Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6830.roa
File: AS6830.roa (raw, json)
Hash identifier: cUxfFooFCnCzKrd7Ex+I83QykQQH+sewpoZaS1nRcew=
Subject key identifier: D6:D2:2C:F8:19:D9:A1:23:CA:1E:04:87:BA:17:AA:D6:D6:A2:66:DB
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 506DF8CC72815EE2902D2E83A9086B3781A7D178
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6830.roa
Signing time: Tue 01 Sep 2026 11:12:31 +0000
ROA not before: Tue 01 Sep 2026 11:07:31 +0000
ROA not after: Tue 31 Aug 2027 11:12:31 +0000
asID: 6830
IP address blocks: 51.146.60.0/22 maxlen: 22
51.194.108.0/22 maxlen: 22
51.194.236.0/23 maxlen: 24
94.194.0.0/22 maxlen: 22
94.194.8.0/22 maxlen: 22
94.194.16.0/22 maxlen: 22
94.194.24.0/22 maxlen: 22
188.220.28.0/23 maxlen: 24
188.220.44.0/23 maxlen: 24
188.220.235.0/24 maxlen: 24
188.220.236.0/23 maxlen: 24
188.220.238.0/23 maxlen: 24
188.221.68.0/23 maxlen: 24
188.221.70.0/23 maxlen: 24
188.221.116.0/23 maxlen: 24
188.221.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:6d:f8:cc:72:81:5e:e2:90:2d:2e:83:a9:08:6b:37:81:a7:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 11:07:31 2026 GMT
Not After : Aug 31 11:12:31 2027 GMT
Subject: CN=D6D22CF819D9A123CA1E0487BA17AAD6D6A266DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:7a:f6:e0:3b:97:42:1c:2c:6b:94:87:bd:
65:65:aa:8f:53:ed:18:cf:d9:49:47:c0:fa:7d:d1:
f3:c4:f9:1d:f0:bd:a0:88:b2:43:fe:ff:3b:ee:be:
7a:33:6c:a3:4a:f0:56:c1:e0:5a:1d:81:1c:3e:12:
2a:0f:95:21:ce:57:6a:b3:1b:b1:a7:01:83:35:d9:
a2:4f:87:af:74:49:6f:35:80:00:8b:88:d1:92:25:
52:bd:7e:31:31:bf:25:2d:17:32:d2:4e:95:b5:cf:
49:ff:e2:1d:4a:16:01:2b:4f:3c:34:4d:30:f0:7a:
cd:56:d7:77:68:45:f0:72:c9:f9:2d:57:c3:78:39:
d5:10:9e:85:ea:1f:34:ec:71:fd:3e:83:a3:6a:2c:
80:26:94:71:f2:22:42:e8:08:dd:b3:3b:19:aa:75:
87:cb:87:ef:3a:90:89:d6:41:65:6b:7f:fb:ee:16:
4f:ba:d1:67:40:f5:eb:b9:e9:53:d0:bd:a2:f2:a7:
e3:2e:e6:82:7d:c0:84:bb:2e:5b:8e:31:e1:d7:dd:
45:d6:45:6a:f4:b4:6e:d9:b8:e5:62:18:08:75:e0:
71:73:43:e0:0c:3b:ac:de:05:82:aa:5d:3c:73:2d:
a9:b5:73:f0:48:cf:5c:d3:21:00:3a:78:20:32:ce:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:2C:F8:19:D9:A1:23:CA:1E:04:87:BA:17:AA:D6:D6:A2:66:DB
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.60.0/22
51.194.108.0/22
51.194.236.0/23
94.194.0.0/22
94.194.8.0/22
94.194.16.0/22
94.194.24.0/22
188.220.28.0/23
188.220.44.0/23
188.220.235.0-188.220.239.255
188.221.68.0/22
188.221.116.0/22
Signature Algorithm: sha256WithRSAEncryption
66:46:5b:89:17:3e:bd:b8:e4:8e:23:0a:c7:9a:22:58:f9:be:
01:ed:7a:66:2a:1a:8f:4c:5b:10:fe:72:a9:75:84:70:fd:67:
b4:b4:4f:bd:f1:72:2d:f1:5d:1a:44:67:4e:d5:52:b8:82:75:
39:8d:a5:fb:24:4a:0c:02:aa:6a:b4:b1:e8:ee:76:42:cd:69:
72:e6:06:8f:be:df:92:14:25:62:bb:88:c8:8e:97:2c:e5:04:
b3:ee:fc:19:e7:ca:26:21:9c:82:4d:7e:87:b8:81:d1:0f:da:
d2:0d:89:88:f1:ad:d0:0f:0c:af:e5:00:a0:53:17:07:60:91:
09:4c:ae:03:c0:f2:c1:0a:29:ca:2a:f5:2c:80:0a:f3:d8:53:
d8:cd:19:92:8f:05:99:83:7f:b5:99:02:16:63:49:71:96:fc:
b4:c5:1e:85:20:11:64:43:14:08:4f:88:4e:f2:a2:b5:07:0c:
a8:b1:b1:72:95:90:2f:f0:7a:8e:42:f9:f6:80:a1:a8:03:41:
5b:8c:97:ca:f4:a6:5e:03:13:cb:c8:b6:a4:b7:5a:b2:b8:09:
46:47:d2:82:f5:a1:89:75:f3:75:6c:44:6a:b2:c1:8d:38:f8:
9d:6b:e4:9e:ae:dc:24:55:e1:4c:d3:25:b5:43:3c:a1:1e:a7:
7a:75:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:00 2026 by rpki-client