Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6461.roa
File: AS6461.roa (raw, json)
Hash identifier: fa6Ng0DfTor1UzaEiz9dN5LHZDf8Mi1N2G84eoX+srQ=
Subject key identifier: A9:9B:6A:E6:66:20:EB:8D:23:C9:56:CC:3B:0B:6F:BF:80:29:1E:04
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3DB0ABB2C303C6E4E8CFD8B347968CD0BD628F4C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6461.roa
Signing time: Wed 15 Oct 2025 08:55:08 +0000
ROA not before: Wed 15 Oct 2025 08:50:08 +0000
ROA not after: Wed 14 Oct 2026 08:55:08 +0000
asID: 6461
IP address blocks: 46.202.81.0/24 maxlen: 24
46.202.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b0:ab:b2:c3:03:c6:e4:e8:cf:d8:b3:47:96:8c:d0:bd:62:8f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 15 08:50:08 2025 GMT
Not After : Oct 14 08:55:08 2026 GMT
Subject: CN=A99B6AE66620EB8D23C956CC3B0B6FBF80291E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:65:21:95:9b:c3:13:31:65:a2:ed:e2:8f:04:
15:fc:5e:65:d3:23:bc:46:2f:d1:1e:b6:03:c0:18:
02:92:66:07:46:b3:1f:07:f4:cf:de:16:ac:c7:d8:
17:b6:bc:3f:18:98:2c:87:7f:4f:a6:90:5a:e7:03:
44:9d:1f:12:2c:73:d5:a1:5c:6e:c3:32:a4:d0:1e:
cc:52:4b:93:d4:63:80:db:43:76:80:96:90:b7:73:
0f:40:1b:9a:c7:c2:09:8c:96:8d:8f:d1:37:de:64:
8c:e6:44:a3:83:79:d3:7a:6d:9f:08:ae:03:58:79:
29:1c:e1:2a:d9:83:6a:56:93:29:3e:2e:cd:12:0b:
83:ba:e5:22:29:58:2c:1f:8b:a1:45:36:18:9b:7b:
83:48:65:e4:0c:10:f9:75:63:ec:80:4e:02:34:0a:
76:55:29:03:a9:5b:4b:2b:05:e6:9a:5c:db:07:ea:
71:ed:3b:2c:5b:a1:cd:0b:cb:2b:7f:61:3e:4d:05:
24:36:6a:fc:89:cf:ea:c3:6d:c2:3f:15:b2:41:f7:
4b:f5:09:6a:db:a0:29:07:ca:57:65:26:c2:3c:0a:
45:88:04:68:76:e9:81:5c:fb:a6:75:02:e4:a0:1f:
21:a3:0b:3e:a2:f8:f4:63:9b:79:da:f3:c0:1e:c9:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:6A:E6:66:20:EB:8D:23:C9:56:CC:3B:0B:6F:BF:80:29:1E:04
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.81.0/24
46.202.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ad:d9:48:97:7f:0c:88:bc:1e:a3:43:95:c7:89:5e:fd:8f:
e2:0e:10:d3:95:fe:5d:a3:55:c9:9d:e5:40:8f:87:ce:d6:3c:
e6:d5:2a:34:08:e7:dc:a3:82:ad:78:dd:25:b4:e9:29:e2:e2:
69:6d:0d:a5:d2:28:63:35:9d:d3:65:c1:aa:c0:ac:a5:a8:cb:
f7:83:97:29:68:7d:83:a7:fb:cb:b5:be:9a:08:d0:10:4f:10:
d1:86:71:ee:63:00:e5:78:a4:34:c9:2e:25:6f:f6:d5:87:58:
45:4d:c9:a5:b7:51:ca:f8:bd:40:c3:8c:0d:86:05:de:94:b4:
b4:e4:eb:16:a8:f4:73:20:2d:43:1b:63:f9:f2:09:02:d0:a4:
28:b1:a7:58:85:be:36:85:d6:03:6c:6d:5f:b0:5b:d0:51:22:
f4:03:11:c3:62:83:fd:f6:4c:77:63:1c:40:8c:21:08:5c:71:
30:bd:04:51:f8:10:9a:5d:d4:82:a8:16:17:b3:8c:48:4e:70:
d4:3f:57:ba:66:30:7c:c4:6f:f5:de:00:be:47:f3:25:c7:cc:
1b:5f:ca:a8:6c:ee:02:eb:b4:6d:60:62:28:e0:23:94:60:8d:
f5:67:e3:b4:8d:2f:f0:e9:f7:ee:fa:67:d2:bd:87:37:af:03:
79:38:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:31:14 2025 by rpki-client