Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6461.roa
File: AS6461.roa (raw, json)
Hash identifier: mMPnJyGS+LqXayQms2T2XOe6W8ilCM38mgL/ja1WCSc=
Subject key identifier: 90:E6:25:A1:9D:F7:96:11:A6:CE:5E:8E:10:FA:83:CD:47:FB:13:87
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5A0D8DC0E58497D398F2845C5ED32E04B93FCC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6461.roa
Signing time: Mon 07 Sep 2026 19:09:11 +0000
ROA not before: Mon 07 Sep 2026 19:04:11 +0000
ROA not after: Mon 06 Sep 2027 19:09:11 +0000
asID: 6461
IP address blocks: 91.124.196.0/24 maxlen: 24
91.124.238.0/24 maxlen: 24
92.113.143.0/24 maxlen: 24
92.113.169.0/24 maxlen: 24
92.113.247.0/24 maxlen: 24
95.134.1.0/24 maxlen: 24
95.134.50.0/24 maxlen: 24
95.134.52.0/24 maxlen: 24
95.134.53.0/24 maxlen: 24
95.134.70.0/24 maxlen: 24
95.134.104.0/24 maxlen: 24
95.134.105.0/24 maxlen: 24
95.134.106.0/24 maxlen: 24
95.134.107.0/24 maxlen: 24
95.134.108.0/24 maxlen: 24
95.134.109.0/24 maxlen: 24
95.134.110.0/24 maxlen: 24
95.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 21:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0d:8d:c0:e5:84:97:d3:98:f2:84:5c:5e:d3:2e:04:b9:3f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 7 19:04:11 2026 GMT
Not After : Sep 6 19:09:11 2027 GMT
Subject: CN=90E625A19DF79611A6CE5E8E10FA83CD47FB1387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:96:bc:9a:8b:98:0b:74:ba:da:fc:35:f3:
98:69:0c:99:70:72:55:16:cb:4a:de:0d:58:d0:e8:
64:be:15:b0:79:32:17:57:f9:00:df:c0:8c:6f:7b:
b4:5f:f0:1d:d8:b2:a0:81:d4:29:2d:45:c7:48:61:
79:27:86:26:81:d9:4d:ec:4d:bb:2d:bf:1f:90:a0:
6d:4a:c1:95:f5:fd:6d:97:9e:63:18:50:a1:e2:89:
c5:e9:b1:05:63:bf:24:1a:fd:5c:ee:e0:1c:0e:f5:
92:48:e5:f1:de:cf:ae:fa:db:b2:f7:27:cf:8a:9e:
1d:eb:0d:8d:da:66:77:e4:6e:33:aa:9c:ba:6c:c7:
32:11:8f:92:3a:e3:c4:d7:2a:6b:f9:19:15:4c:34:
9c:39:22:f8:fe:42:82:0f:24:61:a0:f6:83:06:9e:
2f:3b:a7:99:c7:6f:03:e1:22:42:a9:02:57:60:23:
14:b6:a9:3e:b4:dc:a3:73:87:cc:8a:a2:87:d6:ce:
f1:c1:a1:da:16:aa:9b:fa:ef:5e:62:e6:14:ea:00:
d1:27:4f:af:88:8b:4b:7c:53:7e:12:1a:7c:70:07:
71:ac:e8:74:ed:f4:6b:f4:ff:c3:97:d5:92:03:02:
67:bf:d2:b6:37:d6:e3:93:bd:0b:68:8f:3c:4b:41:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:25:A1:9D:F7:96:11:A6:CE:5E:8E:10:FA:83:CD:47:FB:13:87
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.196.0/24
91.124.238.0/24
92.113.143.0/24
92.113.169.0/24
92.113.247.0/24
95.134.1.0/24
95.134.50.0/24
95.134.52.0/23
95.134.70.0/24
95.134.104.0/21
Signature Algorithm: sha256WithRSAEncryption
11:81:7b:e1:25:ec:b2:72:f9:fd:b0:53:a8:7f:c9:e1:5a:ca:
f0:9d:cb:d1:d8:77:24:e0:36:a8:90:8d:15:17:d4:26:0b:21:
b3:59:65:c4:fb:82:2d:12:33:63:89:a1:b1:34:8a:50:4a:0a:
4e:c7:c5:f8:ca:c9:0d:0c:b3:93:80:81:84:e3:1e:83:4e:c7:
47:12:17:15:c3:d6:9d:17:b6:45:a9:0c:e8:0f:f9:89:03:87:
93:d8:39:12:d9:5f:e8:c9:2f:a0:22:03:dd:78:8a:12:82:8d:
cd:b5:c2:78:1c:bb:4d:47:34:c7:65:3b:21:7d:94:41:38:d0:
f8:56:c3:94:a4:66:21:c1:82:a3:cb:82:8d:17:7d:45:74:c2:
80:d0:c2:74:28:f4:46:dc:fa:c4:96:f4:b0:00:be:81:fc:ff:
8e:f8:b9:82:ea:dd:5f:79:b7:4a:14:9b:4a:bb:aa:f1:5d:c6:
1a:19:2c:ab:65:e5:64:10:a4:93:97:58:69:7e:31:b7:4d:c7:
17:ef:d6:73:ec:80:d4:7d:f2:ef:b5:ad:ab:8a:bf:a4:fa:76:
04:4f:6b:57:a0:da:89:18:97:27:bf:f9:97:df:28:a5:42:05:
b6:78:12:ca:73:39:55:2f:2e:14:66:0b:1c:ce:20:43:88:09:
e6:2d:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 07:40:16 2026 by rpki-client