Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: NdbBM6wBFcYJjt85rxrF0PUhfvecSPhqh34gc6QoQas=
Subject key identifier: DE:C7:E3:56:CC:6E:40:3C:EA:61:47:2E:AF:7C:C1:9C:1C:0E:71:E9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5E5B167891D712921E2DF8A511FB7727958530DE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
Signing time: Tue 03 Nov 2026 16:22:41 +0000
ROA not before: Tue 03 Nov 2026 16:17:41 +0000
ROA not after: Tue 02 Nov 2027 16:22:41 +0000
asID: 6079
IP address blocks: 191.101.27.0/24 maxlen: 24
2a03:a960::/29 maxlen: 48
2a0a:7e00::/29 maxlen: 48
2a0a:8600::/29 maxlen: 48
2a0b:3300::/29 maxlen: 48
2a0c:fa40::/29 maxlen: 48
2a0d:4b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5b:16:78:91:d7:12:92:1e:2d:f8:a5:11:fb:77:27:95:85:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 3 16:17:41 2026 GMT
Not After : Nov 2 16:22:41 2027 GMT
Subject: CN=DEC7E356CC6E403CEA61472EAF7CC19C1C0E71E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:8d:62:68:2d:08:fd:0b:ec:10:de:a3:71:
9d:c4:18:58:76:ee:a1:39:bb:cf:af:c6:ba:06:e5:
75:33:0e:1d:e8:88:d1:94:9e:d3:79:4e:0c:da:e2:
d8:e5:6a:55:79:f2:ba:b6:d3:dd:d5:7c:fb:30:41:
02:3d:90:5b:07:a0:5a:76:ae:6c:24:04:31:60:32:
66:fd:b4:84:2b:f3:45:f5:5a:7d:4b:0d:16:d8:88:
7e:7a:de:01:fe:7e:f5:41:56:37:aa:1d:8b:ef:4f:
9d:4d:b3:8b:5b:38:5c:00:fe:01:99:6d:60:3d:76:
cd:ca:4e:f7:32:43:63:69:60:39:cb:07:02:b2:e0:
7d:e6:26:4b:4b:9f:b6:03:36:d7:3b:9c:69:aa:56:
99:ff:16:b1:60:25:48:82:42:ee:fd:fa:90:e9:61:
1f:c9:37:b6:85:65:df:e3:80:6b:f4:4c:40:bf:ec:
20:97:57:fe:19:ea:9b:71:2a:18:26:32:df:5f:a9:
fc:43:1d:f9:48:b9:5a:c5:0f:9e:9a:aa:b7:dc:5a:
48:68:ca:ab:43:77:58:9b:f9:62:a3:2d:f6:bb:5c:
9c:e2:04:26:49:ef:2a:9f:6e:9d:a2:79:8f:9c:c4:
8c:99:e3:6a:80:b2:eb:d3:08:f9:85:ec:8e:12:f9:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:E3:56:CC:6E:40:3C:EA:61:47:2E:AF:7C:C1:9C:1C:0E:71:E9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.27.0/24
IPv6:
2a03:a960::/29
2a0a:7e00::/29
2a0a:8600::/29
2a0b:3300::/29
2a0c:fa40::/29
2a0d:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:ce:2b:52:92:f6:c2:95:8b:29:39:4d:7f:c0:78:04:d4:d2:
81:f7:b0:7b:4a:c3:87:67:cf:3f:66:73:3a:c4:88:72:b1:17:
30:f2:d5:09:8e:b5:44:1c:88:a0:a3:f4:f5:91:61:db:02:40:
8a:9b:f1:15:35:44:91:92:95:1f:83:60:39:c1:dd:2b:ca:b7:
eb:1b:18:a8:10:e6:d1:d0:18:64:1b:57:4e:71:61:22:ad:21:
67:c9:07:8e:05:71:ba:b5:27:d4:f6:1c:8e:02:43:9c:fc:33:
29:71:d9:f8:97:30:76:79:93:50:e6:33:df:8b:f6:1e:dd:d7:
f1:21:aa:2c:b3:82:ce:17:5e:fa:b8:3e:f6:85:68:71:f2:c1:
f2:0c:36:11:91:5b:16:d5:21:36:7b:cc:73:44:06:4e:cf:21:
eb:ab:3d:b4:0e:d7:56:6b:30:61:31:50:1b:1d:fd:a7:ba:35:
bc:8f:80:a3:0d:ed:11:b6:44:cf:06:49:4c:3e:75:04:cf:5a:
39:48:c4:06:aa:71:8b:86:90:1e:04:7e:3b:ca:85:4c:66:96:
f2:b0:2b:93:3f:f7:38:86:a6:70:75:4e:4c:0c:10:f6:c3:6d:
22:e5:06:19:2c:b6:6f:28:af:94:9f:cb:89:a3:d6:62:b0:e7:
4e:f9:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:19:38 2026 by rpki-client