Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: MpRcURFRlgfSbNmXPIkUTnRavseXLwBqFBruKirzefA=
Subject key identifier: 65:30:08:7B:BD:B7:E6:5A:6E:CE:CC:6F:16:3E:62:B4:A4:8D:CF:B7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7BE1E819311353C3444E84235142899AA02791E6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Tue 08 Sep 2026 00:07:34 +0000
ROA not before: Tue 08 Sep 2026 00:02:34 +0000
ROA not after: Tue 07 Sep 2027 00:07:34 +0000
asID: 6079
IP address blocks: 96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.232.0/21 maxlen: 24
150.241.199.0/24 maxlen: 24
155.117.111.0/24 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.195.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.115.0/24 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e1:e8:19:31:13:53:c3:44:4e:84:23:51:42:89:9a:a0:27:91:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:02:34 2026 GMT
Not After : Sep 7 00:07:34 2027 GMT
Subject: CN=6530087BBDB7E65A6ECECC6F163E62B4A48DCFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8e:30:37:89:84:c8:22:d0:fb:18:60:aa:ad:
ee:23:79:e6:29:9e:cc:4a:30:5b:70:f5:84:b4:a0:
7c:18:d3:af:3b:ee:87:32:16:ea:5e:b9:8c:33:f5:
1c:b9:4d:f9:6e:4e:81:c4:02:af:88:96:0f:76:73:
a5:ea:d3:6f:68:3e:6d:2c:0a:e3:7b:82:82:15:0d:
da:e8:5d:01:56:fb:96:d2:33:7f:e1:c0:bb:b6:38:
bd:39:28:01:3b:2d:e0:a2:a2:c0:68:fc:50:45:03:
03:8e:cc:d6:68:96:85:fc:e4:ec:b2:19:fa:70:ac:
40:87:56:2e:bb:74:dc:94:50:35:fc:36:18:e4:cd:
24:ef:5e:ad:9a:22:9f:a6:2d:eb:2b:d8:32:ab:95:
38:66:10:8c:ed:c8:7c:0c:58:14:7e:09:37:0b:4d:
6c:cf:5a:0b:d7:cc:9a:ca:44:f0:67:01:45:2d:2b:
79:bd:16:54:7d:d8:39:63:a1:0c:21:a4:cc:03:47:
ed:ea:b0:52:56:ed:45:d6:ee:f8:49:06:22:ce:4a:
57:ed:7a:0c:8d:7f:1d:72:27:2c:81:d2:f5:84:15:
77:10:3c:96:2d:2e:68:c7:3d:6b:a2:30:50:bc:4c:
d5:45:7b:25:ca:b4:09:8c:d6:e8:68:8f:7d:81:f3:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:30:08:7B:BD:B7:E6:5A:6E:CE:CC:6F:16:3E:62:B4:A4:8D:CF:B7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.227.0/24
96.62.248.0/24
140.150.160.0/20
140.233.192.0/18
143.14.232.0/21
150.241.199.0/24
155.117.111.0/24
155.117.149.0/24
155.117.195.0/24
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.115.0/24
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.192.0/18
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
33:e6:7b:a9:96:5d:f9:22:aa:d6:d8:97:82:fc:8b:a8:a8:5f:
d2:a8:f5:2c:b1:93:d8:08:85:9c:c1:ef:48:57:99:e0:1f:2b:
20:65:e9:41:cc:b8:50:dd:2e:3c:26:2e:b4:aa:9f:b0:d8:45:
0c:40:02:a6:94:5d:f2:f9:2c:bf:7d:b5:30:7f:14:af:92:be:
bb:be:ed:bd:82:c5:a9:fd:f7:81:31:78:12:21:02:74:bc:39:
2b:60:ee:4a:54:24:de:50:db:8a:e0:4c:37:46:b3:2e:0f:bd:
02:44:ed:b7:ce:91:08:8a:ed:4d:3e:b1:63:eb:a4:0a:5a:ef:
51:9d:c5:fd:77:29:39:f6:06:f7:dc:df:35:c1:a4:0b:b8:2a:
a3:52:04:37:e8:9c:06:dc:54:9c:f3:0b:b2:49:e3:03:4d:8e:
88:fd:55:91:e5:d3:5c:8c:de:2f:87:27:75:a5:8a:6e:5e:1b:
aa:c2:5e:58:c9:74:8f:b7:c7:ab:c5:e5:94:d3:3e:fd:fb:d2:
87:21:d9:25:ca:b6:3f:c5:ab:fe:f7:76:62:b6:de:20:b6:c5:
dc:51:6e:d3:14:91:f9:9f:5f:15:99:b2:d1:96:1d:05:62:d0:
ed:44:04:3e:d4:c6:1b:fa:ce:e9:22:d8:6c:8e:f9:92:e8:26:
86:d9:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:49:35 2026 by rpki-client