Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS6233.roa
File: AS6233.roa (raw, json)
Hash identifier: pumREpV4EdjVcrCQLciTyxkr9zngdREJidotgehGtp0=
Subject key identifier: 29:38:74:3E:20:E5:75:D1:5A:8D:8E:50:A2:D1:AF:CD:7D:57:05:24
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 51C0012653FF9952DEF9E33E15EE4DDC03EFA12C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS6233.roa
Signing time: Wed 29 Jul 2026 15:25:12 +0000
ROA not before: Wed 29 Jul 2026 15:20:12 +0000
ROA not after: Wed 28 Jul 2027 15:25:12 +0000
asID: 6233
IP address blocks: 201.4.32.0/19 maxlen: 24
201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c0:01:26:53:ff:99:52:de:f9:e3:3e:15:ee:4d:dc:03:ef:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:12 2026 GMT
Not After : Jul 28 15:25:12 2027 GMT
Subject: CN=2938743E20E575D15A8D8E50A2D1AFCD7D570524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:1f:92:a9:01:47:c5:13:99:9b:2d:52:0b:
39:6b:fd:46:8d:37:62:b2:76:a7:fa:38:fe:4a:23:
1c:01:d2:16:06:09:6b:11:04:b3:e2:4d:53:16:4d:
6a:13:5d:0d:bf:9d:54:59:31:56:9c:50:ef:d5:71:
bf:6f:99:b4:9c:f5:fa:f1:f3:4e:12:1d:30:35:9c:
db:37:4b:ea:4e:d5:fc:85:bc:d7:4a:2a:ab:66:c1:
fd:4d:e3:97:5a:c7:4f:fe:d7:3f:31:51:7e:f3:4f:
cd:f8:69:45:1c:00:4e:2c:7c:59:5b:be:43:78:79:
29:3e:79:10:e0:9f:6c:51:d1:95:33:36:2f:01:36:
aa:d4:b8:9f:82:0b:4a:b3:26:56:68:67:9b:88:a6:
f2:04:cd:c8:26:b4:d9:09:49:c5:91:50:50:d4:82:
3b:c4:58:02:c0:44:5f:7f:8c:cc:03:60:ca:d7:8f:
4d:7c:45:bd:7e:22:8a:a4:ff:1a:d4:34:86:7c:7e:
75:de:07:ba:d6:d5:42:29:a4:74:12:3b:d6:37:5c:
95:3b:96:72:a4:b0:47:d3:be:71:8f:2f:82:79:d4:
85:c6:d0:fc:bb:6a:42:15:c8:92:9d:f4:fe:8b:19:
9d:b4:74:b3:e6:c0:c2:90:1a:53:8c:27:ad:82:ec:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:74:3E:20:E5:75:D1:5A:8D:8E:50:A2:D1:AF:CD:7D:57:05:24
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS6233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
76:d2:05:ea:0d:5f:86:f5:f4:a1:ba:2d:43:99:51:f0:39:7a:
a6:40:f2:b2:fe:ce:b0:e4:af:2c:41:4f:38:83:75:02:26:b4:
1c:dd:2f:21:bf:14:0c:59:d9:ef:fe:54:4b:b3:7c:ec:46:cc:
00:eb:90:2c:b5:27:26:f1:85:34:d5:a2:84:a8:72:c0:32:89:
09:6b:68:d2:fe:4c:64:3e:5e:47:e0:24:aa:bc:15:63:7b:2d:
f7:cd:47:6b:39:8c:9a:ab:32:d1:37:59:5f:ba:f7:f7:fa:15:
c7:0e:d5:ba:8d:3c:7e:73:8a:72:48:4d:0d:01:e2:40:1a:fa:
fa:b4:3c:84:89:e5:ee:06:af:3f:99:1f:db:de:cb:1b:4a:e4:
bc:7a:90:74:c3:0a:27:7d:ab:ec:14:3e:46:30:fa:e3:dc:78:
f9:a9:8c:1b:25:03:d9:a1:97:0b:27:6f:9d:fa:d8:2c:41:f6:
84:ab:13:72:19:ea:43:0f:79:8b:f8:38:5e:2f:b4:93:c9:e4:
c1:5f:82:db:7a:8c:ee:75:77:61:36:4e:84:2a:e7:41:82:75:
dc:0f:3d:5f:8a:ab:27:c0:0d:7c:21:89:2b:86:23:a4:77:be:
20:5b:2f:ee:98:69:08:10:85:cd:a8:50:99:f7:88:3e:2a:9f:
1d:c5:9d:a5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUUcABJlP/mVLe+eM+Fe5N3APvoSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjkxNTIwMTJaFw0yNzA3MjgxNTI1MTJaMDMxMTAvBgNV
BAMTKDI5Mzg3NDNFMjBFNTc1RDE1QThEOEU1MEEyRDFBRkNEN0Q1NzA1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvh+SqQFHxROZmy1SCzlr/UaN
N2Kydqf6OP5KIxwB0hYGCWsRBLPiTVMWTWoTXQ2/nVRZMVacUO/Vcb9vmbSc9frx
804SHTA1nNs3S+pO1fyFvNdKKqtmwf1N45dax0/+1z8xUX7zT834aUUcAE4sfFlb
vkN4eSk+eRDgn2xR0ZUzNi8BNqrUuJ+CC0qzJlZoZ5uIpvIEzcgmtNkJScWRUFDU
gjvEWALARF9/jMwDYMrXj018Rb1+Ioqk/xrUNIZ8fnXeB7rW1UIppHQSO9Y3XJU7
lnKksEfTvnGPL4J51IXG0Py7akIVyJKd9P6LGZ20dLPmwMKQGlOMJ62C7GCtAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUKTh0PiDlddFajY5QotGvzX1XBSQwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTNjIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBckEIAME
BckyIDANBgkqhkiG9w0BAQsFAAOCAQEAdtIF6g1fhvX0obotQ5lR8Dl6pkDysv7O
sOSvLEFPOIN1Aia0HN0vIb8UDFnZ7/5US7N87EbMAOuQLLUnJvGFNNWihKhywDKJ
CWto0v5MZD5eR+AkqrwVY3st981HazmMmqsy0TdZX7r39/oVxw7Vuo08fnOKckhN
DQHiQBr6+rQ8hInl7gavP5kf297LG0rkvHqQdMMKJ32r7BQ+RjD649x4+amMGyUD
2aGXCydvnfrYLEH2hKsTchnqQw95i/g4Xi+0k8nkwV+C23qM7nV3YTZOhCrnQYJ1
3A89X4qrJ8ANfCGJK4YjpHe+IFsv7phpCBCFzahQmfeIPiqfHcWdpQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:21 2026 by rpki-client