Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6594.roa
File: AS6594.roa (raw, json)
Hash identifier: 32F0g9DuNt736jai860Gn0ga+XLKQo4QXL/RX1mkpsE=
Subject key identifier: 39:EB:E9:B6:49:74:EF:1D:F6:B6:6C:12:FA:77:50:FD:E9:4A:CA:57
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 61B0F7BE8DEA9224DD99A19B8B5A297A529C4F2A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6594.roa
Signing time: Thu 12 Mar 2026 16:46:48 +0000
ROA not before: Thu 12 Mar 2026 16:41:48 +0000
ROA not after: Thu 11 Mar 2027 16:46:48 +0000
asID: 6594
IP address blocks: 45.158.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b0:f7:be:8d:ea:92:24:dd:99:a1:9b:8b:5a:29:7a:52:9c:4f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 12 16:41:48 2026 GMT
Not After : Mar 11 16:46:48 2027 GMT
Subject: CN=39EBE9B64974EF1DF6B66C12FA7750FDE94ACA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:38:a3:67:34:4e:36:36:bb:84:2b:d0:f9:
2d:59:f1:98:e9:e8:7a:67:df:9b:6c:70:66:4f:c5:
f7:ae:fb:85:40:a0:ef:bc:38:70:03:99:fd:fc:df:
aa:e3:ef:47:66:a3:9f:e4:6b:f6:ec:d3:91:42:1d:
6d:01:8a:bf:53:f7:1c:28:c1:e6:f5:2d:2b:28:dd:
15:5f:57:95:66:b6:d0:5f:33:a1:1a:49:91:d3:3b:
63:15:d1:00:2b:63:5a:87:6b:ad:77:da:bd:49:7d:
31:ef:b8:ff:bc:e4:45:04:52:81:bb:3f:cd:df:d6:
47:f2:58:fb:fc:b6:b2:83:56:3c:d0:76:88:e4:d8:
84:64:dd:5a:ae:36:81:1d:e0:ff:6c:74:08:2e:a3:
f8:1d:1d:7f:91:9e:92:fd:f5:6f:d9:ba:cf:26:93:
0f:50:ac:b7:92:68:0b:16:c6:01:7f:8f:d4:0d:eb:
0d:ab:05:fb:80:14:51:95:dc:73:55:82:3b:94:9f:
d0:39:43:df:2f:3d:15:e9:ea:03:86:fa:39:1d:0c:
af:49:da:97:1d:45:e6:19:0b:4a:cd:0d:69:86:a5:
98:c2:7c:f7:3b:cd:85:07:fd:e3:80:95:e3:93:d5:
e1:eb:62:15:bc:ac:9e:b8:b9:35:85:40:8e:c4:5a:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EB:E9:B6:49:74:EF:1D:F6:B6:6C:12:FA:77:50:FD:E9:4A:CA:57
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.169.0/24
Signature Algorithm: sha256WithRSAEncryption
68:96:a2:c1:a2:a1:af:bd:0a:91:ec:90:c5:bc:01:42:48:7d:
ee:bd:ef:77:af:53:11:85:f6:7e:db:18:21:ea:c4:80:c4:dc:
a2:33:39:b3:d0:3d:ce:28:b7:bc:67:6a:57:ab:73:59:e6:d4:
db:7a:ff:dd:c0:ed:02:25:d4:24:7a:b2:f7:92:f3:9b:89:a3:
49:21:c7:70:17:44:14:53:f0:74:40:a9:60:c9:fe:d2:b0:b3:
ae:f2:e4:54:e4:ac:d2:69:36:66:38:fa:3f:dc:20:fd:5e:c9:
a2:fd:00:9d:69:db:66:77:c2:5b:44:53:4b:81:bc:fd:39:cb:
9d:e2:0e:60:32:6e:d2:c4:72:65:83:7b:06:f2:22:9c:04:d9:
08:5b:e6:c5:e1:7c:00:5b:54:1e:fd:57:3b:9f:f8:ad:c9:a8:
e9:4b:39:81:ec:4b:00:6c:29:55:d0:24:fe:8b:a0:89:6c:c5:
32:58:3b:01:44:2b:a7:9c:7a:81:6c:08:ac:49:16:dd:ae:7f:
36:36:4e:d4:a8:a5:95:e1:a3:41:5c:fe:8c:06:e4:a2:f4:14:
f8:11:11:f6:2f:70:64:ba:e2:b4:80:22:42:86:fc:38:08:80:
2d:42:7d:53:b5:0b:58:e1:39:6e:94:86:fa:71:77:62:15:c9:
86:dc:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:31 2026 by rpki-client