Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: ANF+l6Y6Y37FnLC6JIQcbN70NeymMuHa3eHl5SHMTaE=
Subject key identifier: 81:E1:53:2A:7B:A1:87:59:8B:A1:1A:F2:3A:65:47:3F:48:8D:F1:DB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 40A933FBAC59B50F536985A8FD5B39691BE0A96D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Fri 30 Oct 2026 03:06:31 +0000
ROA not before: Fri 30 Oct 2026 03:01:31 +0000
ROA not after: Fri 29 Oct 2027 03:06:31 +0000
asID: 6079
IP address blocks: 66.132.156.0/24 maxlen: 24
96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.232.0/21 maxlen: 24
150.241.199.0/24 maxlen: 24
155.117.111.0/24 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.195.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.115.0/24 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a9:33:fb:ac:59:b5:0f:53:69:85:a8:fd:5b:39:69:1b:e0:a9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 30 03:01:31 2026 GMT
Not After : Oct 29 03:06:31 2027 GMT
Subject: CN=81E1532A7BA187598BA11AF23A65473F488DF1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:74:9b:69:72:ef:00:95:82:1d:13:fe:c4:
cc:15:e3:34:ea:96:d6:a3:0e:e1:f3:e8:3a:4e:68:
24:dc:8c:1f:9c:55:87:8c:42:14:21:59:cb:64:4f:
c5:02:a6:68:a4:a8:fb:cd:b9:33:01:f5:1d:8d:67:
a7:eb:bf:91:e3:16:e0:30:b8:37:22:79:4b:15:c3:
4b:9a:f8:b0:d9:e9:c1:94:1d:bb:a2:ce:ba:52:77:
56:30:8d:d1:72:12:86:3d:0a:79:e4:96:e9:ed:0b:
5b:07:20:ce:5e:29:8c:15:38:f0:43:63:1d:e1:a1:
91:6e:b0:34:97:b1:27:7a:e0:64:f2:a8:18:7e:a2:
72:8f:f8:ff:82:7f:5c:ab:7c:d6:28:b9:99:78:ef:
87:58:24:da:d6:b3:7f:70:6b:1a:63:98:7c:14:05:
28:d1:61:a1:5a:c0:29:cc:2c:9b:a7:15:8d:4a:ef:
59:83:86:d8:d8:d8:cd:0f:34:70:2c:80:6c:1b:13:
ea:2e:fe:09:05:fe:40:bb:81:53:f6:aa:0c:14:3a:
07:bf:f6:94:ca:a8:9b:99:cd:cf:fe:d8:d5:13:e8:
82:57:46:22:f9:e2:75:78:3a:a9:c9:42:40:cb:e6:
0b:f3:96:b7:91:90:f5:38:69:a4:32:a3:7e:4c:ef:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:53:2A:7B:A1:87:59:8B:A1:1A:F2:3A:65:47:3F:48:8D:F1:DB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.156.0/24
96.62.227.0/24
96.62.248.0/24
140.150.160.0/20
140.233.192.0/18
143.14.232.0/21
150.241.199.0/24
155.117.111.0/24
155.117.149.0/24
155.117.195.0/24
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.115.0/24
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.192.0/18
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:f5:c8:c2:21:f6:32:76:49:b0:ce:22:52:00:25:7a:05:ef:
44:06:2d:f3:a2:67:90:f3:19:d0:ff:08:80:fd:94:c5:8e:df:
e5:e0:bf:88:74:d4:71:63:6a:8d:a8:29:e7:19:81:d7:ea:34:
d8:6d:45:5b:c5:98:a4:7f:60:9f:10:ce:50:5d:02:8e:86:fb:
38:7f:43:7b:d7:95:56:a6:e6:92:59:2b:21:71:77:ce:66:42:
ae:4b:14:6d:cc:d1:22:4b:21:3b:e2:0f:5e:f3:95:20:e2:a4:
83:d7:da:64:3a:a2:29:87:10:ba:ba:85:a4:98:5b:e9:76:4f:
d5:d2:d0:72:82:fb:d7:2b:8a:b3:02:47:b9:0f:a8:0e:d8:a0:
ec:cc:10:8e:65:dc:86:20:40:43:0f:14:a2:5c:43:32:4d:58:
3b:f9:78:4d:3a:b9:26:54:cf:90:7f:26:ea:ee:ec:85:c8:3f:
d8:f2:b7:9e:bf:f7:b4:d1:2d:ab:73:4f:87:80:c5:09:55:fa:
0a:30:7a:e9:29:25:c0:11:69:fe:9d:c6:0e:24:84:ca:12:e7:
51:d1:1d:22:57:d2:3c:c9:1d:14:c8:7c:c5:01:60:56:50:e5:
28:4c:0c:0d:f5:4c:91:f4:c2:68:75:8c:5c:7a:e2:c9:0c:09:
c2:f4:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:12:51 2026 by rpki-client