Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: 2EeRlqyUoHhXeVnFRoAZ6jmzPyVXEH/soU5+cUUs26U=
Subject key identifier: 43:8D:F2:59:D3:68:B2:E8:10:C8:A4:31:DE:45:27:88:AF:DC:FB:C3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 48421F96C9632F1A33AB068428C5E31795E6C87D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Thu 11 Jun 2026 10:42:59 +0000
ROA not before: Thu 11 Jun 2026 10:37:59 +0000
ROA not after: Thu 10 Jun 2027 10:42:59 +0000
asID: 6079
IP address blocks: 96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.232.0/21 maxlen: 24
155.117.111.0/24 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.195.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.63.0/24 maxlen: 24
168.222.98.0/23 maxlen: 24
168.222.123.0/24 maxlen: 24
168.222.124.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:42:1f:96:c9:63:2f:1a:33:ab:06:84:28:c5:e3:17:95:e6:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 11 10:37:59 2026 GMT
Not After : Jun 10 10:42:59 2027 GMT
Subject: CN=438DF259D368B2E810C8A431DE452788AFDCFBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:c4:4b:c1:33:10:d8:ff:c6:5b:f6:d9:e9:
b5:3b:a0:ab:a3:47:e5:c2:be:b7:64:df:3d:48:05:
38:8a:17:d6:03:68:06:ef:14:7f:8b:a9:04:10:96:
39:2f:14:08:4f:9c:49:d8:f4:01:c7:10:7e:23:15:
4d:c9:ea:4f:78:9a:19:c8:da:b2:9d:6b:5d:b1:ec:
d5:f6:a1:49:5d:42:30:e9:f3:41:10:f8:4d:9d:15:
6f:d6:d2:2f:8f:f5:e6:44:18:36:70:81:33:57:9f:
a5:16:3c:cd:74:87:dd:a0:49:69:e9:ff:ef:08:6c:
63:87:db:78:8d:ca:8f:9c:1b:8b:ee:04:6e:10:f8:
a3:02:c0:60:81:d6:68:07:c8:e5:f7:a9:dd:20:dd:
de:02:2a:1c:00:e5:4c:f0:75:47:a7:5b:57:6c:52:
3d:90:a7:6f:1b:c6:08:4d:61:b9:f3:c1:a9:0a:91:
81:08:b2:2f:90:fe:1f:3e:32:af:35:74:e3:33:8a:
51:61:1c:a6:c6:e4:78:aa:eb:b4:ce:8e:08:e9:ff:
e5:c8:f0:d0:af:e8:c0:81:f6:2a:c1:73:03:a0:ea:
8a:94:f9:a8:5c:56:0f:7f:58:f2:5a:7d:11:98:17:
84:25:63:2d:63:28:59:a4:d7:81:40:bd:7f:b0:8c:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:F2:59:D3:68:B2:E8:10:C8:A4:31:DE:45:27:88:AF:DC:FB:C3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.227.0/24
96.62.248.0/24
140.150.160.0/20
140.233.192.0/18
143.14.232.0/21
155.117.111.0/24
155.117.149.0/24
155.117.195.0/24
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.255.255
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.11.0/24
168.222.63.0/24
168.222.98.0/23
168.222.123.0-168.222.124.255
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:72:69:c1:46:06:65:fa:99:5d:b0:01:1d:e9:54:ed:83:df:
d2:59:db:37:73:0b:ce:87:6c:4d:5c:6c:e3:be:37:6c:e1:03:
45:4a:6f:59:78:34:10:f6:8e:c1:76:2d:fb:3b:08:b2:09:db:
a9:11:ea:72:a8:d3:a7:3e:39:8b:4b:27:4a:b8:75:99:9b:35:
cc:c7:2b:02:06:65:88:cb:ca:82:93:db:55:6b:63:c1:83:64:
4c:59:81:27:1c:bb:4d:cb:3d:9a:f8:cd:f1:b1:8e:aa:5a:16:
09:e0:21:be:d5:8b:c9:3a:7d:af:a4:20:b8:ad:38:d6:6d:8e:
a1:99:f6:9c:b7:7a:c2:c1:19:33:63:9c:1b:4e:77:ff:fd:b8:
77:8d:99:04:0b:86:f8:eb:c3:2d:5f:18:2d:05:72:b5:f7:0d:
2b:f1:58:ed:a9:c7:9f:af:48:44:6d:6e:cb:fb:8f:a5:93:03:
ee:7c:a1:4e:6e:8d:26:11:ef:92:5c:49:99:c8:3c:ea:91:a6:
7f:2a:51:74:27:d7:96:2f:3b:5a:9b:af:fe:04:69:ea:2a:6e:
34:f2:7c:a0:a2:8c:9a:2a:4f:8d:35:c7:40:11:dd:c2:89:8d:
43:c4:cd:e3:f3:c7:c0:1c:ab:33:0e:57:a8:19:47:9a:17:76:
c2:e3:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:28 2026 by rpki-client