Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: jQIAatEDFchxVCzN7gnFqMSytJ7ekQbONHcFVhpK0Cg=
Subject key identifier: A8:0B:8E:BB:4A:2C:3C:A3:D5:F7:1B:67:45:16:D4:52:81:99:A8:EA
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0CE328A5EC9A93E1718509FE795AF93C3F1C5459
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Wed 08 Apr 2026 06:47:42 +0000
ROA not before: Wed 08 Apr 2026 06:42:42 +0000
ROA not after: Wed 07 Apr 2027 06:47:42 +0000
asID: 6079
IP address blocks: 143.20.186.0/24 maxlen: 24
143.20.190.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e3:28:a5:ec:9a:93:e1:71:85:09:fe:79:5a:f9:3c:3f:1c:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 8 06:42:42 2026 GMT
Not After : Apr 7 06:47:42 2027 GMT
Subject: CN=A80B8EBB4A2C3CA3D5F71B674516D4528199A8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:7c:9d:08:4e:55:bb:27:b6:67:1f:6a:c5:
9e:2b:7f:df:ba:7e:29:60:18:06:c2:49:7c:57:e8:
e3:32:ba:6a:95:a6:3e:88:e8:80:b9:13:08:64:66:
6b:2b:2a:7f:60:18:a3:35:1d:4a:b9:3f:d6:a3:fc:
9c:cb:af:35:80:8b:68:3f:fd:02:35:2e:64:cb:7b:
8c:ab:bc:3b:a2:e0:a9:e8:b8:85:d0:d2:bc:92:00:
0a:37:9a:c9:00:55:d7:ce:df:c8:ee:3b:6a:13:f5:
c8:f2:59:82:a7:7a:c7:7f:2d:82:ce:9f:6c:1a:ab:
20:1e:60:fc:d8:56:81:26:7d:65:ae:29:19:d8:bc:
67:1c:1d:9e:6a:3a:8a:82:97:c9:e3:8b:aa:df:68:
6a:77:36:42:09:34:2b:fb:4b:4c:67:fa:2c:b9:7f:
5f:11:89:f8:38:d7:2d:b5:11:a1:80:e3:0e:03:65:
52:f7:73:82:be:85:50:b1:6f:48:dd:66:93:5d:64:
43:b1:a3:1c:f9:0a:00:af:87:54:b8:ec:4d:22:3a:
7e:77:67:1f:58:f2:51:a9:d3:a6:cb:a5:52:e6:32:
6c:91:98:fb:4b:12:ad:0d:c7:2c:93:db:2c:4e:57:
32:65:cb:ed:58:d1:51:8e:fd:0d:87:d8:e7:e4:bc:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0B:8E:BB:4A:2C:3C:A3:D5:F7:1B:67:45:16:D4:52:81:99:A8:EA
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.186.0/24
143.20.190.0/24
143.20.211.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c7:65:12:f7:df:a0:40:3c:f1:cb:ec:56:56:bf:20:cf:c0:
a3:28:e4:08:a3:b6:d0:4d:f9:8c:97:04:e9:d9:e0:3c:38:d2:
24:e5:6b:b2:d9:fc:c9:28:0a:d4:ce:ab:29:40:fb:a3:94:24:
7a:e2:73:eb:15:a8:bd:9f:13:5b:e6:a3:50:4a:76:72:28:b6:
1c:b5:e1:95:f2:4d:9b:a1:49:27:3d:b7:ce:ee:54:24:46:1d:
4f:c8:75:a4:a3:81:7d:5f:29:38:42:9a:3a:21:cc:ec:d6:0d:
6c:4a:f9:9b:74:d1:3e:65:b0:43:14:a3:c6:c3:44:62:41:92:
a3:f3:c3:3a:f2:82:d7:1e:70:7e:dd:d2:46:c9:ec:b3:3a:01:
5e:c6:26:75:a3:00:92:df:2c:db:9a:ac:da:f2:5c:b6:1b:64:
a1:dd:95:df:78:2b:16:84:c9:d9:e0:b3:75:34:8c:f0:56:6c:
d2:44:dc:d8:41:23:4e:db:5f:ba:65:b7:0d:77:c9:1e:d2:3d:
93:7c:73:a9:82:85:ed:b5:9b:78:4b:41:9c:9d:30:86:db:9e:
98:79:4f:81:21:0a:6d:60:00:d3:25:35:c7:b1:bc:50:6c:04:
7d:3e:32:0a:18:03:79:21:a7:6b:f0:5f:cb:21:64:2b:24:73:
c1:85:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:45 2026 by rpki-client