Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: rAOOtSTeX/kF64twEAInOn03XfWQLzgzUJT8xj6uG00=
Subject key identifier: 92:53:20:65:A2:06:B1:70:A7:02:76:F1:B7:49:81:D8:C1:45:41:F0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 54027094EF51CED9A68BC0C99D32A89927E56CF1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
Signing time: Tue 28 Jul 2026 00:02:01 +0000
ROA not before: Mon 27 Jul 2026 23:57:01 +0000
ROA not after: Tue 27 Jul 2027 00:02:01 +0000
asID: 6079
IP address blocks: 51.146.36.0/22 maxlen: 24
51.146.40.0/22 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.132.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.146.188.0/23 maxlen: 23
51.146.212.0/22 maxlen: 22
51.146.216.0/23 maxlen: 23
51.146.224.0/22 maxlen: 22
51.146.232.0/24 maxlen: 24
51.194.8.0/21 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.40.0/21 maxlen: 24
51.194.69.0/24 maxlen: 24
51.194.83.0/24 maxlen: 24
51.194.84.0/24 maxlen: 24
51.194.85.0/24 maxlen: 24
51.194.88.0/21 maxlen: 24
51.194.120.0/21 maxlen: 24
51.241.4.0/24 maxlen: 24
51.241.6.0/24 maxlen: 24
51.241.22.0/24 maxlen: 24
51.241.52.0/24 maxlen: 24
51.241.73.0/24 maxlen: 24
51.241.96.0/24 maxlen: 24
51.241.122.0/24 maxlen: 24
51.241.126.0/24 maxlen: 24
51.241.234.0/24 maxlen: 24
51.241.240.0/22 maxlen: 24
51.241.252.0/24 maxlen: 24
78.105.98.0/23 maxlen: 23
78.105.104.0/21 maxlen: 21
78.105.119.0/24 maxlen: 24
78.105.126.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.148.0/24 maxlen: 24
78.105.172.0/24 maxlen: 24
78.105.196.0/24 maxlen: 24
78.105.215.0/24 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.240.0/24 maxlen: 24
78.105.241.0/24 maxlen: 24
78.105.245.0/24 maxlen: 24
78.105.247.0/24 maxlen: 24
78.105.248.0/21 maxlen: 24
188.220.155.0/24 maxlen: 24
188.220.163.0/24 maxlen: 24
188.220.211.0/24 maxlen: 24
188.220.234.0/24 maxlen: 24
188.221.9.0/24 maxlen: 24
188.221.29.0/24 maxlen: 24
188.221.65.0/24 maxlen: 24
188.221.100.0/24 maxlen: 24
188.221.107.0/24 maxlen: 24
188.221.128.0/24 maxlen: 24
188.221.160.0/24 maxlen: 24
188.221.198.0/24 maxlen: 24
188.221.221.0/24 maxlen: 24
188.221.225.0/24 maxlen: 24
188.221.239.0/24 maxlen: 24
188.221.243.0/24 maxlen: 24
188.221.246.0/24 maxlen: 24
188.221.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:02:70:94:ef:51:ce:d9:a6:8b:c0:c9:9d:32:a8:99:27:e5:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 27 23:57:01 2026 GMT
Not After : Jul 27 00:02:01 2027 GMT
Subject: CN=92532065A206B170A70276F1B74981D8C14541F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:89:28:4c:30:02:38:a3:8b:dc:54:fd:b3:
dc:a9:d0:71:6d:1c:fa:94:28:c4:5f:4c:0f:43:b5:
51:fa:9a:52:89:9f:4c:fd:e1:06:7d:c1:ec:98:21:
fc:9e:18:04:23:14:6f:23:4d:fe:6b:4c:3b:f3:b9:
c3:cd:ef:a4:72:af:6b:da:98:89:69:ff:83:25:16:
b5:a5:49:07:b4:ed:32:3a:06:be:08:a9:d8:f4:69:
f5:20:57:dc:ac:38:2f:43:ff:3b:d9:fc:1c:83:d4:
5a:86:3e:38:c7:ca:e6:9a:b2:f3:62:eb:b6:08:79:
13:ad:ea:87:aa:d1:e0:b3:da:34:e0:5f:04:10:f5:
51:23:5b:a3:c3:ce:2b:a3:51:47:fc:f0:53:66:a9:
25:a9:44:83:17:94:a7:e4:31:d9:fe:2b:23:95:e0:
6b:13:6a:58:16:02:91:ad:79:6c:22:2f:e3:be:a2:
d7:fc:81:e3:80:80:83:dc:97:71:54:a5:19:76:dc:
dd:c8:9f:66:62:74:77:17:00:24:4d:91:30:27:4c:
45:89:05:80:06:a6:0e:e7:f3:77:75:28:f3:c9:24:
1f:b5:c2:27:62:11:0e:23:4c:85:38:3b:ab:1f:df:
00:0a:27:18:ce:ea:4e:69:a6:2d:a2:90:16:3a:b6:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:53:20:65:A2:06:B1:70:A7:02:76:F1:B7:49:81:D8:C1:45:41:F0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.36.0-51.146.47.255
51.146.49.0-51.146.55.255
51.146.128.0-51.146.139.255
51.146.144.0-51.146.149.255
51.146.188.0/23
51.146.212.0-51.146.217.255
51.146.224.0/22
51.146.232.0/24
51.194.8.0-51.194.31.255
51.194.40.0/21
51.194.69.0/24
51.194.83.0-51.194.85.255
51.194.88.0/21
51.194.120.0/21
51.241.4.0/24
51.241.6.0/24
51.241.22.0/24
51.241.52.0/24
51.241.73.0/24
51.241.96.0/24
51.241.122.0/24
51.241.126.0/24
51.241.234.0/24
51.241.240.0/22
51.241.252.0/24
78.105.98.0/23
78.105.104.0/21
78.105.119.0/24
78.105.126.0/24
78.105.128.0/21
78.105.148.0/24
78.105.172.0/24
78.105.196.0/24
78.105.215.0/24
78.105.224.0/21
78.105.240.0/23
78.105.245.0/24
78.105.247.0-78.105.255.255
188.220.155.0/24
188.220.163.0/24
188.220.211.0/24
188.220.234.0/24
188.221.9.0/24
188.221.29.0/24
188.221.65.0/24
188.221.100.0/24
188.221.107.0/24
188.221.128.0/24
188.221.160.0/24
188.221.198.0/24
188.221.221.0/24
188.221.225.0/24
188.221.239.0/24
188.221.243.0/24
188.221.246.0/24
188.221.252.0/24
Signature Algorithm: sha256WithRSAEncryption
17:86:71:1f:a1:a5:90:da:e8:04:5c:1e:4c:55:b6:d3:be:69:
94:58:b9:a1:5b:32:cc:43:6d:f2:99:39:63:56:28:61:f1:37:
94:7e:58:a2:5e:24:72:74:05:91:d4:4a:e1:5c:e4:e0:23:2b:
4f:80:cc:9b:16:97:f4:6f:93:49:5e:f5:75:15:c6:4d:c0:97:
1d:97:24:6b:fb:73:0e:19:af:a9:a9:bc:49:06:86:3a:f3:da:
76:22:6a:34:99:ab:47:0d:05:fa:f1:c1:20:01:96:5c:82:5c:
fa:dd:d6:70:db:37:ca:94:eb:f0:24:93:12:75:d4:fd:1d:fd:
d2:ea:27:b7:fc:f6:31:b0:b5:04:84:8b:2c:0f:29:88:a0:31:
b9:cc:ff:c3:0a:2b:af:53:d3:9a:6d:70:9c:cf:42:4d:ef:10:
01:eb:95:b5:c2:d7:8d:3e:fc:ac:18:a4:20:63:8b:0b:d2:6d:
92:f6:cb:f2:16:bb:16:d8:47:28:09:36:69:85:3a:d2:20:fd:
30:e0:57:44:61:54:7b:1c:ee:85:ef:40:21:75:b5:e6:88:75:
e0:f0:56:1a:7e:fe:9f:99:dd:e9:8d:63:23:90:c3:48:99:11:
4e:91:10:74:65:c9:89:0f:c2:f4:33:25:18:64:78:f5:dd:b2:
26:91:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:02:18 2026 by rpki-client