Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6939.roa
File: AS6939.roa (raw, json)
Hash identifier: dfTYac9W+u7mAbUwwyI3iyn+F9sT8EzlsnjCO1vV59A=
Subject key identifier: 31:B5:42:17:AE:18:72:7E:15:12:16:F8:82:D0:D9:36:6A:6C:68:32
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5A0BC0E66C5F74F5F865F87ED79AED6A858F5FEA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6939.roa
Signing time: Wed 02 Sep 2026 10:56:52 +0000
ROA not before: Wed 02 Sep 2026 10:51:52 +0000
ROA not after: Wed 01 Sep 2027 10:56:52 +0000
asID: 6939
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.37.0/24 maxlen: 24
96.62.47.0/24 maxlen: 24
96.62.48.0/23 maxlen: 24
96.62.50.0/23 maxlen: 24
96.62.52.0/23 maxlen: 24
96.62.54.0/24 maxlen: 24
96.62.55.0/24 maxlen: 24
96.62.56.0/24 maxlen: 24
96.62.57.0/24 maxlen: 24
96.62.58.0/24 maxlen: 24
96.62.60.0/23 maxlen: 24
96.62.62.0/23 maxlen: 24
96.62.80.0/23 maxlen: 24
96.62.82.0/23 maxlen: 24
96.62.86.0/23 maxlen: 24
96.62.88.0/24 maxlen: 24
96.62.90.0/23 maxlen: 24
96.62.92.0/23 maxlen: 24
96.62.94.0/23 maxlen: 24
96.62.98.0/23 maxlen: 24
96.62.135.0/24 maxlen: 24
96.62.149.0/24 maxlen: 24
96.62.150.0/24 maxlen: 24
96.62.151.0/24 maxlen: 24
143.14.173.0/24 maxlen: 24
143.14.254.0/24 maxlen: 24
148.135.216.0/23 maxlen: 24
148.135.218.0/23 maxlen: 24
148.135.224.0/23 maxlen: 24
148.135.226.0/23 maxlen: 24
148.135.232.0/23 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
148.135.242.0/23 maxlen: 24
148.135.248.0/23 maxlen: 24
148.135.250.0/23 maxlen: 24
150.241.146.0/23 maxlen: 24
150.241.148.0/23 maxlen: 24
150.241.150.0/23 maxlen: 24
150.241.152.0/23 maxlen: 24
150.241.154.0/23 maxlen: 24
150.241.156.0/23 maxlen: 24
150.241.158.0/23 maxlen: 24
150.241.160.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
150.241.164.0/23 maxlen: 24
150.241.166.0/23 maxlen: 24
150.241.168.0/23 maxlen: 24
150.241.170.0/23 maxlen: 24
150.241.172.0/23 maxlen: 24
150.241.176.0/23 maxlen: 24
150.241.178.0/23 maxlen: 24
150.241.180.0/23 maxlen: 24
150.241.182.0/23 maxlen: 24
150.241.184.0/23 maxlen: 24
150.241.186.0/23 maxlen: 24
150.241.188.0/23 maxlen: 24
150.241.190.0/23 maxlen: 24
167.148.97.0/24 maxlen: 24
167.148.98.0/24 maxlen: 24
167.148.104.0/24 maxlen: 24
167.148.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0b:c0:e6:6c:5f:74:f5:f8:65:f8:7e:d7:9a:ed:6a:85:8f:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 2 10:51:52 2026 GMT
Not After : Sep 1 10:56:52 2027 GMT
Subject: CN=31B54217AE18727E151216F882D0D9366A6C6832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0d:52:9c:c3:15:4c:5e:b7:00:58:11:bd:03:
a3:dc:ed:a9:c9:83:a4:3b:da:f8:a9:d9:a2:44:6b:
23:5e:c8:35:ad:32:88:43:f7:89:62:18:f0:9d:8a:
53:db:af:e7:8a:a2:10:e0:7a:a0:3b:bd:0b:e3:3a:
8c:66:66:ab:fa:50:04:ad:c1:47:6d:bc:7b:0d:54:
fc:66:65:22:c9:04:9f:22:e4:2d:d5:30:f8:5d:98:
d1:3e:57:5c:9a:8b:ba:86:8c:92:ec:2a:c1:59:13:
7b:ce:95:63:ae:b3:ff:8a:15:08:1b:ff:c8:a8:57:
4c:ec:82:83:fe:f4:5e:9a:26:85:a6:1d:25:15:08:
b5:e8:e0:0a:8c:44:00:88:b0:68:74:63:2d:77:22:
34:91:5f:13:51:67:7a:ec:1a:08:e5:55:c0:f9:12:
28:60:43:7e:c4:c3:2a:5b:1c:13:e7:0b:a5:7b:ea:
f8:9a:aa:c4:8c:e3:9c:15:9d:67:71:d9:eb:55:3e:
37:3b:d3:d5:43:fa:93:d4:c9:d6:9e:a0:b6:ab:68:
06:b0:db:74:1b:61:31:1e:2c:1c:e0:17:9f:7e:13:
f9:18:2c:ab:ef:46:6b:e0:1e:8e:17:ef:b1:e3:a0:
ba:79:f9:9c:1a:27:4e:8e:45:7a:7b:7d:92:84:81:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:42:17:AE:18:72:7E:15:12:16:F8:82:D0:D9:36:6A:6C:68:32
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.37.0/24
96.62.47.0-96.62.58.255
96.62.60.0/22
96.62.80.0/22
96.62.86.0-96.62.88.255
96.62.90.0-96.62.95.255
96.62.98.0/23
96.62.135.0/24
96.62.149.0-96.62.151.255
143.14.173.0/24
143.14.254.0/24
148.135.216.0/22
148.135.224.0/22
148.135.232.0/22
148.135.240.0/22
148.135.248.0/22
150.241.146.0-150.241.173.255
150.241.176.0/20
167.148.97.0-167.148.98.255
167.148.104.0/24
167.148.112.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a5:92:40:e9:07:0f:5f:f0:ea:15:5e:ef:70:00:aa:fe:05:
79:ec:36:4f:c5:98:9b:a1:17:55:89:ce:42:d9:71:db:b9:bc:
2e:52:00:cd:64:e1:b7:fc:4e:42:23:3d:69:e3:2d:2a:d4:34:
c2:e3:92:80:cb:18:02:ee:af:e7:dc:f0:ab:7f:1a:0f:e1:3f:
29:fb:8e:13:1a:10:4f:76:fb:38:0a:79:8e:49:cb:ab:1d:c3:
1f:e5:11:d2:06:15:44:2d:bb:c0:68:f7:91:40:e8:10:85:c0:
6f:0f:e8:12:6c:76:d7:65:5f:52:a2:19:90:32:3d:9e:47:e0:
07:d6:b8:7b:07:79:fe:c0:5e:b0:3e:96:d8:3d:00:c8:6e:45:
04:63:41:34:ee:72:ff:25:6c:3b:16:90:f8:9d:76:4b:2f:ad:
78:0c:d7:0d:02:a4:a2:ae:af:30:20:dc:07:53:dd:16:ac:64:
c7:91:88:d6:79:68:09:a7:11:65:ff:3a:ca:be:76:c5:7a:6f:
7a:68:30:66:da:ec:48:15:3c:8c:c1:34:af:0e:85:7e:97:c8:
34:b9:c5:c9:29:02:d8:6e:52:95:d7:cc:b9:8a:d7:f6:10:96:
cf:88:d1:f1:e4:da:2c:a4:3d:ba:82:eb:c9:7f:3e:5a:96:3c:
4d:e0:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:12:58 2026 by rpki-client