Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6830.roa
File: AS6830.roa (raw, json)
Hash identifier: BpRPBI4sdKFQdltI5zvJ4TjjF0jsu2NnuklAOsfgjGk=
Subject key identifier: 0A:A9:38:F1:8A:31:CD:06:3C:8B:CB:E8:7A:14:CF:4E:81:CF:84:A8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 297DF39529F15580C413FB5B865927E911D2468B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6830.roa
Signing time: Thu 29 Oct 2026 13:09:38 +0000
ROA not before: Thu 29 Oct 2026 13:04:38 +0000
ROA not after: Thu 28 Oct 2027 13:09:38 +0000
asID: 6830
IP address blocks: 51.146.60.0/22 maxlen: 22
51.194.108.0/22 maxlen: 22
51.194.236.0/23 maxlen: 24
51.241.168.0/23 maxlen: 23
94.194.0.0/22 maxlen: 22
94.194.8.0/22 maxlen: 22
94.194.16.0/22 maxlen: 22
94.194.24.0/22 maxlen: 22
188.220.235.0/24 maxlen: 24
188.220.238.0/23 maxlen: 24
188.221.70.0/23 maxlen: 24
188.221.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7d:f3:95:29:f1:55:80:c4:13:fb:5b:86:59:27:e9:11:d2:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 13:04:38 2026 GMT
Not After : Oct 28 13:09:38 2027 GMT
Subject: CN=0AA938F18A31CD063C8BCBE87A14CF4E81CF84A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:3e:75:0b:08:7e:c5:b6:03:14:86:af:58:
4f:97:db:1c:e9:5c:5b:cc:68:4a:f1:99:80:30:3a:
82:f5:46:99:b2:30:6a:45:22:48:e3:f7:21:3a:12:
62:29:f2:d8:f7:09:f3:e6:85:19:c0:83:43:82:27:
d3:6e:82:d8:f2:19:92:eb:2a:8f:3e:ef:43:c1:ab:
e8:5b:3d:1d:77:10:29:e9:83:5f:cb:3d:cf:7f:83:
34:0f:ad:28:e3:65:52:50:17:3a:ae:a7:74:85:dd:
b9:a5:7d:8e:4f:dd:8c:06:0b:9f:8a:26:f9:cc:29:
54:8c:be:cb:72:d2:eb:12:90:3f:c8:80:be:13:d2:
93:ba:dd:fe:7c:56:58:cf:95:91:31:5c:f6:36:37:
ed:01:11:d9:39:32:88:9a:b1:ae:9f:d5:42:9a:be:
21:ec:3e:e8:0b:05:27:b4:94:c4:ca:be:4d:f5:77:
45:fd:0b:6f:40:b1:93:94:0f:d8:0f:95:74:77:3f:
36:b2:fc:79:68:4e:f4:03:c5:7e:ec:5f:00:19:0b:
de:d6:0c:fd:f9:13:85:db:e8:cc:05:31:e5:c6:b5:
49:b5:12:1f:96:3f:b0:45:1b:e2:1f:49:eb:c8:be:
5b:d3:60:c3:4e:b6:78:90:39:e4:75:b8:c3:18:54:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A9:38:F1:8A:31:CD:06:3C:8B:CB:E8:7A:14:CF:4E:81:CF:84:A8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.60.0/22
51.194.108.0/22
51.194.236.0/23
51.241.168.0/23
94.194.0.0/22
94.194.8.0/22
94.194.16.0/22
94.194.24.0/22
188.220.235.0/24
188.220.238.0/23
188.221.70.0/23
188.221.116.0/23
Signature Algorithm: sha256WithRSAEncryption
93:98:26:26:d5:58:00:7b:1d:91:25:29:c4:dc:96:91:b7:10:
97:45:0a:7f:ff:1a:b3:de:1d:f4:42:7e:07:6c:25:b0:90:a3:
40:dc:97:5e:f9:ec:94:76:dc:8f:cc:3b:2e:2c:bf:b7:e5:1f:
64:2f:e4:2d:c4:52:0c:b2:be:86:a9:71:a7:c8:ab:92:ed:d5:
26:da:29:3b:89:2d:66:ba:09:84:66:92:14:0f:63:90:ed:8a:
8f:b6:2c:3a:4e:22:34:0c:b9:8b:5e:aa:3a:20:98:34:1a:a9:
cd:c1:99:c8:e2:7d:80:0d:ee:cc:11:7b:6c:5e:1b:2d:3c:f1:
41:a4:d5:86:1e:ff:5c:cf:83:f9:ca:b7:ef:25:db:98:28:2e:
31:6b:4b:2c:d7:89:fe:83:0b:91:25:9c:6b:2d:b9:e4:30:30:
b0:b6:6a:3a:6c:17:06:2c:83:28:71:b4:e7:fd:ca:a1:b0:67:
c0:e1:ae:d4:4b:26:18:96:b9:bd:c4:c0:77:7b:cb:16:ee:e1:
74:17:48:e6:e5:c8:a1:6a:52:97:86:62:b2:7f:9e:cb:d3:03:
3d:75:97:49:cc:56:f6:be:80:41:90:37:a5:d9:f2:d1:42:b0:
20:43:6b:8f:da:00:f6:b6:79:4c:2b:9f:9e:31:c5:21:33:36:
6d:1a:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:04:54 2026 by rpki-client