Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS6205.roa
File: AS6205.roa (raw, json)
Hash identifier: A8fNWv38UilhASXAfBtF5iG5GHDHSNa7DtqFn2ID1rA=
Subject key identifier: 30:DE:46:FA:4D:B2:B7:D6:19:0F:4C:6E:7E:16:DC:90:71:76:FA:62
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 25E1165B12CB3E056225D49A80D1A87118061E89
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS6205.roa
Signing time: Tue 30 Jun 2026 10:00:26 +0000
ROA not before: Tue 30 Jun 2026 09:55:26 +0000
ROA not after: Tue 29 Jun 2027 10:00:26 +0000
asID: 6205
IP address blocks: 212.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e1:16:5b:12:cb:3e:05:62:25:d4:9a:80:d1:a8:71:18:06:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 30 09:55:26 2026 GMT
Not After : Jun 29 10:00:26 2027 GMT
Subject: CN=30DE46FA4DB2B7D6190F4C6E7E16DC907176FA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:79:8c:04:59:05:6e:da:50:e5:19:f9:3e:
a2:9e:33:99:42:26:de:aa:ce:72:dd:8a:6f:44:83:
c1:7b:e1:c8:25:4d:4e:02:af:5a:a7:93:06:67:62:
3c:d2:71:fc:df:42:13:e7:43:6c:72:94:81:67:f8:
66:15:2f:8f:ed:70:5e:08:3f:56:a6:c8:6a:5a:d2:
17:b8:31:18:1d:08:0a:09:85:c8:43:f0:3e:ff:96:
ed:85:c9:c6:d5:e7:d5:2b:55:34:b8:9a:a7:e9:ca:
c6:26:46:6a:a2:f4:70:f5:3d:75:6b:4c:11:c4:5d:
14:c2:07:a6:85:8a:85:65:fa:16:52:f3:ca:6f:db:
86:f5:ad:5e:9b:0c:11:fe:0a:f7:a4:44:84:62:16:
a4:ae:77:28:9f:cd:a2:d7:a5:40:5f:5d:a7:25:db:
52:75:69:cd:c6:d7:e4:7d:3e:93:90:ca:24:67:2b:
1a:da:0b:2c:de:56:9b:48:de:bc:b4:82:f7:3c:52:
a9:22:61:c5:64:28:17:fa:8e:b2:45:2f:92:47:30:
41:9b:ad:d1:ff:98:34:14:f2:5d:82:16:71:2d:22:
87:d3:2d:81:6b:92:90:6e:93:67:a2:dc:c6:e6:31:
86:08:fd:08:7a:ca:01:75:d7:9c:d7:2b:54:1b:6e:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:46:FA:4D:B2:B7:D6:19:0F:4C:6E:7E:16:DC:90:71:76:FA:62
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS6205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
df:35:22:f7:ce:5a:1e:7a:64:e6:da:71:22:b1:b0:b8:d5:d4:
4d:6c:a7:ab:b7:1d:77:30:8f:77:7b:7f:a6:b4:21:10:36:b2:
a4:ae:89:5a:58:83:ac:66:ae:d2:31:02:76:07:ba:da:bd:90:
4a:8d:a9:61:31:bd:bc:90:ae:c7:69:fc:50:de:ac:46:12:6f:
63:3a:d0:d0:5e:7f:4e:29:ab:70:4c:78:03:e0:d9:f3:0d:25:
71:01:c3:b6:f4:0a:56:b0:e3:97:a1:14:3b:98:a5:c9:db:6e:
4b:7b:32:da:4c:cf:cb:fe:07:28:eb:a2:02:20:77:7b:2b:a5:
dc:c7:a4:03:7b:32:34:be:b5:26:5a:e9:e1:0e:a4:1a:10:66:
7c:01:cc:7a:ab:55:5e:03:9a:e0:f0:e7:2f:51:18:47:e5:fa:
3b:98:82:bf:da:c2:14:f0:df:75:c9:18:19:33:4c:01:27:3c:
75:b5:e9:94:82:13:42:38:fd:9c:26:ac:c6:10:4a:1b:95:fd:
5b:8d:6f:e1:1d:cc:f9:05:0a:14:13:42:0d:e5:6c:3e:ff:7f:
25:e3:4a:4e:39:11:4d:f1:fb:65:8f:08:70:7e:68:6b:44:4e:
c0:00:a6:d7:6c:25:5b:63:c3:3d:33:75:e3:2e:69:e0:c9:26:
9c:c1:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:27 2026 by rpki-client