Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
File: AS6206.roa (raw, json)
Hash identifier: UjSjTzLck85BhwhC9r5sVDrpsXEffXY0VRGUU6CJQbQ=
Subject key identifier: AD:7D:FD:49:94:07:9B:7B:2B:6F:E7:60:81:9A:F3:15:07:6D:E2:C7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6739846D003626405E3C6F80981EC85C63927ED1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
Signing time: Mon 06 Apr 2026 09:47:02 +0000
ROA not before: Mon 06 Apr 2026 09:42:02 +0000
ROA not after: Mon 05 Apr 2027 09:47:02 +0000
asID: 6206
IP address blocks: 45.133.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:39:84:6d:00:36:26:40:5e:3c:6f:80:98:1e:c8:5c:63:92:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 6 09:42:02 2026 GMT
Not After : Apr 5 09:47:02 2027 GMT
Subject: CN=AD7DFD4994079B7B2B6FE760819AF315076DE2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:cc:68:49:3b:ac:b4:e4:1f:08:13:8c:71:
07:6f:c3:b8:ef:0d:a5:1a:0a:c6:36:77:f0:57:8d:
e9:8c:c2:d6:4c:d4:81:7f:a3:ab:2d:48:de:45:fa:
76:af:23:39:50:91:ea:97:ce:03:33:e5:5f:b5:93:
22:b9:7a:3d:0b:7c:f2:1e:9e:b5:85:16:8f:02:69:
77:c1:a8:43:f5:54:5e:d1:52:3d:c7:77:0e:32:fb:
90:fd:07:39:b6:39:1a:cf:7b:88:1a:c0:71:a9:4f:
f8:d1:5f:49:84:77:a3:7e:0f:68:ee:3c:34:a3:1d:
fd:23:08:30:63:00:55:0e:1d:40:60:20:99:22:f2:
6a:ed:93:b7:f2:e0:8f:8e:51:dc:70:93:63:05:ab:
06:f9:3a:2e:3a:43:1a:37:aa:bd:ca:5b:47:86:81:
30:b7:23:10:e0:b4:6c:33:4a:d1:28:68:f7:03:81:
7f:ee:bf:80:a4:2b:e5:ce:fe:3e:18:79:80:5d:b6:
7b:ec:47:b4:d5:93:67:77:d4:07:84:81:23:ea:fb:
36:8d:e6:a0:29:21:a7:28:f0:34:25:ac:a3:07:e4:
93:4f:f9:2b:e0:ea:e3:21:af:78:3b:7d:c5:8a:d7:
3d:45:a0:5f:9b:e0:09:f8:c4:f0:2f:87:ba:d3:2e:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:FD:49:94:07:9B:7B:2B:6F:E7:60:81:9A:F3:15:07:6D:E2:C7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.174.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9d:19:76:10:63:50:7b:9d:dc:2c:9e:b3:35:88:dd:63:6b:
36:b0:01:b3:21:78:61:11:e4:5b:10:ba:c2:19:ff:a7:d4:e6:
3e:c3:41:ae:b6:cd:92:bb:00:15:dc:fd:87:f6:73:05:8d:d1:
9d:ce:d9:5b:90:b0:37:a6:41:06:fb:1c:10:bf:aa:ce:4e:8d:
3c:9c:67:61:6f:17:e4:ee:74:ce:5d:cf:d5:ad:5e:98:6f:34:
0c:48:eb:8f:b3:17:5b:d8:da:30:21:7d:68:25:f9:9c:dd:b6:
ef:2f:2d:b1:d3:bf:da:a6:f7:77:15:bd:0d:eb:b1:c3:9a:74:
eb:cd:97:ef:2b:53:12:49:44:7d:5f:19:8c:94:a4:e1:cf:6b:
50:3d:34:6d:a5:11:99:b1:ef:38:17:5a:d6:46:62:82:5e:7c:
d4:8c:a0:cc:c1:fa:21:ee:9b:0a:50:c5:c5:28:20:7c:2b:5b:
3c:ec:f9:d7:2f:95:c7:90:59:fd:e4:ac:e0:42:6d:ab:09:68:
56:7e:7f:0e:f9:dd:a1:fc:47:51:22:a9:2b:08:11:1b:a2:6b:
26:32:03:83:fe:af:09:17:37:a1:32:a4:f0:a9:0f:2b:b7:27:
16:41:d4:5f:ba:dc:e9:98:55:d4:51:5a:70:d0:a1:a5:cd:43:
af:03:2e:ad
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUZzmEbQA2JkBePG+AmB7IXGOSftEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA0MDYwOTQyMDJaFw0yNzA0MDUwOTQ3MDJaMDMxMTAvBgNV
BAMTKEFEN0RGRDQ5OTQwNzlCN0IyQjZGRTc2MDgxOUFGMzE1MDc2REUyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFcxoSTustOQfCBOMcQdvw7jv
DaUaCsY2d/BXjemMwtZM1IF/o6stSN5F+navIzlQkeqXzgMz5V+1kyK5ej0LfPIe
nrWFFo8CaXfBqEP1VF7RUj3Hdw4y+5D9Bzm2ORrPe4gawHGpT/jRX0mEd6N+D2ju
PDSjHf0jCDBjAFUOHUBgIJki8mrtk7fy4I+OUdxwk2MFqwb5Oi46Qxo3qr3KW0eG
gTC3IxDgtGwzStEoaPcDgX/uv4CkK+XO/j4YeYBdtnvsR7TVk2d31AeEgSPq+zaN
5qApIaco8DQlrKMH5JNP+Svg6uMhr3g7fcWK1z1FoF+b4An4xPAvh7rTLszTAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUrX39SZQHm3srb+dggZrzFQdt4scwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjIwNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2FrjAN
BgkqhkiG9w0BAQsFAAOCAQEAkJ0ZdhBjUHud3CyeszWI3WNrNrABsyF4YRHkWxC6
whn/p9TmPsNBrrbNkrsAFdz9h/ZzBY3Rnc7ZW5CwN6ZBBvscEL+qzk6NPJxnYW8X
5O50zl3P1a1emG80DEjrj7MXW9jaMCF9aCX5nN227y8tsdO/2qb3dxW9Deuxw5p0
682X7ytTEklEfV8ZjJSk4c9rUD00baURmbHvOBda1kZigl581IygzMH6Ie6bClDF
xSggfCtbPOz51y+Vx5BZ/eSs4EJtqwloVn5/DvndofxHUSKpKwgRG6JrJjIDg/6v
CRc3oTKk8KkPK7cnFkHUX7rc6ZhV1FFacNChpc1DrwMurQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:22:45 2026 by rpki-client