Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa
File:                     AS6762.roa (raw, json)
Hash identifier:          Vu+D6JbdLJtN4Ee+MwonYxkQCs/xr0NFEVCWKd40/a0=
Subject key identifier:   D6:4F:8B:1D:38:00:2D:AF:BB:B6:A6:5F:B8:E7:3D:64:16:53:D8:2E
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       188758BF50A58C9C75787CCFAF04B5BCD75D56B8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa
Signing time:             Thu 02 Apr 2026 07:03:32 +0000
ROA not before:           Thu 02 Apr 2026 06:58:32 +0000
ROA not after:            Thu 01 Apr 2027 07:03:32 +0000
asID:                     6762
IP address blocks:        51.146.191.0/24 maxlen: 24
                          51.146.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:87:58:bf:50:a5:8c:9c:75:78:7c:cf:af:04:b5:bc:d7:5d:56:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Apr  2 06:58:32 2026 GMT
            Not After : Apr  1 07:03:32 2027 GMT
        Subject: CN=D64F8B1D38002DAFBBB6A65FB8E73D641653D82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:65:43:56:da:62:8d:39:97:dd:73:47:03:
                    5a:96:b8:4d:fd:55:2c:65:a8:27:d9:91:8e:46:73:
                    29:d0:95:3a:3a:2f:67:bf:b2:ed:d4:56:51:e4:fc:
                    31:2d:9e:a3:61:79:72:e4:f6:dc:06:4c:a9:87:0d:
                    17:0f:fc:c0:76:3f:d4:d9:f9:43:ab:ac:f9:2f:e9:
                    ce:54:24:36:45:13:16:71:51:d4:37:42:dd:7d:4a:
                    c4:07:00:d4:7f:cc:81:d3:30:98:bd:1f:06:31:1d:
                    2d:05:08:40:2c:92:6f:92:e0:5e:02:4e:fa:d2:98:
                    b5:c8:d1:c3:a0:82:fd:e8:59:3d:52:27:c8:57:45:
                    36:ce:e6:92:25:47:96:82:34:81:b2:0e:ae:11:fb:
                    37:c7:45:61:9a:2a:34:cb:2d:f0:0b:9b:b7:79:ee:
                    0b:53:b0:05:a6:d0:97:67:d4:5b:80:0e:b9:1c:e1:
                    0f:4c:c7:91:db:c1:be:f3:6d:8d:13:41:6e:a4:eb:
                    6c:f4:66:98:fe:29:24:4d:c2:fb:17:73:bd:3c:0f:
                    e6:b1:1c:3b:48:67:0a:2e:1a:d6:78:33:44:c6:28:
                    a0:63:da:4e:c8:c9:24:da:99:0d:55:0c:4e:fe:8f:
                    ad:58:e6:e0:be:5b:60:ea:eb:d8:d7:45:f7:8e:7c:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:8B:1D:38:00:2D:AF:BB:B6:A6:5F:B8:E7:3D:64:16:53:D8:2E
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.146.191.0/24
                  51.146.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:72:9c:57:47:38:b8:11:57:66:2a:22:8c:b9:4b:fb:00:
         06:e1:bf:f7:c0:38:cb:ec:94:90:5b:c5:62:5a:76:ce:bf:c9:
         b5:2d:66:a8:49:84:65:b1:4f:99:ff:5c:76:9a:7f:10:4b:51:
         b1:98:ea:d2:e1:7a:46:96:9d:d4:fa:6f:ee:33:a5:db:a4:39:
         4f:7a:08:fb:1a:90:c8:0f:0c:c9:79:cb:2b:b8:be:90:d4:e3:
         28:d5:f7:04:8e:23:94:f9:d0:7b:87:c9:1b:a4:5f:0d:14:4c:
         5c:20:d1:e9:23:80:75:34:57:ea:3c:36:57:f5:70:f7:e7:12:
         e4:0e:af:d3:1f:77:c9:05:5e:43:72:35:3e:38:5d:e7:a6:1b:
         d6:c1:d6:68:20:bf:54:2e:46:08:1c:de:d5:a1:dc:4d:5f:5e:
         9d:7b:9c:51:a1:c5:c9:50:c9:33:e3:00:f2:95:6b:a9:63:0e:
         41:b2:eb:1d:96:f1:ce:95:23:b5:90:a8:b2:99:72:de:4a:6c:
         23:5b:16:90:af:5a:e6:c3:00:84:d8:18:65:71:a2:84:3b:06:
         90:2d:c7:52:42:0c:67:87:79:9f:2a:71:c5:9c:52:94:d1:90:
         62:28:b3:13:63:49:e5:5a:ed:26:b9:74:76:76:3c:3d:1f:a0:
         7c:fd:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:38 2026 by rpki-client