Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS6939.roa
File: AS6939.roa (raw, json)
Hash identifier: 3IwqhVLXU95bxQ8/eB1gKEsPJvrFoWCuxZTkIrM7loo=
Subject key identifier: F5:E9:B2:41:A7:AB:65:87:1B:1E:6B:3E:05:81:15:01:DA:22:5E:1B
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 6ABB561E23DA7A200ECCEAE5F2261096833BF720
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS6939.roa
Signing time: Thu 02 Oct 2025 10:03:57 +0000
ROA not before: Thu 02 Oct 2025 09:58:57 +0000
ROA not after: Thu 01 Oct 2026 10:03:57 +0000
asID: 6939
IP address blocks: 83.171.244.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bb:56:1e:23:da:7a:20:0e:cc:ea:e5:f2:26:10:96:83:3b:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 2 09:58:57 2025 GMT
Not After : Oct 1 10:03:57 2026 GMT
Subject: CN=F5E9B241A7AB65871B1E6B3E05811501DA225E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:b3:94:07:52:7e:a7:1c:57:ba:1c:ea:20:
e6:c9:d9:90:80:5d:9b:c6:88:c7:cc:3c:b4:f8:37:
23:3c:2c:a0:bb:85:54:48:96:14:e3:92:0a:8f:14:
dd:91:c0:f2:0d:ef:f3:e5:49:ce:0c:10:0d:8d:1c:
f8:14:72:70:72:2d:cc:93:a7:a3:a0:00:f1:76:6e:
56:ab:9f:e0:f0:b7:b7:c8:f7:b1:63:99:2f:56:cd:
c9:56:ed:d9:ef:a8:b0:ab:3d:c6:6e:44:31:15:0c:
aa:be:c0:62:96:58:9a:1e:1d:78:2a:20:67:73:4c:
be:df:ad:81:79:9f:e3:52:04:93:6c:91:c1:1c:ce:
5a:18:5b:f5:24:35:6d:9a:0e:d5:be:08:54:be:25:
6c:29:e1:0e:b3:e2:f9:b2:0a:19:a5:a3:38:a4:31:
62:b6:cc:ef:82:57:87:4c:8a:19:22:86:24:1b:37:
f2:90:67:57:a4:97:f9:91:b8:9d:01:ae:d3:da:d0:
a4:35:69:9d:a0:88:99:9f:0c:43:01:84:46:b1:9a:
20:6b:3e:84:0e:b2:aa:a1:79:b1:84:14:07:78:92:
ae:8d:54:25:37:a8:d4:6d:ce:be:5d:5e:3e:b7:8a:
3d:22:47:76:89:d8:57:80:5d:8b:63:fa:91:09:6f:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:B2:41:A7:AB:65:87:1B:1E:6B:3E:05:81:15:01:DA:22:5E:1B
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS6939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/22
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
59:92:c4:df:f8:0f:1b:32:2e:1d:f3:31:a6:1c:e1:b3:f3:03:
f6:40:ad:35:7c:d5:bf:5b:b2:27:09:0f:39:c9:2c:1f:7e:0b:
8b:d6:da:a5:37:2a:c2:0b:6b:75:5f:96:33:55:cc:aa:96:d3:
09:80:4e:2a:25:52:cc:59:a4:06:35:f5:ce:f0:54:cd:f4:66:
d2:84:67:62:8e:fa:27:f9:cf:37:fb:cb:26:be:4b:62:65:c0:
04:44:8c:9b:9a:51:74:7c:49:11:98:f9:b7:bb:33:0a:27:60:
2e:cc:66:14:94:ba:ce:b8:a9:e7:54:e3:00:42:6b:96:79:56:
56:5e:65:62:73:f4:b1:c0:2a:86:ae:c5:ad:cb:e9:ca:c8:66:
77:23:a1:4a:cb:68:67:9b:cb:51:64:19:79:85:05:65:1f:4c:
09:0a:5a:48:a0:8e:4b:6e:11:ee:8a:f2:ba:d8:4c:30:24:83:
63:b4:15:c7:d4:8f:16:a3:37:f4:fa:55:d8:02:2d:8c:08:43:
83:03:32:89:dc:cc:75:f2:f2:d9:42:b6:49:f9:fe:80:ad:8e:
97:dc:38:1d:67:e0:92:80:96:85:d5:f6:94:68:d3:09:47:b9:
c5:8e:ab:f4:c9:b6:34:b0:b5:b9:25:f1:95:67:15:d3:e6:f0:
c2:56:1c:c2
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUartWHiPaeiAOzOrl8iYQloM79yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTEwMDIwOTU4NTdaFw0yNjEwMDExMDAzNTdaMDMxMTAvBgNV
BAMTKEY1RTlCMjQxQTdBQjY1ODcxQjFFNkIzRTA1ODExNTAxREEyMjVFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySrOUB1J+pxxXuhzqIObJ2ZCA
XZvGiMfMPLT4NyM8LKC7hVRIlhTjkgqPFN2RwPIN7/PlSc4MEA2NHPgUcnByLcyT
p6OgAPF2blarn+Dwt7fI97FjmS9WzclW7dnvqLCrPcZuRDEVDKq+wGKWWJoeHXgq
IGdzTL7frYF5n+NSBJNskcEczloYW/UkNW2aDtW+CFS+JWwp4Q6z4vmyChmlozik
MWK2zO+CV4dMihkihiQbN/KQZ1ekl/mRuJ0BrtPa0KQ1aZ2giJmfDEMBhEaxmiBr
PoQOsqqhebGEFAd4kq6NVCU3qNRtzr5dXj63ij0iR3aJ2FeAXYtj+pEJb8qTAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQU9emyQaerZYcbHms+BYEVAdoiXhswHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNjkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlOr9AME
AlUIkDANBgkqhkiG9w0BAQsFAAOCAQEAWZLE3/gPGzIuHfMxphzhs/MD9kCtNXzV
v1uyJwkPOcksH34Li9bapTcqwgtrdV+WM1XMqpbTCYBOKiVSzFmkBjX1zvBUzfRm
0oRnYo76J/nPN/vLJr5LYmXABESMm5pRdHxJEZj5t7szCidgLsxmFJS6zrip51Tj
AEJrlnlWVl5lYnP0scAqhq7FrcvpyshmdyOhSstoZ5vLUWQZeYUFZR9MCQpaSKCO
S24R7oryuthMMCSDY7QVx9SPFqM39PpV2AItjAhDgwMyidzMdfLy2UK2Sfn+gK2O
l9w4HWfgkoCWhdX2lGjTCUe5xY6r9Mm2NLC1uSXxlWcV0+bwwlYcwg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:20 2025 by rpki-client