Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6939.roa
File: AS6939.roa (raw, json)
Hash identifier: MgY8SwVDXvL6vqEa7BvqkEULdFmJtUCDb4Q4RHjMhj0=
Subject key identifier: F1:CB:ED:91:6F:64:FD:CE:22:00:88:01:C1:E0:AB:D9:DB:95:FB:76
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2D4FA95F18E8261411C8AF5A660BFD9AB3161411
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6939.roa
Signing time: Thu 29 Oct 2026 14:01:33 +0000
ROA not before: Thu 29 Oct 2026 13:56:33 +0000
ROA not after: Thu 28 Oct 2027 14:01:33 +0000
asID: 6939
IP address blocks: 51.194.192.0/24 maxlen: 24
51.194.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4f:a9:5f:18:e8:26:14:11:c8:af:5a:66:0b:fd:9a:b3:16:14:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 13:56:33 2026 GMT
Not After : Oct 28 14:01:33 2027 GMT
Subject: CN=F1CBED916F64FDCE22008801C1E0ABD9DB95FB76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:cc:49:45:99:44:81:54:6d:b6:81:e8:47:
d0:9f:38:0b:97:01:44:d3:45:f6:6e:41:8e:21:60:
33:55:bc:ac:81:88:59:6e:ad:a4:b6:6f:1a:6c:62:
39:35:0f:ec:e7:61:06:8c:70:c0:99:bb:8d:49:72:
99:bd:b0:b1:4d:68:cf:ab:04:1d:8c:c9:db:bc:83:
79:b2:c5:60:22:ca:ca:05:86:16:36:c8:85:e9:52:
43:5b:2e:84:82:a0:29:3e:50:54:4a:04:58:ca:ee:
f9:89:cc:49:1f:ec:6c:20:b7:d1:7a:33:52:5c:eb:
10:f4:f6:d4:5d:f9:15:ab:4f:c5:83:b4:49:37:0b:
09:e6:91:8d:dd:db:23:26:ae:57:38:33:9e:9a:81:
fb:03:6f:3c:cd:f7:40:ef:ea:d6:46:40:54:3c:7b:
1b:2d:d7:6a:05:47:1c:c5:a2:25:87:de:e0:2d:ff:
28:7d:1b:ac:93:f7:37:02:43:ac:c3:f5:a1:73:07:
4e:4b:8c:2d:01:e8:8c:16:8c:47:96:d5:f3:75:41:
d2:6a:05:1b:aa:14:c7:09:2b:6f:09:cc:fd:08:0a:
66:da:7f:03:8f:2e:a8:71:bf:e9:13:2a:9f:49:5f:
86:60:b3:98:41:b1:d0:e0:70:01:40:0c:48:76:3c:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:ED:91:6F:64:FD:CE:22:00:88:01:C1:E0:AB:D9:DB:95:FB:76
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.192.0/24
51.194.207.0/24
Signature Algorithm: sha256WithRSAEncryption
87:67:10:b4:37:29:58:ca:2f:31:82:82:27:5f:b8:00:f0:ea:
3d:f5:43:58:47:4a:4f:96:80:fe:8b:67:06:42:4d:62:0c:5f:
b3:12:f8:04:7b:1d:22:45:36:e5:24:88:b9:c5:b7:9f:cd:24:
72:c8:61:79:b8:ed:c1:ba:f4:1f:e5:43:b9:99:41:33:10:42:
f1:94:57:3a:77:41:91:b4:68:f4:8e:38:96:ef:1a:73:ae:94:
82:67:0f:01:03:46:cf:7c:ee:8f:eb:a7:11:36:82:8a:76:86:
78:70:75:d7:a8:8f:48:39:75:04:ec:dd:22:cf:dd:59:d3:b2:
e5:8d:cb:83:2d:67:b3:27:43:a4:92:f1:96:39:31:ef:a6:0e:
56:cc:b7:e2:06:79:f8:e5:fc:1c:9c:11:8c:20:a4:a1:ba:e1:
5a:4e:b9:ac:d7:cf:da:83:a9:2f:79:ba:47:4a:dd:ae:1a:2a:
e3:95:95:4b:db:3a:b1:0b:56:02:1a:fd:32:ed:91:4b:5f:e8:
d2:5e:13:84:a5:6a:00:da:f3:21:8a:57:7b:2a:8d:1b:12:b8:
f9:dd:dd:6a:f4:fd:d7:08:b9:d4:ef:dc:ca:19:03:c9:4e:63:
63:cb:58:8a:bc:cf:67:eb:23:18:38:d2:bf:25:7e:b7:69:fe:
cc:5b:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:25:15 2026 by rpki-client