Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6475.roa
File: AS6475.roa (raw, json)
Hash identifier: oqmsuewDU5HdO2z06LUlk0xuWXmEsrAaAr5wSSlMpns=
Subject key identifier: 04:71:3E:36:CF:6D:8A:B8:DB:9B:C6:7C:48:79:89:28:53:D4:07:74
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7D4C5EB0EFBBE9BFFD3448380FA5E891B39A0BC0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6475.roa
Signing time: Tue 01 Sep 2026 07:06:26 +0000
ROA not before: Tue 01 Sep 2026 07:01:26 +0000
ROA not after: Tue 31 Aug 2027 07:06:26 +0000
asID: 6475
IP address blocks: 168.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4c:5e:b0:ef:bb:e9:bf:fd:34:48:38:0f:a5:e8:91:b3:9a:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 07:01:26 2026 GMT
Not After : Aug 31 07:06:26 2027 GMT
Subject: CN=04713E36CF6D8AB8DB9BC67C4879892853D40774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:57:55:5e:9f:93:b0:8c:c0:b1:56:90:ac:42:
78:6a:a2:a5:a6:14:38:d8:69:a3:b9:1f:4f:ad:4d:
c2:df:f4:52:27:a1:13:38:8b:a5:24:14:f9:74:b8:
8a:06:ae:ae:5d:06:47:03:a6:64:4e:f1:ee:b7:c7:
be:7e:ea:53:69:1a:a0:db:73:98:66:4c:fa:06:b0:
38:ef:41:f8:3c:49:e3:7e:7f:55:5f:21:7f:a5:c8:
27:9a:1c:8f:0f:5b:50:06:30:e7:f5:12:c1:f9:68:
41:bd:19:b7:9a:e3:00:74:8b:91:28:39:e5:5a:3a:
8b:52:7f:2f:99:4a:7e:06:51:0d:a3:81:0e:eb:b1:
d4:d0:b2:e0:62:de:59:74:0e:c9:44:3a:87:fc:7f:
6f:84:f0:09:fb:de:d6:85:9b:ae:81:91:da:8b:23:
d0:be:9e:ec:e4:36:d2:d2:e6:08:76:53:5f:1a:ec:
2a:2b:f2:c0:51:f5:26:39:81:bd:83:00:f2:27:d6:
cb:9e:67:fd:b5:46:87:35:4d:5b:96:1e:56:0a:f0:
d9:b3:6d:5c:30:ed:c3:f0:56:ac:fa:f6:13:59:a3:
91:4d:09:27:4c:ba:ad:88:fe:d2:ec:9b:cf:8b:e6:
75:25:73:1b:80:50:a5:c6:ec:c1:83:d5:37:76:4b:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:71:3E:36:CF:6D:8A:B8:DB:9B:C6:7C:48:79:89:28:53:D4:07:74
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d3:92:1a:53:99:c1:28:a9:b7:ca:61:f7:9a:8c:59:5b:52:
be:e9:97:87:af:8a:5e:61:ba:c5:12:ff:15:41:4a:dc:0b:f4:
dc:dd:1e:88:6b:81:a7:91:2d:79:ac:dd:97:54:d2:02:bb:d5:
31:f0:55:68:05:56:7b:69:d1:b8:a9:52:1f:d0:2e:f0:de:c0:
66:81:f5:d9:15:aa:a8:57:83:af:60:84:4e:e9:13:29:30:20:
cf:b9:d3:c7:b2:b6:c8:8c:0b:9e:a2:77:bc:9a:68:01:94:a5:
4c:66:ac:5c:c3:cc:00:e0:03:26:db:c0:c6:c6:8b:81:41:b5:
b3:4e:97:e2:ae:cc:b6:db:73:3d:41:6c:e2:04:f5:88:77:51:
b1:e7:03:c4:6d:77:f5:9b:bd:66:b5:6a:fb:14:f0:5c:3c:35:
77:e0:dc:6a:1c:2f:cf:3b:82:ad:7d:6b:86:04:06:30:46:fb:
fc:b5:af:72:bc:ac:09:41:13:5e:81:a3:10:53:83:2b:ac:15:
4f:85:73:54:c9:12:b4:8f:44:88:97:87:48:64:da:c4:fb:48:
59:6d:1b:b9:5c:12:b3:49:c4:d0:64:6b:55:03:fa:3b:19:e3:
b8:8d:0a:3a:61:ab:e6:b1:20:5e:08:36:8e:73:1a:9b:3b:6e:
e0:fe:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:31 2026 by rpki-client