Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: 3ifFREd+ep4L+HwHIwr0BvtjYdxqtaed9zONKSzb8ds=
Subject key identifier: 36:88:22:FC:28:25:8F:0E:4E:1D:2D:99:94:5C:9B:9C:80:22:18:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16D5BEF1FFA5E7FFC28638BAF90A38FC8CFA14
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
Signing time: Thu 30 Oct 2025 15:52:30 +0000
ROA not before: Thu 30 Oct 2025 15:47:30 +0000
ROA not after: Thu 29 Oct 2026 15:52:30 +0000
asID: 6079
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.36.0/22 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.52.0/22 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.168.0/21 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.38.0/24 maxlen: 24
82.29.144.0/22 maxlen: 24
82.38.201.0/24 maxlen: 24
82.38.202.0/24 maxlen: 24
82.38.203.0/24 maxlen: 24
82.38.210.0/24 maxlen: 24
82.38.211.0/24 maxlen: 24
82.38.212.0/24 maxlen: 24
82.38.215.0/24 maxlen: 24
82.38.218.0/24 maxlen: 24
82.38.219.0/24 maxlen: 24
82.39.234.0/24 maxlen: 24
82.39.235.0/24 maxlen: 24
82.39.236.0/24 maxlen: 24
82.39.237.0/24 maxlen: 24
82.39.238.0/24 maxlen: 24
82.39.239.0/24 maxlen: 24
82.39.245.0/24 maxlen: 24
82.39.252.0/24 maxlen: 24
82.39.253.0/24 maxlen: 24
82.41.242.0/24 maxlen: 24
82.41.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d5:be:f1:ff:a5:e7:ff:c2:86:38:ba:f9:0a:38:fc:8c:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 30 15:47:30 2025 GMT
Not After : Oct 29 15:52:30 2026 GMT
Subject: CN=368822FC28258F0E4E1D2D99945C9B9C8022186A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:41:22:75:78:b3:5f:4b:41:a3:ae:9e:01:
f0:99:c0:45:24:11:57:87:66:8e:45:74:ef:9e:98:
ac:6b:d9:b9:fe:93:7f:0d:f8:d3:7e:d6:51:d1:39:
a2:38:c8:38:1a:fa:23:51:c8:75:5f:02:b8:67:bd:
0a:69:78:7f:c9:c0:f3:64:28:f9:63:77:42:e7:ba:
68:32:8d:42:14:23:2b:48:15:c1:29:4c:fa:70:ae:
3e:6d:35:4a:76:8a:94:ea:e4:24:49:95:d1:98:25:
ca:34:3f:cc:57:5a:27:2e:70:57:5f:84:51:6e:ee:
a0:7b:a5:9d:9b:f1:73:6d:51:cb:8f:03:89:db:f5:
ab:45:91:79:f0:ff:44:1d:de:6f:bd:a9:e7:f2:ff:
de:8a:f8:fb:cc:20:3d:5e:22:65:63:1b:2e:ee:bc:
fa:9d:64:11:2c:30:86:1b:78:56:2e:bb:ef:a2:25:
76:79:63:ba:6e:9c:d9:30:2e:d4:a1:d5:e9:24:eb:
14:b6:f0:d3:64:04:af:7d:ea:a5:5d:45:52:6b:b0:
f0:a6:f5:4c:e2:20:90:04:0f:e5:d8:15:bf:dc:37:
b2:63:36:29:88:97:1b:5e:46:80:3e:41:6a:d5:a2:
bd:64:f0:70:ff:0c:c1:4b:35:63:63:6a:6f:fc:58:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:22:FC:28:25:8F:0E:4E:1D:2D:99:94:5C:9B:9C:80:22:18:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.128.0-82.22.139.255
82.22.148.0-82.22.155.255
82.23.152.0/21
82.24.36.0/22
82.25.0.0/22
82.25.52.0/22
82.27.24.0/21
82.27.48.0/20
82.27.136.0-82.27.159.255
82.27.168.0/21
82.29.30.0/23
82.29.38.0/24
82.29.144.0/22
82.38.201.0-82.38.203.255
82.38.210.0-82.38.212.255
82.38.215.0/24
82.38.218.0/23
82.39.234.0-82.39.239.255
82.39.245.0/24
82.39.252.0/23
82.41.242.0/23
Signature Algorithm: sha256WithRSAEncryption
92:3a:a9:e9:44:51:1f:9d:96:55:3c:3a:f7:b8:3e:bb:cc:49:
5e:a8:f8:78:51:86:06:65:04:9a:e3:63:b8:db:34:16:b3:6e:
45:8c:03:1a:b9:6a:f0:4b:43:47:24:22:40:df:3f:de:a7:40:
82:b4:36:ce:01:5c:ec:e3:4a:42:eb:f6:b9:5d:86:ae:96:53:
71:aa:16:3d:6f:a3:e7:f5:54:33:33:84:ba:a1:7b:04:59:ad:
c7:2c:38:79:71:90:e7:dc:7e:35:18:20:a7:1d:55:15:63:32:
42:8a:d6:d0:9a:d7:63:9f:e8:7a:08:9f:f6:76:21:cd:a4:ce:
5c:17:18:0b:66:5d:6c:0a:fa:7d:4a:d9:dd:54:5a:a1:6c:98:
39:eb:01:03:90:9f:ed:9a:44:1e:cf:76:b8:8d:e4:7c:a4:44:
61:90:80:ae:a6:11:ae:1e:65:5b:ff:85:c9:ce:54:ab:a4:e6:
69:e1:6d:66:39:8c:df:85:d3:fb:0e:8e:7b:a4:b8:9f:32:fb:
ec:a7:a1:94:89:09:56:e8:16:14:0b:b7:7c:90:6f:ec:6f:8c:
5b:d2:6b:6f:07:79:66:56:9b:83:f2:da:08:cf:27:9f:b8:6b:
8b:82:21:44:45:df:33:13:b8:70:ff:65:74:07:94:89:6d:54:
54:fe:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:26:36 2025 by rpki-client