Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6475.roa
File: AS6475.roa (raw, json)
Hash identifier: yNiy06s/CwgM0rWxuhEqmhy7RC4yNeYlhxxJoExfpOg=
Subject key identifier: 24:AB:F9:DB:A6:92:9B:A0:FB:D3:00:02:7F:85:5F:73:3E:66:DE:CB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4C65B92222DAEDE1DEB392E0DAC516D4F707DC8F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6475.roa
Signing time: Tue 01 Sep 2026 07:05:04 +0000
ROA not before: Tue 01 Sep 2026 07:00:04 +0000
ROA not after: Tue 31 Aug 2027 07:05:04 +0000
asID: 6475
IP address blocks: 143.20.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:65:b9:22:22:da:ed:e1:de:b3:92:e0:da:c5:16:d4:f7:07:dc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 1 07:00:04 2026 GMT
Not After : Aug 31 07:05:04 2027 GMT
Subject: CN=24ABF9DBA6929BA0FBD300027F855F733E66DECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:92:32:6d:e1:53:d3:c0:ab:4f:dc:1e:a2:
8c:7d:a2:10:7e:64:52:28:31:4e:a1:34:ed:eb:c5:
4b:6a:82:97:8d:44:66:4c:a8:59:9e:d5:71:f9:39:
99:a3:e6:cb:28:81:38:c8:39:21:35:81:24:d3:e3:
cb:df:80:ae:5b:e5:b1:f8:f4:d2:6a:24:59:03:7a:
e9:79:26:9e:f5:cc:d8:5d:c9:25:a2:29:3c:5c:b0:
fe:84:d0:b2:6a:58:90:e4:f0:57:91:3b:16:ce:34:
e2:fd:d5:6c:63:96:a2:29:82:c1:10:48:0d:cf:c9:
1c:33:aa:be:e0:14:a3:49:77:b8:b9:e7:c4:e4:dc:
56:94:00:b5:a1:da:58:99:6c:0f:b2:29:2c:9e:a3:
bc:b5:06:b7:33:84:67:6c:93:d8:bf:de:0d:23:29:
18:f1:d0:15:c3:91:1e:a6:05:85:ae:c9:b1:f3:19:
ae:5a:00:54:4b:18:f7:cc:78:d5:48:2d:49:7d:86:
25:26:91:30:36:00:3c:c6:29:05:90:0e:e0:5f:e4:
c4:6c:b5:4e:ec:4e:ab:f1:3f:64:83:71:45:9c:e8:
2a:10:b3:da:fe:32:a6:6a:2f:d1:89:cb:44:37:21:
58:f4:88:09:40:80:84:4a:68:69:d5:72:0a:c9:bc:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:F9:DB:A6:92:9B:A0:FB:D3:00:02:7F:85:5F:73:3E:66:DE:CB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.218.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:0c:c2:02:0a:4f:25:bb:ee:7b:43:37:73:db:4e:93:57:0c:
86:23:89:02:fd:6a:c8:70:b8:d7:80:76:2e:e9:f0:fd:ae:44:
5b:17:fb:b8:0e:1f:3c:85:6f:e0:57:77:14:0b:f8:7c:5f:b8:
83:3b:dc:80:35:55:fa:86:26:a2:ca:3f:1a:3b:26:26:e5:bb:
9b:48:81:d1:b3:98:b1:1e:58:91:ee:4b:49:43:47:f6:6a:78:
48:8f:ff:64:ed:8d:90:5f:80:41:0e:65:ae:d5:1c:d0:b5:de:
2d:4a:51:77:0a:ac:9e:7e:27:76:50:60:66:62:6b:55:c6:db:
bb:75:71:38:54:84:e0:0f:25:3b:17:c1:5c:9f:54:2f:3d:d7:
1b:05:ee:a3:d5:bc:7f:f1:37:a0:d3:2a:78:42:10:31:e3:9f:
e6:05:1f:4e:4e:a1:22:81:e9:00:66:42:47:e2:60:43:41:7c:
ef:30:06:fc:a1:b5:f3:fc:de:53:97:48:0b:f8:f4:10:a2:07:
05:16:20:24:8b:49:ce:ee:39:7a:65:f7:54:89:e4:68:82:6d:
12:8f:7a:55:b6:8a:26:12:ac:f3:87:17:3c:2f:eb:ea:b9:44:
2c:48:0c:38:e5:0b:53:e7:93:0c:1a:64:66:6a:8e:89:30:90:
82:71:b7:c0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUTGW5IiLa7eHes5Lg2sUW1PcH3I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDEwNzAwMDRaFw0yNzA4MzEwNzA1MDRaMDMxMTAvBgNV
BAMTKDI0QUJGOURCQTY5MjlCQTBGQkQzMDAwMjdGODU1RjczM0U2NkRFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCJIybeFT08CrT9weoox9ohB+
ZFIoMU6hNO3rxUtqgpeNRGZMqFme1XH5OZmj5ssogTjIOSE1gSTT48vfgK5b5bH4
9NJqJFkDeul5Jp71zNhdySWiKTxcsP6E0LJqWJDk8FeROxbONOL91WxjlqIpgsEQ
SA3PyRwzqr7gFKNJd7i558Tk3FaUALWh2liZbA+yKSyeo7y1BrczhGdsk9i/3g0j
KRjx0BXDkR6mBYWuybHzGa5aAFRLGPfMeNVILUl9hiUmkTA2ADzGKQWQDuBf5MRs
tU7sTqvxP2SDcUWc6CoQs9r+MqZqL9GJy0Q3IVj0iAlAgIRKaGnVcgrJvFmBAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUJKv526aSm6D70wACf4Vfcz5m3sswHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjQ3NS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI8U2jAN
BgkqhkiG9w0BAQsFAAOCAQEAzAzCAgpPJbvue0M3c9tOk1cMhiOJAv1qyHC414B2
Lunw/a5EWxf7uA4fPIVv4Fd3FAv4fF+4gzvcgDVV+oYmoso/GjsmJuW7m0iB0bOY
sR5Yke5LSUNH9mp4SI//ZO2NkF+AQQ5lrtUc0LXeLUpRdwqsnn4ndlBgZmJrVcbb
u3VxOFSE4A8lOxfBXJ9ULz3XGwXuo9W8f/E3oNMqeEIQMeOf5gUfTk6hIoHpAGZC
R+JgQ0F87zAG/KG18/zeU5dIC/j0EKIHBRYgJItJzu45emX3VInkaIJtEo96VbaK
JhKs84cXPC/r6rlELEgMOOULU+eTDBpkZmqOiTCQgnG3wA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:26 2026 by rpki-client