Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62390.roa
File: AS62390.roa (raw, json)
Hash identifier: ZlLOJK9cjQQLUe3paDj0e3Ogo0L63Yikr9/5uOUW/qI=
Subject key identifier: 0D:FC:63:19:1E:15:22:48:FC:CC:ED:F0:ED:26:E7:35:03:12:E6:D3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0EC5B2DC536EDFBB80F0F12A0835CADC4466F30D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62390.roa
Signing time: Mon 05 Oct 2026 12:55:39 +0000
ROA not before: Mon 05 Oct 2026 12:50:39 +0000
ROA not after: Mon 04 Oct 2027 12:55:39 +0000
asID: 62390
IP address blocks: 91.124.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c5:b2:dc:53:6e:df:bb:80:f0:f1:2a:08:35:ca:dc:44:66:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 5 12:50:39 2026 GMT
Not After : Oct 4 12:55:39 2027 GMT
Subject: CN=0DFC63191E152248FCCCEDF0ED26E7350312E6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:d1:11:8a:43:fd:d0:b1:55:63:36:8a:3c:
19:03:5e:7d:ef:71:9e:e4:0e:1d:65:c5:30:6c:8a:
44:54:fb:6a:66:27:c5:f4:ee:fa:f8:fa:48:fd:14:
3d:e7:9d:3a:e0:e1:e3:f8:bc:76:66:83:fc:c8:51:
8f:e6:5b:ef:2e:23:44:6b:d9:b8:c0:12:87:ea:7d:
b8:c4:2e:a2:c5:e4:a1:9d:74:00:8b:a8:17:45:24:
f3:57:1d:96:83:9a:25:fe:e5:dd:10:52:bf:ec:e3:
66:7d:36:6c:92:9c:48:01:b2:af:32:b6:43:1d:a4:
04:de:b5:04:09:9f:1a:71:3c:ab:2d:5c:28:01:18:
b5:43:19:3e:af:5c:df:67:df:e7:66:17:3f:7d:f6:
c0:02:64:72:73:af:d5:7d:92:db:5a:02:2b:06:12:
18:ab:b6:08:27:87:c9:46:48:70:f4:a6:ab:ee:ef:
11:15:fe:89:d9:d5:e4:b9:84:63:8c:1f:67:20:9d:
50:ca:40:09:1c:e2:9e:a4:79:98:34:af:8c:9c:01:
1c:be:c3:ac:1f:3d:33:4e:d3:80:17:cd:c1:77:b9:
bc:ad:d3:4e:a8:de:e1:84:84:96:da:ef:ca:e6:aa:
6e:b0:46:de:10:09:32:8f:bf:9d:9b:f2:bf:b1:90:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:63:19:1E:15:22:48:FC:CC:ED:F0:ED:26:E7:35:03:12:E6:D3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:00:c2:f9:41:ee:21:29:da:87:93:7b:d0:4c:2d:93:b0:8c:
d8:f9:cf:45:f0:29:6a:58:8f:b1:54:60:61:cf:05:54:07:8c:
ab:d7:f4:95:76:a7:0d:65:6b:4d:a8:cb:a2:86:58:35:df:5b:
f8:c9:ec:08:c5:1f:a0:b6:a5:24:7c:57:f0:b7:c7:6e:1a:74:
a1:a3:76:78:63:2e:0c:4e:9b:27:4e:39:b6:c1:2a:62:8a:e8:
d4:e9:9d:1c:58:25:81:19:de:e1:2f:32:a5:86:0c:2b:b0:9f:
b4:18:2e:2e:c3:32:5a:47:96:75:1a:b4:84:35:3c:ea:06:9d:
85:2f:83:2b:eb:8f:88:17:f8:00:2f:b7:70:c3:76:c6:40:0f:
ba:7c:a3:8a:8f:46:6b:c1:5f:0f:8d:f9:d5:2b:77:19:79:e5:
58:49:9a:61:04:86:1d:bd:4c:fe:bb:df:6c:a3:34:f0:24:21:
f7:3c:ce:c7:0b:f6:01:9d:8c:04:96:08:e2:be:eb:2e:12:8c:
64:ec:1d:ae:34:23:51:03:9a:72:18:fa:5b:33:ae:65:76:40:
0b:55:ae:bc:5e:8e:63:27:1f:69:a4:d5:4b:f5:ac:be:5d:b1:
33:a9:41:98:e6:f3:a0:e5:d2:62:4e:5d:ed:be:35:b8:67:0b:
5e:cc:ea:b0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUDsWy3FNu37uA8PEqCDXK3ERm8w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMDUxMjUwMzlaFw0yNzEwMDQxMjU1MzlaMDMxMTAvBgNV
BAMTKDBERkM2MzE5MUUxNTIyNDhGQ0NDRURGMEVEMjZFNzM1MDMxMkU2RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPtERikP90LFVYzaKPBkDXn3v
cZ7kDh1lxTBsikRU+2pmJ8X07vr4+kj9FD3nnTrg4eP4vHZmg/zIUY/mW+8uI0Rr
2bjAEofqfbjELqLF5KGddACLqBdFJPNXHZaDmiX+5d0QUr/s42Z9NmySnEgBsq8y
tkMdpATetQQJnxpxPKstXCgBGLVDGT6vXN9n3+dmFz999sACZHJzr9V9kttaAisG
Ehirtggnh8lGSHD0pqvu7xEV/onZ1eS5hGOMH2cgnVDKQAkc4p6keZg0r4ycARy+
w6wfPTNO04AXzcF3ubyt006o3uGEhJba78rmqm6wRt4QCTKPv52b8r+xkPILAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUDfxjGR4VIkj8zO3w7SbnNQMS5tMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjIzOTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABbfCgw
DQYJKoZIhvcNAQELBQADggEBAEoAwvlB7iEp2oeTe9BMLZOwjNj5z0XwKWpYj7FU
YGHPBVQHjKvX9JV2pw1la02oy6KGWDXfW/jJ7AjFH6C2pSR8V/C3x24adKGjdnhj
LgxOmydOObbBKmKK6NTpnRxYJYEZ3uEvMqWGDCuwn7QYLi7DMlpHlnUatIQ1POoG
nYUvgyvrj4gX+AAvt3DDdsZAD7p8o4qPRmvBXw+N+dUrdxl55VhJmmEEhh29TP67
32yjNPAkIfc8zscL9gGdjASWCOK+6y4SjGTsHa40I1EDmnIY+lszrmV2QAtVrrxe
jmMnH2mk1Uv1rL5dsTOpQZjm86Dl0mJOXe2+NbhnC17M6rA=
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:04:37 2026 by rpki-client