Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: +Xy9y7y7n4nvvn87OuoAmpalp1aasxD3SatvrgPc7zI=
Subject key identifier: AB:E9:FA:A8:BE:01:80:1E:BA:46:97:AE:23:CF:73:3E:32:0F:32:D2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2CA83DA185FF84C563011CF9E040D24DDCD10CE8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
Signing time: Fri 30 May 2025 16:25:13 +0000
ROA not before: Fri 30 May 2025 16:20:13 +0000
ROA not after: Fri 29 May 2026 16:25:13 +0000
asID: 6079
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.124.0/22 maxlen: 22
82.22.128.0/21 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.36.0/22 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.52.0/22 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.168.0/21 maxlen: 24
82.29.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a8:3d:a1:85:ff:84:c5:63:01:1c:f9:e0:40:d2:4d:dc:d1:0c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 30 16:20:13 2025 GMT
Not After : May 29 16:25:13 2026 GMT
Subject: CN=ABE9FAA8BE01801EBA4697AE23CF733E320F32D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:6e:5a:9d:1d:19:ec:b1:24:4f:81:13:ee:
61:b9:09:cc:d1:49:0c:30:c0:85:fc:74:c6:7c:e1:
1b:35:43:cd:86:fe:cc:da:89:32:1c:34:ee:5a:de:
a3:2a:d6:03:2b:74:2e:10:a7:0f:ff:3a:e0:8a:c8:
40:22:3a:ed:1d:da:12:76:31:19:9e:ab:4f:49:e9:
f3:ab:fa:83:2e:50:d5:95:1b:5c:94:9e:7a:11:52:
c2:a7:36:57:96:79:b8:ce:e9:9b:05:5e:63:6e:ab:
6c:ff:d9:03:84:f4:da:d2:7a:fa:29:ca:bc:df:c0:
01:9d:6b:19:f1:4f:87:4a:8b:34:e1:46:ce:90:74:
29:11:14:3e:7f:ea:80:b7:79:12:5a:1a:a3:fb:aa:
0a:a8:f5:70:31:62:ae:5b:bb:b2:7a:af:05:3d:79:
89:58:44:bb:26:f3:e6:49:52:2f:c1:7c:4f:c2:b0:
aa:02:90:13:4b:ea:5c:9d:c6:45:5a:2f:43:76:8c:
cb:d2:f3:d7:df:41:4e:00:7a:4a:a8:6e:33:e3:a6:
78:04:57:45:1d:01:93:a0:9a:59:91:96:f2:2d:d5:
4d:5a:fa:46:f2:14:1c:64:d8:58:b4:ee:9a:e0:7e:
51:18:90:4d:75:00:1c:5f:50:c8:84:e3:9a:ca:f3:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:FA:A8:BE:01:80:1E:BA:46:97:AE:23:CF:73:3E:32:0F:32:D2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.124.0-82.22.139.255
82.22.148.0-82.22.155.255
82.23.152.0/21
82.24.36.0/22
82.25.0.0/22
82.25.52.0/22
82.27.24.0/21
82.27.48.0/20
82.27.136.0-82.27.159.255
82.27.168.0/21
82.29.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:2e:04:f6:50:80:1d:fd:15:6d:a8:c1:54:eb:13:34:c4:12:
eb:3c:0b:f5:26:e0:f4:66:2f:36:1b:be:60:07:04:05:5a:83:
02:1c:c8:58:35:c6:4a:43:34:30:a1:90:fe:e6:6b:f8:39:fa:
23:95:63:27:60:f3:7a:a8:09:ed:7a:30:f1:70:24:bd:73:8b:
64:bf:5e:69:e5:2d:66:d2:97:4c:13:7a:89:f9:6f:24:9c:f3:
63:45:e2:16:6d:d0:ef:ce:19:70:46:8f:4a:9b:27:70:40:bd:
54:c6:99:ca:57:3b:74:3f:da:4f:75:57:1f:c4:2b:36:e9:1b:
48:68:81:18:80:82:2b:3d:be:80:ac:ba:8c:ae:81:a8:15:91:
c9:49:db:a0:2a:60:4e:c5:d2:b5:16:de:2e:77:6e:29:f9:fc:
b8:d3:c8:db:27:e5:cf:3c:88:f6:e1:8b:4e:05:33:06:1c:5a:
94:19:e3:d9:4c:f2:8c:e0:c2:aa:67:24:82:e7:8f:3b:f9:e3:
16:cd:93:b8:ae:d1:8e:28:6c:ea:d0:ea:9e:e9:84:42:26:b3:
4e:c5:35:e6:a3:5f:7a:92:14:44:71:9c:cf:ce:de:29:46:e8:
6b:b9:00:72:95:68:8a:bd:b3:c6:2b:38:25:f6:8b:b8:6f:2a:
eb:0e:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:02 2025 by rpki-client