c:d0:ec:d3:45:bc:63:8a:94:
74:52:1f:ed:87:0e:04:52:5d:2a:a5:87:4f:13:d1:
36:62:0e:ea:e3:05:ba:80:19:0f:75:f4:86:1b:8b:
2b:2e:4b:0b:7b:92:8f:a5:98:87:bc:47:f7:f6:d5:
f5:4c:d6:4e:21:be:5f:67:5a:b6:49:e4:2d:08:e9:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:CE:E4:BB:CA:13:85:9D:64:8A:47:45:C9:76:7F:15:D1:98:72
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS62068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.244.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:cb:01:01:60:4f:81:9b:1b:9a:d7:d7:ce:d2:ad:87:9a:7c:
31:a7:a9:10:4e:21:22:dd:8a:17:fc:62:b5:4d:55:ac:af:8a:
f1:6e:de:55:bf:06:fb:74:2c:11:98:11:2d:6e:70:ea:ad:dc:
e6:40:24:79:dc:f3:79:f5:e1:70:92:bc:42:91:74:8d:55:b2:
c4:90:20:42:4f:b0:c3:87:4a:5e:71:d7:df:d6:ab:da:e8:44:
97:75:f3:03:25:05:db:cf:8c:fd:2a:1c:2f:c0:35:52:86:6d:
a5:24:aa:9e:a0:1e:4b:f3:2c:df:5d:f9:d4:57:9d:0b:0d:b3:
af:9d:aa:7e:5f:f6:26:ca:ac:4f:88:70:3d:03:d7:92:a4:2d:
00:82:ee:9b:73:c2:7e:bc:99:64:2c:ab:fc:42:be:f1:12:26:
20:ff:69:6c:52:1f:6a:06:7b:8f:45:6d:59:a8:0b:62:9e:9e:
dc:e4:3e:9b:1a:92:71:84:93:80:1e:c1:25:34:8d:b6:26:b5:
ca:0b:a4:ff:92:44:02:9f:d8:5f:23:af:f9:50:fa:b6:5a:88:
b8:d1:30:7f:bd:69:6c:03:ca:0d:a0:69:4b:4a:5d:12:78:8a:
f7:35:99:37:76:b8:63:83:9b:48:87:2c:ca:aa:02:73:97:1b:
00:1d:ba:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJKd29eCa4CI5T5NzmJT3e1ogUFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjAzMDUxMDQxNDVaFw0yNzAzMDQxMDQ2NDVaMDMxMTAvBgNV
BAMTKEI5RUZDRUU0QkJDQTEzODU5RDY0OEE0NzQ1Qzk3NjdGMTVEMTk4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNswKG6G/N2sbq9TpXWJxRYuwM
YM8JNKxwPy06BMPWoF0mihqNXOjwkMMHIQx0UcXq6RZC/QV47Qod/cy+72gCxDUZ
kfbSlrliGD/2ZBQmbm3OqYnIl2sJ3CmNL74hFuz7gDzYVato5LHKraCWjcdWSCQl
tVvB44G5Q0vS76GoAalb8FfB5Nbtij0KMd6tfqRrS2mXNJlEThh4QiOSW9rPNqXA
WVBiPTyMraudn+URB6qeKO7QhYVuC0zQ7NNFvGOKlHRSH+2HDgRSXSqlh08T0TZi
DurjBbqAGQ919IYbiysuSwt7ko+lmIe8R/f21fVM1k4hvl9nWrZJ5C0I6YINAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUue/O5LvKE4WdZIpHRcl2fxXRmHIwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjIwNjgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC/Qw
DQYJKoZIhvcNAQELBQADggEBAMbLAQFgT4GbG5rX187SrYeafDGnqRBOISLdihf8
YrVNVayvivFu3lW/Bvt0LBGYES1ucOqt3OZAJHnc83n14XCSvEKRdI1VssSQIEJP
sMOHSl5x19/Wq9roRJd18wMlBdvPjP0qHC/ANVKGbaUkqp6gHkvzLN9d+dRXnQsN
s6+dqn5f9ibKrE+IcD0D15KkLQCC7ptzwn68mWQsq/xCvvESJiD/aWxSH2oGe49F
bVmoC2KentzkPpsaknGEk4AewSU0jbYmtcoLpP+SRAKf2F8jr/lQ+rZaiLjRMH+9
aWwDyg2gaUtKXRJ4ivc1mTd2uGODm0iHLMqqAnOXGwAduq0=
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:09:46 2026 by rpki-client