Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=
Subject key identifier: 52:28:2E:A5:64:58:BE:C1:C0:53:E7:28:41:66:1F:67:93:B0:D5:CD
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 4E355412118268175C4506FEBA81791E82B5DDEC
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS6079.roa
Signing time: Tue 04 Nov 2025 15:33:52 +0000
ROA not before: Tue 04 Nov 2025 15:28:52 +0000
ROA not after: Tue 03 Nov 2026 15:33:52 +0000
asID: 6079
IP address blocks: 5.151.103.0/24 maxlen: 24
5.151.122.0/24 maxlen: 24
5.151.126.0/24 maxlen: 24
5.151.128.0/24 maxlen: 24
5.151.129.0/24 maxlen: 24
5.151.150.0/24 maxlen: 24
5.151.192.0/24 maxlen: 24
5.151.193.0/24 maxlen: 24
5.151.194.0/24 maxlen: 24
5.151.195.0/24 maxlen: 24
5.151.224.0/24 maxlen: 24
5.151.225.0/24 maxlen: 24
5.151.243.0/24 maxlen: 24
5.151.253.0/24 maxlen: 24
31.220.243.0/24 maxlen: 24
37.203.146.0/24 maxlen: 24
37.203.168.0/24 maxlen: 24
37.203.169.0/24 maxlen: 24
37.203.170.0/24 maxlen: 24
46.33.2.0/24 maxlen: 24
46.33.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:35:54:12:11:82:68:17:5c:45:06:fe:ba:81:79:1e:82:b5:dd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 4 15:28:52 2025 GMT
Not After : Nov 3 15:33:52 2026 GMT
Subject: CN=52282EA56458BEC1C053E72841661F6793B0D5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:b9:8e:4b:53:03:c9:27:95:f4:2d:b9:c7:
1d:21:2a:a5:c4:f9:0e:04:ff:9e:8b:7e:a7:71:6f:
1c:79:3c:9c:9f:e7:3e:29:03:e4:b6:1a:91:d9:67:
7a:09:a8:12:74:9c:84:a9:05:15:ec:7b:66:02:17:
66:d0:b8:2c:28:15:51:70:7a:3f:3b:75:ba:32:84:
80:42:8c:07:b4:67:2c:50:10:5b:5e:d5:80:b1:35:
a4:db:ea:d8:df:e3:ba:ce:a7:df:02:bc:8a:3d:3a:
5f:9a:49:ba:f9:94:22:a9:71:a2:be:f1:22:5f:0b:
0a:28:dc:c1:5b:b7:35:af:63:30:db:b8:39:87:96:
f2:50:00:48:0f:6c:3c:1e:2d:6f:2c:89:af:ed:65:
e7:bf:2d:32:dc:e7:2f:76:22:3f:37:d0:1c:74:54:
52:4b:bb:c9:f9:94:fb:c6:bb:2c:5b:71:91:c2:aa:
c4:59:f2:a6:4f:72:c8:55:f3:f0:99:74:b0:f4:b1:
d5:2e:45:72:79:d5:10:3b:f4:a7:d7:cc:35:b7:b5:
62:ac:82:6d:0e:ec:65:d6:82:b5:36:6f:74:de:e3:
da:3c:d7:2c:3d:d1:1e:94:7a:51:be:ee:d9:f8:ca:
89:99:79:0e:d2:2b:cf:12:d6:2d:72:16:ed:74:20:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:2E:A5:64:58:BE:C1:C0:53:E7:28:41:66:1F:67:93:B0:D5:CD
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.151.103.0/24
5.151.122.0/24
5.151.126.0/24
5.151.128.0/23
5.151.150.0/24
5.151.192.0/22
5.151.224.0/23
5.151.243.0/24
5.151.253.0/24
31.220.243.0/24
37.203.146.0/24
37.203.168.0-37.203.170.255
46.33.2.0/24
46.33.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:17:22:e7:9f:a4:fa:96:dc:3f:86:9e:7e:94:b3:43:91:4c:
e4:e2:5d:a5:e6:97:36:f9:88:07:1a:07:20:37:73:2c:5e:e3:
cc:76:43:4a:dc:09:f2:d2:bb:f7:15:5a:b7:fa:cc:ba:5a:45:
5c:6b:68:fb:7c:69:e0:93:2f:44:ad:08:0a:42:ff:42:7a:cb:
9f:2c:fb:79:fa:cb:88:5b:ca:af:82:44:17:cc:21:fb:24:37:
95:83:da:70:80:46:85:2a:f8:7a:2e:2a:10:09:3e:e8:fd:70:
05:01:82:28:7d:d5:ec:a4:c2:e1:28:e8:bf:57:ba:02:af:cf:
ea:e3:e6:a3:7d:61:eb:61:6b:47:4f:87:9b:93:9a:9a:db:5f:
f0:c4:18:3a:59:e5:bc:87:f5:b6:5b:f5:48:92:0a:e2:93:fc:
86:81:64:99:d8:bf:49:1f:fb:c0:01:68:66:a7:5f:94:65:3f:
33:42:20:22:45:83:db:55:61:3b:87:f9:1c:37:72:55:cf:7f:
d0:3d:e6:9d:a4:a1:53:87:f5:5b:55:d8:2b:f9:9d:51:29:66:
42:a8:0c:9f:7f:89:f8:03:7d:d4:61:fd:96:ef:b1:34:0a:39:
e0:a2:00:9f:05:d4:24:9f:ee:b0:dc:96:f6:b0:b7:15:90:08:
ad:44:07:80
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUTjVUEhGCaBdcRQb+uoF5HoK13ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj
YzRhOTMyNjAeFw0yNTExMDQxNTI4NTJaFw0yNjExMDMxNTMzNTJaMDMxMTAvBgNV
BAMTKDUyMjgyRUE1NjQ1OEJFQzFDMDUzRTcyODQxNjYxRjY3OTNCMEQ1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyLmOS1MDySeV9C25xx0hKqXE
+Q4E/56Lfqdxbxx5PJyf5z4pA+S2GpHZZ3oJqBJ0nISpBRXse2YCF2bQuCwoFVFw
ej87dboyhIBCjAe0ZyxQEFte1YCxNaTb6tjf47rOp98CvIo9Ol+aSbr5lCKpcaK+
8SJfCwoo3MFbtzWvYzDbuDmHlvJQAEgPbDweLW8sia/tZee/LTLc5y92Ij830Bx0
VFJLu8n5lPvGuyxbcZHCqsRZ8qZPcshV8/CZdLD0sdUuRXJ51RA79KfXzDW3tWKs
gm0O7GXWgrU2b3Te49o81yw90R6UelG+7tn4yomZeQ7SK88S1i1yFu10IB6HAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUUigupWRYvsHAU+coQWYfZ5Ow1c0wHwYDVR0j
BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy
OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14
S2t5WS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJlNmRhNWM3LTY3MGEt
NDFiMS05NmViLTM4OTkzODhiMjkyYy8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjB1BggrBgEFBQcBBwEB/wRmMGQwYgQCAAEwXAMEAAWXZwME
AAWXegMEAAWXfgMEAQWXgAMEAAWXlgMEAgWXwAMEAQWX4AMEAAWX8wMEAAWX/QME
AB/c8wMEACXLkjAMAwQDJcuoAwQAJcuqAwQALiECAwQALiEeMA0GCSqGSIb3DQEB
CwUAA4IBAQBOFyLnn6T6ltw/hp5+lLNDkUzk4l2l5pc2+YgHGgcgN3MsXuPMdkNK
3Any0rv3FVq3+sy6WkVca2j7fGngky9ErQgKQv9CesufLPt5+suIW8qvgkQXzCH7
JDeVg9pwgEaFKvh6LioQCT7o/XAFAYIofdXspMLhKOi/V7oCr8/q4+ajfWHrYWtH
T4ebk5qa21/wxBg6WeW8h/W2W/VIkgrik/yGgWSZ2L9JH/vAAWhmp1+UZT8zQiAi
RYPbVWE7h/kcN3JVz3/QPeadpKFTh/VbVdgr+Z1RKWZCqAyff4n4A33UYf2W77E0
CjngogCfBdQkn+6w3Jb2sLcVkAitRAeA
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:57 2025 by rpki-client