Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: ol5FCwx1VK2HgQGdbYDX98f75zcdslfMR3f7FMWAiDs=
Subject key identifier: 43:78:3A:53:14:13:A5:1E:26:69:8B:A9:CA:21:B5:FF:EE:07:02:2F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 520207013CC89CF5AD9C6CA2DB83ED38420ED062
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Sun 20 Sep 2026 07:14:47 +0000
ROA not before: Sun 20 Sep 2026 07:09:47 +0000
ROA not after: Sun 19 Sep 2027 07:14:47 +0000
asID: 6079
IP address blocks: 86.226.128.0/22 maxlen: 24
86.226.132.0/22 maxlen: 24
86.226.136.0/22 maxlen: 24
86.226.140.0/22 maxlen: 24
86.226.144.0/22 maxlen: 24
86.226.148.0/22 maxlen: 24
86.226.152.0/22 maxlen: 24
86.226.156.0/22 maxlen: 24
86.226.160.0/22 maxlen: 24
86.226.164.0/22 maxlen: 24
86.226.168.0/22 maxlen: 24
86.226.172.0/22 maxlen: 24
86.226.176.0/22 maxlen: 24
86.226.180.0/22 maxlen: 24
86.226.184.0/22 maxlen: 24
86.226.188.0/22 maxlen: 24
86.226.192.0/22 maxlen: 24
86.226.196.0/22 maxlen: 24
86.226.200.0/22 maxlen: 24
86.226.204.0/22 maxlen: 24
86.226.208.0/22 maxlen: 24
86.226.212.0/22 maxlen: 24
86.226.216.0/22 maxlen: 24
86.226.220.0/22 maxlen: 24
86.226.224.0/22 maxlen: 24
86.226.228.0/22 maxlen: 24
86.226.232.0/22 maxlen: 24
86.226.236.0/22 maxlen: 24
86.226.240.0/22 maxlen: 24
86.226.244.0/22 maxlen: 24
86.226.248.0/22 maxlen: 24
86.226.252.0/22 maxlen: 24
90.96.4.0/22 maxlen: 24
90.96.20.0/22 maxlen: 24
90.96.28.0/22 maxlen: 24
90.96.44.0/22 maxlen: 24
90.96.48.0/22 maxlen: 24
90.96.52.0/22 maxlen: 24
90.96.56.0/22 maxlen: 24
90.96.60.0/22 maxlen: 24
90.96.64.0/22 maxlen: 24
90.96.132.0/22 maxlen: 24
90.96.148.0/22 maxlen: 24
90.96.160.0/22 maxlen: 24
90.96.172.0/22 maxlen: 24
90.96.236.0/22 maxlen: 24
90.96.240.0/22 maxlen: 24
90.96.244.0/22 maxlen: 24
143.20.186.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.223.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:02:07:01:3c:c8:9c:f5:ad:9c:6c:a2:db:83:ed:38:42:0e:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 20 07:09:47 2026 GMT
Not After : Sep 19 07:14:47 2027 GMT
Subject: CN=43783A531413A51E26698BA9CA21B5FFEE07022F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:1a:2b:12:b2:f7:07:bb:5d:ec:cf:49:d2:
4b:50:02:13:16:06:91:3c:78:e4:81:ee:7c:db:41:
b4:7c:32:c9:3d:de:cc:f9:a9:b3:fb:eb:d2:d4:1c:
73:09:e4:37:5d:56:6b:49:40:17:15:c3:80:b6:84:
f2:76:1b:5a:6a:59:51:1b:a4:cd:7c:20:5c:23:e0:
71:06:b0:b8:45:31:dc:2c:11:2f:d4:11:62:7e:46:
84:e9:c0:31:31:f8:0f:66:f5:25:ad:b7:c6:84:6e:
6d:56:06:e9:e2:a0:16:56:67:42:cf:72:6c:b6:72:
5c:8b:9e:f9:04:35:50:6c:be:2d:a1:6e:fa:8f:16:
3b:b0:f7:5a:1e:40:fe:49:c8:d1:5f:2c:7d:fb:99:
9b:75:3a:91:ec:a9:86:54:f3:37:7b:df:b7:f5:73:
d0:dd:fd:ce:5f:80:17:1e:08:15:7d:c8:ee:4d:ae:
b8:b7:cb:eb:0c:62:80:0f:78:86:b6:e0:5e:88:a0:
01:8a:0e:34:4f:1f:3e:b7:5f:a6:6a:27:88:fd:b0:
ea:91:0b:bd:ce:01:8d:61:55:f7:ee:42:78:6b:cf:
ff:32:1e:86:61:75:a8:15:c1:15:7d:d6:b6:61:06:
47:c3:a9:23:c7:de:3e:6b:7d:82:96:73:08:8e:fc:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:3A:53:14:13:A5:1E:26:69:8B:A9:CA:21:B5:FF:EE:07:02:2F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.226.128.0/17
90.96.4.0/22
90.96.20.0/22
90.96.28.0/22
90.96.44.0-90.96.67.255
90.96.132.0/22
90.96.148.0/22
90.96.160.0/22
90.96.172.0/22
90.96.236.0-90.96.247.255
143.20.186.0/24
143.20.198.0/24
143.20.211.0/24
143.20.223.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:88:7d:12:37:2d:7d:47:6f:17:46:3f:8c:ad:67:94:09:2b:
87:98:3f:f5:e1:21:19:46:75:1b:03:b5:cc:a4:ad:b1:5a:2f:
b1:10:fc:b3:b4:83:08:f8:5d:4f:1b:a0:c6:bb:f3:c6:5b:a2:
cd:cb:7b:85:8b:4c:79:95:0c:db:47:1c:63:b7:2e:3b:bd:8c:
42:d1:00:bb:76:93:14:56:36:9f:a3:03:f6:b6:cf:f2:ac:39:
87:ca:8f:ea:d3:2a:1b:6e:dd:b5:d7:c5:ae:fe:f7:a7:d0:71:
d0:6a:86:7a:ea:2b:79:b0:0d:81:2b:e3:56:5a:0c:1c:fe:e1:
72:23:1b:87:63:8d:5d:b6:62:c1:41:35:11:54:da:75:79:10:
d9:33:8a:eb:26:34:00:06:49:46:8a:5a:ab:67:a6:82:98:bc:
ef:12:9a:59:df:6d:94:26:5f:d2:3d:af:cc:41:86:37:ee:8c:
1f:7b:76:55:75:54:7f:0e:24:61:84:cc:df:a7:ae:b2:06:95:
ca:0d:66:9d:76:5d:5c:25:66:98:7f:4c:d7:a1:32:70:37:a4:
01:d3:52:ef:95:9f:08:86:b7:dd:9a:51:1b:0c:1e:4a:8e:be:
67:a5:ee:37:87:cf:36:eb:38:1b:f0:2a:a7:1e:5f:d5:aa:63:
b2:ea:22:ee
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIUUgIHATzInPWtnGyi24PtOEIO0GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MjAwNzA5NDdaFw0yNzA5MTkwNzE0NDdaMDMxMTAvBgNV
BAMTKDQzNzgzQTUzMTQxM0E1MUUyNjY5OEJBOUNBMjFCNUZGRUUwNzAyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nBorErL3B7td7M9J0ktQAhMW
BpE8eOSB7nzbQbR8Msk93sz5qbP769LUHHMJ5DddVmtJQBcVw4C2hPJ2G1pqWVEb
pM18IFwj4HEGsLhFMdwsES/UEWJ+RoTpwDEx+A9m9SWtt8aEbm1WBunioBZWZ0LP
cmy2clyLnvkENVBsvi2hbvqPFjuw91oeQP5JyNFfLH37mZt1OpHsqYZU8zd737f1
c9Dd/c5fgBceCBV9yO5Nrri3y+sMYoAPeIa24F6IoAGKDjRPHz63X6ZqJ4j9sOqR
C73OAY1hVffuQnhrz/8yHoZhdagVwRV91rZhBkfDqSPH3j5rfYKWcwiO/ABnAgMB
AAGjggJtMIICaTAdBgNVHQ4EFgQUQ3g6UxQTpR4maYupyiG1/+4HAi8wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBgwYIKwYBBQUHAQcBAf8EdDByMHAEAgABMGoDBAdW4oAD
BAJaYAQDBAJaYBQDBAJaYBwwDAMEAlpgLAMEAlpgQAMEAlpghAMEAlpglAMEAlpg
oAMEAlpgrDAMAwQCWmDsAwQDWmDwAwQAjxS6AwQAjxTGAwQAjxTTAwQAjxTfAwQA
jxToMA0GCSqGSIb3DQEBCwUAA4IBAQDViH0SNy19R28XRj+MrWeUCSuHmD/14SEZ
RnUbA7XMpK2xWi+xEPyztIMI+F1PG6DGu/PGW6LNy3uFi0x5lQzbRxxjty47vYxC
0QC7dpMUVjafowP2ts/yrDmHyo/q0yobbt2118Wu/ven0HHQaoZ66it5sA2BK+NW
Wgwc/uFyIxuHY41dtmLBQTURVNp1eRDZM4rrJjQABklGilqrZ6aCmLzvEppZ322U
Jl/SPa/MQYY37owfe3ZVdVR/DiRhhMzfp66yBpXKDWaddl1cJWaYf0zXoTJwN6QB
01LvlZ8IhrfdmlEbDB5Kjr5npe43h8826zgb8CqnHl/VqmOy6iLu
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:41:59 2026 by rpki-client