Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: DGJHW90tEq7dZlZkHKoW+evT+/RQ3D7/+5qY6j4P0LQ=
Subject key identifier: B3:16:B1:CF:6E:98:EF:12:D9:99:92:88:A6:66:D3:F7:F0:99:43:25
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7C994E15D4952A214F5C6CF82DA866F57CC110B4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
Signing time: Wed 08 Apr 2026 20:42:06 +0000
ROA not before: Wed 08 Apr 2026 20:37:06 +0000
ROA not after: Wed 07 Apr 2027 20:42:06 +0000
asID: 6079
IP address blocks: 51.146.188.0/23 maxlen: 23
51.146.212.0/22 maxlen: 22
51.146.216.0/23 maxlen: 23
51.146.218.0/23 maxlen: 23
51.146.220.0/22 maxlen: 22
51.146.224.0/22 maxlen: 22
51.146.228.0/22 maxlen: 22
78.105.98.0/23 maxlen: 23
78.105.100.0/22 maxlen: 22
78.105.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:99:4e:15:d4:95:2a:21:4f:5c:6c:f8:2d:a8:66:f5:7c:c1:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 8 20:37:06 2026 GMT
Not After : Apr 7 20:42:06 2027 GMT
Subject: CN=B316B1CF6E98EF12D9999288A666D3F7F0994325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:5e:bd:a8:df:76:52:39:d9:12:20:93:ff:
fe:6e:c3:59:76:ee:13:d2:fd:4a:37:52:d1:30:69:
f0:5e:c5:c9:1c:18:85:e9:2a:c4:8c:7b:3f:bb:dc:
48:29:0d:24:53:4c:98:0f:d9:38:6c:42:2c:d1:b3:
f7:ce:f1:da:02:c6:7e:01:a6:c7:a0:4d:75:e3:2f:
26:2c:c0:b5:ab:b0:72:40:c8:15:21:9a:63:49:1e:
00:4d:f3:5a:1f:63:6e:4d:d3:39:3f:ac:34:95:23:
1f:2b:e0:71:17:a0:1b:7f:5f:87:bf:65:9c:20:15:
93:53:65:8f:c0:19:c4:0b:29:55:85:38:17:64:b4:
7b:46:e5:42:fc:d7:85:10:92:d4:4e:cd:d1:06:c3:
eb:71:60:b6:f1:dc:09:40:64:c0:90:1d:d4:7a:37:
28:43:6d:2b:1e:cd:04:05:c3:eb:54:56:1b:59:5c:
fd:ac:69:b1:93:38:66:44:8b:3e:5f:f4:8a:16:a0:
d8:45:34:71:31:8d:93:15:45:15:6d:d8:d7:95:bf:
a6:72:99:da:16:a3:b1:38:0e:90:6a:f4:12:66:3f:
de:f2:0a:cc:07:4e:d2:41:9f:70:c0:ce:33:d7:72:
61:56:14:6d:42:26:e3:19:f7:5a:48:b9:f7:d2:14:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:B1:CF:6E:98:EF:12:D9:99:92:88:A6:66:D3:F7:F0:99:43:25
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.188.0/23
51.146.212.0-51.146.231.255
78.105.98.0-78.105.111.255
Signature Algorithm: sha256WithRSAEncryption
7a:57:33:f6:a0:78:35:ef:09:7a:a1:c5:0c:e9:af:f5:3d:af:
fd:48:4a:5d:9e:ca:32:0d:b1:9d:8d:82:2a:21:23:be:30:91:
cc:49:2a:2b:cd:a1:a9:79:32:78:a0:2c:10:a1:68:97:07:30:
db:10:69:8a:1e:c8:02:03:29:0a:da:a3:c0:27:b2:e7:88:96:
65:b7:15:d0:23:57:79:b6:db:04:19:57:9e:37:5d:33:21:73:
3f:d0:8e:15:4e:1b:39:c7:a3:1b:d1:6f:19:ee:85:fb:21:d8:
9d:66:f3:64:fc:a9:40:5b:ff:11:dd:f8:e1:a5:3b:7d:0d:ce:
8a:6c:c9:9f:6f:4c:4f:8a:bf:f7:cf:6a:80:0d:4b:ff:dd:ae:
48:3d:9d:fa:5f:2e:45:0f:8c:4f:02:5f:52:4d:47:c1:d2:eb:
ee:ae:0d:08:ff:ad:2a:9f:db:22:e2:7c:85:13:ba:81:be:92:
c9:16:63:ac:8b:aa:c4:f6:53:f6:10:c1:38:35:c6:e3:41:27:
e1:71:d3:08:98:b2:01:d5:f5:f2:32:52:08:70:7a:5f:2e:36:
9c:a5:e6:c8:37:7e:58:06:22:6b:04:9d:9c:81:a7:d9:76:6f:
fc:01:e9:a9:5c:68:d7:54:47:67:f2:fc:be:70:c0:1f:ea:31:
73:57:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:53:01 2026 by rpki-client