Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6935.roa
File: AS6935.roa (raw, json)
Hash identifier: NsskVVrRm1yH28DJSOkyXUXEYQx9Xe5emtpReaVz4gE=
Subject key identifier: 67:AA:CD:05:FC:48:E3:DE:79:1C:16:6C:0B:E8:14:08:9F:E4:04:2B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2179432FEC09160A45EC967503081502AF84307C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6935.roa
Signing time: Mon 21 Sep 2026 04:49:35 +0000
ROA not before: Mon 21 Sep 2026 04:44:35 +0000
ROA not after: Mon 20 Sep 2027 04:49:35 +0000
asID: 6935
IP address blocks: 143.14.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:79:43:2f:ec:09:16:0a:45:ec:96:75:03:08:15:02:af:84:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 04:44:35 2026 GMT
Not After : Sep 20 04:49:35 2027 GMT
Subject: CN=67AACD05FC48E3DE791C166C0BE814089FE4042B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:c6:96:9c:be:eb:d3:46:e8:6b:52:4a:ec:
70:8e:49:24:cd:83:de:10:14:bc:53:af:5c:0d:c7:
03:3c:7c:b8:28:2f:80:06:38:99:ef:54:9e:6b:89:
77:44:44:ed:23:8d:2f:7f:37:83:46:ee:81:13:2d:
0f:c0:81:9a:e9:bd:15:78:8d:07:78:99:5a:f5:4f:
67:28:51:67:5f:bc:45:c7:ae:36:98:33:de:6a:b9:
16:81:15:ae:f5:25:79:e0:26:21:dd:95:bd:97:8e:
0b:db:13:26:d1:2d:9e:6e:70:8c:5e:68:ea:ef:be:
61:24:be:02:18:09:e7:7d:5a:0f:15:ea:9d:a1:37:
86:37:f3:2d:09:55:39:ed:45:33:77:f9:b3:f4:dc:
2a:24:a4:eb:d7:b4:59:7d:ec:b7:0a:a6:fd:35:ab:
55:98:9d:9b:1a:e6:3c:7f:6a:63:d9:c6:c7:bd:cd:
5d:f1:0d:a0:e6:85:f0:94:3f:27:76:52:ae:ea:bd:
4c:3a:05:9f:90:a8:15:46:64:d5:13:6b:81:ea:b9:
96:2b:7f:c9:00:78:a3:08:7f:c2:2b:bf:89:5a:3f:
3a:99:42:74:f7:7e:98:6a:ac:5e:90:cb:99:91:ec:
3d:2b:60:b4:9f:35:31:35:36:04:7e:5a:74:63:b6:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:CD:05:FC:48:E3:DE:79:1C:16:6C:0B:E8:14:08:9F:E4:04:2B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.173.0/24
Signature Algorithm: sha256WithRSAEncryption
04:00:24:01:00:74:6b:22:c3:5b:43:57:a1:00:27:1f:be:b1:
58:2b:76:ac:fe:91:f5:25:8e:65:37:94:f0:02:aa:13:c3:37:
b7:ce:aa:08:e5:ea:0e:99:c7:66:11:b8:2f:31:2e:9a:5a:82:
14:37:84:a6:b6:70:5e:a5:89:b9:5e:77:c5:9d:60:06:53:14:
51:6e:77:9e:b5:91:c7:9d:c5:c4:79:45:75:58:88:fe:b4:06:
21:6c:fc:17:9b:5b:26:e2:1e:91:c0:4d:5b:9c:4e:d8:0f:de:
64:12:30:2c:85:5c:4f:d3:96:36:ce:8e:48:62:74:a1:e5:b3:
c5:4f:bd:e5:41:80:06:b3:e3:8d:65:92:b5:d4:69:92:59:e1:
30:cd:61:85:c8:ac:63:b0:e3:ec:90:26:d3:9a:89:65:da:7b:
54:f4:d0:1b:a6:8b:a0:31:93:73:ca:d4:97:7c:2a:aa:86:70:
96:f2:87:c0:92:11:a8:83:c4:e6:34:07:9d:a3:c0:f6:cb:6c:
55:7a:4b:2e:93:6d:66:e9:fa:d3:6a:1c:43:4f:52:59:08:62:
3f:83:91:df:3d:fb:de:30:a7:f2:00:de:23:3f:ad:3f:68:ba:
ff:72:e3:ac:14:8b:8f:db:bf:7f:58:fc:a9:07:9d:f5:d5:d4:
6a:35:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:49:55 2026 by rpki-client