Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS6475.roa
File: AS6475.roa (raw, json)
Hash identifier: P9m+VZutLQzmeu894OhXrBuCz7AWb43mGNe8r2yP758=
Subject key identifier: D7:50:B4:16:96:48:8B:C1:1A:F3:F4:9B:D8:7C:C3:03:09:B3:6E:F4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5CB09B354D69DBC346F8B0C41462B167DD44BA70
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS6475.roa
Signing time: Sun 20 Sep 2026 04:00:59 +0000
ROA not before: Sun 20 Sep 2026 03:55:59 +0000
ROA not after: Sun 19 Sep 2027 04:00:59 +0000
asID: 6475
IP address blocks: 141.11.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b0:9b:35:4d:69:db:c3:46:f8:b0:c4:14:62:b1:67:dd:44:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 03:55:59 2026 GMT
Not After : Sep 19 04:00:59 2027 GMT
Subject: CN=D750B41696488BC11AF3F49BD87CC30309B36EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:38:f7:a8:7c:7f:b0:1d:d0:39:01:d6:6a:
63:44:f7:47:73:f9:0a:b5:8b:3c:e5:7e:35:b7:db:
63:fb:57:d2:cc:9d:91:65:02:61:9a:62:3b:1c:d0:
5d:16:6f:79:b8:f9:58:32:1f:3d:97:de:c8:2c:df:
85:84:7f:3b:5e:19:fb:97:5b:58:a4:1f:57:f4:7f:
9f:7d:4c:23:58:58:d6:af:1d:3f:48:2b:33:f4:6d:
96:92:5c:9a:eb:6b:16:7e:f9:11:7d:68:9f:ab:72:
b4:b6:fc:4b:53:db:d9:19:a4:76:09:a3:4d:7c:c0:
26:38:8a:15:7b:80:19:67:10:f9:a3:d2:7e:76:a7:
ba:df:4a:f2:bd:16:0b:c6:e7:b4:39:0b:2e:55:73:
0b:44:a9:55:1e:56:87:fb:e9:a9:a8:ff:4d:4c:5e:
d5:4d:e6:75:af:78:20:8a:fc:4e:94:75:56:ef:1f:
20:bf:48:90:aa:1f:8c:d5:a7:5e:bb:a0:ef:00:48:
7c:c1:7f:75:e8:5e:27:f5:16:ff:b2:dd:e3:d2:91:
af:eb:cc:49:4a:07:09:2d:78:65:93:61:a9:ef:cf:
12:45:32:25:8f:7a:ae:3e:3e:5a:b8:50:25:22:d7:
a2:78:97:9a:03:34:78:6d:ee:dd:cc:f5:b9:ad:bc:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:B4:16:96:48:8B:C1:1A:F3:F4:9B:D8:7C:C3:03:09:B3:6E:F4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS6475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.95.0/24
Signature Algorithm: sha256WithRSAEncryption
37:17:92:eb:ad:ac:67:d7:04:81:ab:72:a6:2b:a4:e1:46:b4:
49:e6:5d:90:69:df:53:42:f6:b3:0d:29:07:af:39:ac:66:8d:
69:c1:94:f4:a1:14:83:c4:8c:03:f7:ba:ed:cf:e7:62:bf:a2:
9a:c6:c2:52:e1:08:02:6a:55:b4:ca:98:56:8f:b5:9d:31:b1:
dc:98:2b:38:b7:96:b6:4d:cd:1c:12:fa:0c:0f:f5:c4:5a:71:
58:eb:92:1b:3b:70:71:81:0a:2d:bc:da:91:be:fe:26:5f:2b:
58:72:37:dd:e6:01:25:ca:68:c3:54:b6:83:06:62:c6:60:87:
11:c0:24:20:d1:22:e7:06:71:96:f1:d5:20:ce:e6:c1:ff:5d:
a5:27:ce:61:2d:47:3b:a7:24:61:92:60:68:39:e0:31:ad:cf:
0c:28:28:b2:99:f0:d6:db:fd:4a:51:98:78:b4:8a:27:f6:bd:
14:8b:b7:8d:a1:18:e4:46:78:c8:62:71:b0:58:67:df:6d:17:
9d:f8:29:b2:4c:a8:df:72:2d:1a:4d:a9:30:83:4e:4b:e3:fe:
f2:a5:10:74:4f:12:e9:48:fa:9b:1b:4e:93:4f:5c:6c:22:86:
f4:1b:a7:ae:3d:20:bf:8f:67:ea:ee:9c:8d:1c:6c:29:5a:dc:
90:61:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:37 2026 by rpki-client