Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS6517.roa
File: AS6517.roa (raw, json)
Hash identifier: y5T2NIUudOe2Q48xrwWJFGyesGkFCZdctZ5Mw2JTZjg=
Subject key identifier: B8:1D:8D:B0:51:7C:84:2F:88:6E:6D:93:9D:5C:80:CE:F1:F5:86:AE
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4592A50FE8F277B3707D2499E059FF26D061CC15
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS6517.roa
Signing time: Thu 05 Feb 2026 16:18:17 +0000
ROA not before: Thu 05 Feb 2026 16:13:17 +0000
ROA not after: Thu 04 Feb 2027 16:18:17 +0000
asID: 6517
IP address blocks: 2a14:7580:f600::/40 maxlen: 40
2a14:7583:5e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:92:a5:0f:e8:f2:77:b3:70:7d:24:99:e0:59:ff:26:d0:61:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 5 16:13:17 2026 GMT
Not After : Feb 4 16:18:17 2027 GMT
Subject: CN=B81D8DB0517C842F886E6D939D5C80CEF1F586AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:63:50:f1:d2:85:23:4d:7a:a0:7c:88:a5:
f4:25:36:89:b2:7e:11:ec:a5:a5:03:04:e3:f3:ba:
df:ba:a4:df:3f:74:94:f9:30:fd:cf:b0:94:08:43:
0a:fa:11:e0:72:cb:71:a0:05:ce:c3:f8:8f:b2:5e:
19:0b:ac:b7:c4:d0:0e:26:69:42:3d:d9:97:d7:cd:
c3:47:e5:1b:36:ad:f4:ba:f4:bb:ba:24:ed:97:0a:
4e:ea:5a:4f:cb:f7:da:d1:d8:6c:7b:e4:9d:ae:94:
a6:e8:bb:4a:db:d6:b2:ec:ce:33:fe:e2:53:75:59:
42:93:96:fd:45:c8:7b:fc:40:bf:a3:d5:7c:e5:ff:
c1:7f:0e:47:98:2f:74:4e:f6:4c:6e:b6:88:cc:3b:
37:40:53:3d:56:11:48:06:49:04:19:87:7a:2e:d2:
8c:f8:3f:1a:23:7e:7b:4b:d3:51:b6:b2:63:2d:0d:
d6:e5:8c:a1:7e:e7:4a:7b:c5:33:5e:4e:0d:05:d3:
c6:cd:f9:d2:ce:b8:a7:9e:b2:77:08:71:f8:00:a5:
d7:94:fa:e1:d3:39:a1:b9:65:36:a6:2f:8f:ff:c7:
f0:ef:fa:cf:5d:a0:f0:d3:37:d6:c8:a4:7f:2d:e8:
ba:4d:40:ec:63:ef:56:bf:44:9e:e2:c3:5c:2b:92:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:8D:B0:51:7C:84:2F:88:6E:6D:93:9D:5C:80:CE:F1:F5:86:AE
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS6517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f600::/40
2a14:7583:5e00::/40
Signature Algorithm: sha256WithRSAEncryption
08:61:90:05:68:1a:f2:04:d7:fe:f5:20:ec:b0:20:c9:0f:15:
14:8b:cb:b7:9d:0f:ca:ca:0e:d9:bb:36:db:5c:55:22:b1:47:
f0:31:e6:7e:ac:57:93:b0:bb:fe:f8:0f:c5:b7:80:c5:c1:d4:
8b:87:51:47:e0:a6:61:63:ed:a8:ce:ae:c0:c1:10:26:8e:c7:
68:7d:cc:be:34:2e:e6:96:98:da:d2:1a:8a:12:3c:ab:15:e4:
26:2d:c1:a1:88:7d:f2:47:4c:77:a7:75:c4:11:1d:30:ae:ae:
97:e3:2d:40:4a:53:e3:f0:4b:ec:c5:fe:fc:dd:f1:c1:aa:0c:
8e:2a:c9:d5:17:f0:68:fe:63:ca:f1:d8:c3:ae:65:40:55:04:
de:d4:ac:a9:bf:a5:02:76:b5:08:1d:85:7d:04:16:57:3c:55:
7c:b2:c5:9f:2e:46:a9:f8:9a:8b:f6:9c:2f:c9:19:97:35:14:
9a:8a:e2:10:71:c8:44:b2:06:f6:1b:38:24:d4:ee:98:ef:6d:
c1:b8:bb:86:b6:f8:b2:72:7e:3b:e5:eb:98:0c:57:50:81:03:
d0:e1:f4:29:03:dd:b3:91:ca:51:ce:99:d2:4a:90:79:89:8f:
ae:22:21:e2:3f:5d:e9:12:61:a1:98:ff:35:2f:08:1b:1d:21:
ae:c3:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:33:27 2026 by rpki-client