Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          sZldzBO3rBThUsDu8LFXRO+9LAL9L2FVpBOSG5cC6+U=
Subject key identifier:   BB:AF:0A:1C:6F:68:41:3F:3B:E0:22:30:99:E6:AF:EF:29:23:75:49
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       43A31B8BFA31E7A9BA463653232437765272B503
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time:             Thu 04 Jun 2026 08:33:32 +0000
ROA not before:           Thu 04 Jun 2026 08:28:32 +0000
ROA not after:            Thu 03 Jun 2027 08:33:32 +0000
asID:                     6079
IP address blocks:        46.202.200.0/24 maxlen: 24
                          46.202.206.0/24 maxlen: 24
                          46.203.6.0/24 maxlen: 24
                          46.203.107.0/24 maxlen: 24
                          46.203.114.0/24 maxlen: 24
                          46.203.145.0/24 maxlen: 24
                          46.203.146.0/24 maxlen: 24
                          46.203.168.0/24 maxlen: 24
                          46.203.169.0/24 maxlen: 24
                          46.203.171.0/24 maxlen: 24
                          46.203.173.0/24 maxlen: 24
                          46.203.174.0/24 maxlen: 24
                          46.203.177.0/24 maxlen: 24
                          46.203.179.0/24 maxlen: 24
                          91.124.0.0/24 maxlen: 24
                          91.124.2.0/24 maxlen: 24
                          91.124.3.0/24 maxlen: 24
                          91.124.16.0/24 maxlen: 24
                          91.124.59.0/24 maxlen: 24
                          91.124.82.0/24 maxlen: 24
                          91.124.90.0/24 maxlen: 24
                          91.124.180.0/23 maxlen: 24
                          91.124.182.0/23 maxlen: 24
                          91.124.188.0/23 maxlen: 24
                          91.124.190.0/23 maxlen: 24
                          91.124.208.0/24 maxlen: 24
                          91.124.228.0/23 maxlen: 24
                          91.124.230.0/23 maxlen: 24
                          91.124.232.0/23 maxlen: 24
                          91.124.234.0/23 maxlen: 24
                          91.124.242.0/24 maxlen: 24
                          92.112.6.0/24 maxlen: 24
                          92.112.8.0/24 maxlen: 24
                          92.112.55.0/24 maxlen: 24
                          92.112.62.0/24 maxlen: 24
                          92.112.89.0/24 maxlen: 24
                          92.112.111.0/24 maxlen: 24
                          92.112.112.0/24 maxlen: 24
                          92.112.113.0/24 maxlen: 24
                          92.112.114.0/24 maxlen: 24
                          92.112.115.0/24 maxlen: 24
                          92.112.116.0/24 maxlen: 24
                          92.112.117.0/24 maxlen: 24
                          92.112.118.0/24 maxlen: 24
                          92.112.142.0/24 maxlen: 24
                          92.113.6.0/24 maxlen: 24
                          92.113.15.0/24 maxlen: 24
                          92.113.40.0/24 maxlen: 24
                          92.113.188.0/22 maxlen: 24
                          92.113.200.0/22 maxlen: 24
                          92.113.220.0/22 maxlen: 24
                          95.134.184.0/24 maxlen: 24
                          95.134.204.0/24 maxlen: 24
                          95.134.206.0/24 maxlen: 24
                          95.134.221.0/24 maxlen: 24
                          95.134.223.0/24 maxlen: 24
                          95.135.72.0/24 maxlen: 24
                          95.135.134.0/24 maxlen: 24
                          95.135.139.0/24 maxlen: 24
                          95.135.140.0/24 maxlen: 24
                          95.135.141.0/24 maxlen: 24
                          95.135.233.0/24 maxlen: 24
                          178.92.80.0/24 maxlen: 24
                          178.92.82.0/24 maxlen: 24
                          178.92.151.0/24 maxlen: 24
                          178.92.167.0/24 maxlen: 24
                          178.92.171.0/24 maxlen: 24
                          178.92.186.0/24 maxlen: 24
                          178.93.180.0/24 maxlen: 24
                          178.93.187.0/24 maxlen: 24
                          178.93.209.0/24 maxlen: 24
                          178.93.220.0/24 maxlen: 24
                          178.95.73.0/24 maxlen: 24
                          178.95.76.0/24 maxlen: 24
                          178.95.122.0/24 maxlen: 24
                          178.95.139.0/24 maxlen: 24
                          178.95.147.0/24 maxlen: 24
                          178.95.180.0/22 maxlen: 24
                          178.95.212.0/22 maxlen: 22
                          178.95.216.0/22 maxlen: 24
                          178.95.220.0/22 maxlen: 24
                          178.95.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a3:1b:8b:fa:31:e7:a9:ba:46:36:53:23:24:37:76:52:72:b5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun  4 08:28:32 2026 GMT
            Not After : Jun  3 08:33:32 2027 GMT
        Subject: CN=BBAF0A1C6F68413F3BE0223099E6AFEF29237549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:86:64:59:b6:35:59:0b:4c:74:59:d0:ab:
                    3d:78:70:89:65:d8:4c:55:c3:72:17:91:14:a4:67:
                    b2:fe:82:ab:94:96:e6:cd:71:8c:ff:f2:47:0c:77:
                    e2:93:b4:c7:81:9d:0c:80:54:62:bb:00:25:5e:8e:
                    bc:45:5d:2c:a1:3f:77:fc:23:51:49:7a:8e:94:91:
                    14:83:71:be:b3:50:45:e8:be:8e:0d:5a:d0:ab:c6:
                    e8:cc:06:52:5e:84:4d:4e:98:1a:9c:af:d4:84:7e:
                    45:39:05:13:e8:ff:6b:94:ab:cb:64:33:4d:ec:97:
                    2d:be:98:86:63:f9:47:79:23:aa:1d:e3:2e:3b:27:
                    a9:b6:f9:44:e6:b7:14:98:89:78:18:be:dd:24:0b:
                    b3:13:2e:6d:72:47:d6:f3:73:40:53:37:bb:bd:f3:
                    eb:4f:62:db:4b:2b:57:6d:62:f4:a0:a1:c9:0b:4e:
                    97:ff:25:66:9b:02:2b:59:33:2a:1b:7d:d0:64:3d:
                    da:b6:07:47:e1:96:89:9c:0b:90:16:1a:94:8e:9d:
                    69:90:14:8f:57:26:00:33:03:70:35:5a:48:e2:fe:
                    6e:99:71:e2:62:40:f1:bb:3d:5f:a8:89:37:46:3f:
                    be:17:e3:96:5f:5b:87:6f:c9:4b:11:b6:5f:e9:5e:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AF:0A:1C:6F:68:41:3F:3B:E0:22:30:99:E6:AF:EF:29:23:75:49
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.200.0/24
                  46.202.206.0/24
                  46.203.6.0/24
                  46.203.107.0/24
                  46.203.114.0/24
                  46.203.145.0-46.203.146.255
                  46.203.168.0/23
                  46.203.171.0/24
                  46.203.173.0-46.203.174.255
                  46.203.177.0/24
                  46.203.179.0/24
                  91.124.0.0/24
                  91.124.2.0/23
                  91.124.16.0/24
                  91.124.59.0/24
                  91.124.82.0/24
                  91.124.90.0/24
                  91.124.180.0/22
                  91.124.188.0/22
                  91.124.208.0/24
                  91.124.228.0-91.124.235.255
                  91.124.242.0/24
                  92.112.6.0/24
                  92.112.8.0/24
                  92.112.55.0/24
                  92.112.62.0/24
                  92.112.89.0/24
                  92.112.111.0-92.112.118.255
                  92.112.142.0/24
                  92.113.6.0/24
                  92.113.15.0/24
                  92.113.40.0/24
                  92.113.188.0/22
                  92.113.200.0/22
                  92.113.220.0/22
                  95.134.184.0/24
                  95.134.204.0/24
                  95.134.206.0/24
                  95.134.221.0/24
                  95.134.223.0/24
                  95.135.72.0/24
                  95.135.134.0/24
                  95.135.139.0-95.135.141.255
                  95.135.233.0/24
                  178.92.80.0/24
                  178.92.82.0/24
                  178.92.151.0/24
                  178.92.167.0/24
                  178.92.171.0/24
                  178.92.186.0/24
                  178.93.180.0/24
                  178.93.187.0/24
                  178.93.209.0/24
                  178.93.220.0/24
                  178.95.73.0/24
                  178.95.76.0/24
                  178.95.122.0/24
                  178.95.139.0/24
                  178.95.147.0/24
                  178.95.180.0/22
                  178.95.212.0-178.95.223.255
                  178.95.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:8c:bb:7f:8f:09:f9:f5:65:9c:e9:02:3c:58:03:3e:a6:
         5c:7b:fd:70:ca:46:79:20:2d:b1:15:cd:0e:dd:31:03:3e:52:
         74:c2:51:a9:1e:8e:79:4d:eb:f4:6f:8a:58:2e:ea:31:a1:cc:
         d3:51:94:0c:84:af:da:7d:8d:1e:34:55:2c:b6:c9:31:bb:d6:
         96:4f:c1:30:fa:9e:8e:9b:2f:4c:9b:b7:41:c2:9d:69:8f:2f:
         aa:f0:ef:2e:31:3f:95:3b:74:0b:64:d9:eb:2d:0f:f9:23:69:
         91:35:b7:f3:99:40:83:70:bf:50:fe:c0:82:1f:74:4e:9b:74:
         29:f6:bc:40:59:f3:9f:c0:c2:f4:98:a8:3f:03:c7:39:7c:f8:
         2b:78:e2:7e:d0:b3:3c:49:cd:e0:4a:21:5a:b4:f0:7e:f2:93:
         16:7e:16:48:b2:81:33:5e:d9:97:d6:40:f3:40:2e:88:01:93:
         0b:71:14:4f:4a:0b:97:6d:f4:b1:55:d6:f3:78:c9:d4:43:dc:
         1a:53:bb:9d:df:de:c7:54:ce:59:a0:d0:c4:db:00:4b:1f:45:
         9f:eb:95:47:60:de:6f:f9:f8:ea:bb:65:46:ed:aa:c2:8a:6b:
         15:20:bb:eb:a0:11:54:f1:a2:e4:61:fc:2e:82:49:36:fe:50:
         b6:65:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:53 2026 by rpki-client