Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: uuxpzTNGgCLwiEnQeiZ3sqmdwjGzV4k5TVz7cNGtR+c=
Subject key identifier: 49:5B:15:DF:40:28:DA:DE:1E:55:F0:CA:1C:FF:6B:58:CC:3F:68:CC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 347FDF3CD3B3F3B1D4ECCE2F45E48A1B34539D8F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Fri 13 Feb 2026 02:59:23 +0000
ROA not before: Fri 13 Feb 2026 02:54:23 +0000
ROA not after: Fri 12 Feb 2027 02:59:23 +0000
asID: 6079
IP address blocks: 46.203.173.0/24 maxlen: 24
91.124.0.0/24 maxlen: 24
91.124.2.0/24 maxlen: 24
91.124.3.0/24 maxlen: 24
91.124.16.0/24 maxlen: 24
91.124.59.0/24 maxlen: 24
91.124.82.0/24 maxlen: 24
91.124.90.0/24 maxlen: 24
91.124.180.0/23 maxlen: 24
91.124.182.0/23 maxlen: 24
91.124.188.0/23 maxlen: 24
91.124.190.0/23 maxlen: 24
91.124.208.0/24 maxlen: 24
91.124.242.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.111.0/24 maxlen: 24
92.112.112.0/24 maxlen: 24
92.112.113.0/24 maxlen: 24
92.112.114.0/24 maxlen: 24
92.112.115.0/24 maxlen: 24
92.112.116.0/24 maxlen: 24
92.112.117.0/24 maxlen: 24
92.112.118.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
92.113.188.0/22 maxlen: 24
92.113.200.0/22 maxlen: 24
92.113.220.0/22 maxlen: 24
95.134.204.0/24 maxlen: 24
95.135.134.0/24 maxlen: 24
95.135.139.0/24 maxlen: 24
95.135.140.0/24 maxlen: 24
95.135.141.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
178.92.69.0/24 maxlen: 24
178.92.151.0/24 maxlen: 24
178.92.167.0/24 maxlen: 24
178.92.171.0/24 maxlen: 24
178.92.186.0/24 maxlen: 24
178.92.228.0/24 maxlen: 24
178.93.180.0/24 maxlen: 24
178.93.187.0/24 maxlen: 24
178.93.209.0/24 maxlen: 24
178.93.220.0/24 maxlen: 24
178.95.23.0/24 maxlen: 24
178.95.73.0/24 maxlen: 24
178.95.76.0/24 maxlen: 24
178.95.109.0/24 maxlen: 24
178.95.122.0/24 maxlen: 24
178.95.135.0/24 maxlen: 24
178.95.139.0/24 maxlen: 24
178.95.147.0/24 maxlen: 24
178.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7f:df:3c:d3:b3:f3:b1:d4:ec:ce:2f:45:e4:8a:1b:34:53:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 13 02:54:23 2026 GMT
Not After : Feb 12 02:59:23 2027 GMT
Subject: CN=495B15DF4028DADE1E55F0CA1CFF6B58CC3F68CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:6c:64:06:0d:80:88:da:cd:f8:90:3f:f0:
55:ec:d1:49:b5:ff:ba:9b:be:a4:32:27:9a:22:80:
34:15:f3:6c:5d:cb:31:d3:3e:37:a3:05:f5:e7:f2:
09:f9:b9:09:2f:5a:d7:67:59:34:4d:bc:ae:80:6b:
65:65:7c:3a:68:a6:a5:15:9c:52:f6:f4:46:3b:1d:
c3:dd:8b:5b:fe:84:79:db:ce:5d:d4:68:68:95:7a:
1f:7e:8f:3b:9d:bf:ec:b8:e1:d3:66:58:3b:9c:5c:
6c:9a:30:5f:d3:d3:ff:ab:87:54:a4:dd:b8:16:1e:
e8:dc:27:e9:29:ba:1d:53:3c:01:14:b4:f3:d7:df:
85:36:d7:aa:65:8f:c6:29:3e:4a:e6:a5:5e:96:9a:
47:73:5f:a8:24:13:13:a3:d1:d8:de:be:7c:24:dd:
25:90:67:ff:76:cc:c2:7c:e9:dc:30:5e:01:f1:61:
2c:b5:0e:85:de:8b:98:0f:eb:a9:b0:78:ad:81:6b:
34:58:cc:40:de:80:95:39:54:ce:1a:51:65:15:d4:
28:07:b0:5a:c0:7b:f3:c1:b5:93:25:31:49:12:7d:
49:9e:75:45:b9:bb:6e:3b:2e:05:0f:87:4f:50:96:
81:e8:56:0c:ac:d3:13:1b:86:df:08:92:e7:d3:15:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5B:15:DF:40:28:DA:DE:1E:55:F0:CA:1C:FF:6B:58:CC:3F:68:CC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.173.0/24
91.124.0.0/24
91.124.2.0/23
91.124.16.0/24
91.124.59.0/24
91.124.82.0/24
91.124.90.0/24
91.124.180.0/22
91.124.188.0/22
91.124.208.0/24
91.124.242.0/24
92.112.62.0/24
92.112.111.0-92.112.118.255
92.112.142.0/24
92.113.188.0/22
92.113.200.0/22
92.113.220.0/22
95.134.204.0/24
95.135.134.0/24
95.135.139.0-95.135.141.255
95.135.233.0/24
178.92.69.0/24
178.92.151.0/24
178.92.167.0/24
178.92.171.0/24
178.92.186.0/24
178.92.228.0/24
178.93.180.0/24
178.93.187.0/24
178.93.209.0/24
178.93.220.0/24
178.95.23.0/24
178.95.73.0/24
178.95.76.0/24
178.95.109.0/24
178.95.122.0/24
178.95.135.0/24
178.95.139.0/24
178.95.147.0/24
178.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a6:a4:60:9f:da:f3:73:6a:7c:ac:5a:d1:4c:d0:15:0c:ff:
e6:7c:4a:4e:0a:ec:03:1a:b7:34:c0:e2:38:56:c5:85:42:5a:
ea:61:a4:19:c2:d2:91:e6:80:7b:90:31:b4:5d:3f:8c:20:0c:
54:f3:4c:88:53:07:ad:61:80:18:65:f9:09:9c:82:4b:9d:f9:
53:77:8b:f1:e8:f7:e3:f5:2a:37:4b:3b:00:ce:85:6b:68:b3:
8f:f0:fb:25:23:bf:8e:36:00:8f:4c:f5:fe:ab:f5:b8:8a:24:
ef:03:e8:58:7a:9a:70:6f:b4:64:a6:94:eb:5a:79:fe:76:0d:
7d:8a:97:e4:05:60:de:b5:57:d4:a8:d3:d8:29:b2:9f:a2:02:
f6:4f:3f:c5:96:78:f9:5d:a0:52:8a:f6:3d:e4:ce:de:bd:97:
bd:a6:d7:f0:06:fa:a5:b7:79:4d:64:fb:19:f9:9f:fe:6c:58:
ad:dd:00:61:38:0f:c9:3a:61:a5:a0:0c:01:f4:21:d7:d4:84:
fd:57:52:a5:2d:4b:04:76:74:1a:a2:95:d9:ae:48:05:98:c8:
1b:37:75:f7:e1:60:e2:a9:43:c9:1e:d1:c1:9e:52:bf:cc:83:
57:84:4e:5d:d4:66:22:08:56:35:40:38:3e:c5:db:6f:c1:60:
2e:80:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:09 2026 by rpki-client