Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS6517.roa
File: AS6517.roa (raw, json)
Hash identifier: rMttNA8vTqdF+dOCCi1dZq2RhOo/BVPyi0xv0yoWB44=
Subject key identifier: 29:F8:40:AF:EC:E2:D3:61:E6:26:12:F9:1F:D1:78:D5:F7:B1:9A:E5
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1B91ABB8D939CB8C4C66EB2F9EF21A3C5B7B86A7
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS6517.roa
Signing time: Mon 29 Jun 2026 00:32:04 +0000
ROA not before: Mon 29 Jun 2026 00:27:04 +0000
ROA not after: Mon 28 Jun 2027 00:32:04 +0000
asID: 6517
IP address blocks: 2a14:7580:f600::/40 maxlen: 40
2a14:7583:5e00::/40 maxlen: 48
2a14:7583:a400::/38 maxlen: 48
2a14:7584:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:91:ab:b8:d9:39:cb:8c:4c:66:eb:2f:9e:f2:1a:3c:5b:7b:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 29 00:27:04 2026 GMT
Not After : Jun 28 00:32:04 2027 GMT
Subject: CN=29F840AFECE2D361E62612F91FD178D5F7B19AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:51:d1:ff:39:83:3f:bd:13:75:78:22:89:
ec:69:7b:fa:5f:1f:d6:cb:17:4e:ff:5d:65:c6:cb:
a6:99:1b:6b:c2:0f:ad:b4:82:da:df:57:3a:a4:44:
16:9c:2d:c9:79:b9:6b:4e:10:88:32:87:03:2b:2b:
79:39:59:63:fb:2d:36:b0:97:e6:32:0f:dd:b1:e6:
42:be:4a:09:0e:44:15:cc:16:69:52:0d:30:ca:e1:
c1:4a:c1:65:fa:3f:5e:42:4f:01:71:0f:3e:c9:22:
f2:af:15:bf:58:2b:7e:02:ce:85:df:63:4d:29:e8:
bf:c4:db:da:1b:23:0d:6a:25:b5:ad:6a:e2:d2:1b:
7d:3a:59:50:d0:13:41:37:e3:85:fb:1d:26:a1:ee:
56:a2:ec:4a:b4:6c:d7:f0:98:29:d8:19:16:66:72:
f3:71:7a:12:5a:bf:a6:f6:86:bc:a6:16:a4:cb:bb:
21:cb:31:8a:68:f9:e4:c5:80:ce:3d:fe:08:2f:b3:
5d:a9:38:1a:c5:e2:fe:f1:8a:b3:a9:a9:f8:9e:67:
5f:a9:33:3b:59:81:be:95:cd:d4:83:0a:ce:aa:ff:
07:4a:30:d5:ed:82:f9:71:24:56:36:cb:e6:80:07:
2c:86:b6:0f:0a:ad:08:b2:0a:50:c5:36:92:b8:80:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:40:AF:EC:E2:D3:61:E6:26:12:F9:1F:D1:78:D5:F7:B1:9A:E5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS6517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f600::/40
2a14:7583:5e00::/40
2a14:7583:a400::/38
2a14:7584:4000::/36
Signature Algorithm: sha256WithRSAEncryption
83:af:3a:de:ec:01:05:d7:d5:7b:4d:55:1f:c7:9a:f1:35:0b:
9d:46:44:d3:a0:3b:80:c9:78:87:e1:a7:01:e7:48:b7:b2:b7:
45:56:d7:e4:9c:42:46:98:0f:0a:a6:25:8c:d9:68:f0:41:b8:
84:89:65:c0:70:d7:9e:93:47:04:0c:32:5c:1e:54:83:05:6d:
cb:72:fc:a1:e0:6f:7d:09:9e:2b:6f:77:74:a2:2a:29:23:36:
f8:5f:6e:13:bf:20:a5:2c:b4:91:fe:eb:79:84:08:d6:ce:14:
88:c1:af:da:21:14:0e:3c:4e:67:08:e0:d6:81:78:7a:81:44:
8c:95:bf:4c:7b:c0:2f:33:48:2c:94:d5:e2:75:4c:94:63:32:
be:3b:b5:ca:9c:05:c3:1a:73:97:2c:75:51:99:44:54:2d:e8:
07:0b:a6:42:83:8a:6e:7f:05:42:2d:71:b3:20:7e:28:a8:f7:
81:ef:c3:cc:ad:fd:9e:1a:3d:19:51:0d:84:3f:f2:23:0e:51:
d6:8f:39:3c:ee:42:99:5b:44:53:bb:67:96:30:3c:55:a7:db:
cc:b8:c8:e5:e3:65:31:4a:95:30:cb:b7:f4:35:5b:c4:d9:2a:
92:28:e0:87:34:fa:7f:b6:0a:63:ce:06:a6:c3:c3:7c:b4:53:
14:1e:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:54 2026 by rpki-client