Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: O1TvbH9mgitpSd98rrm+d0mk6D4CXNzHFYErw9KBjYQ=
Subject key identifier: 81:9D:46:3D:0A:84:72:77:22:1F:F1:93:2B:F0:F4:BA:4F:78:C5:DA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 790E4B71C13FDE0550BF309EFAF3D756771AB1D7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Tue 22 Jul 2025 14:55:56 +0000
ROA not before: Tue 22 Jul 2025 14:50:56 +0000
ROA not after: Tue 21 Jul 2026 14:55:56 +0000
asID: 6079
IP address blocks: 96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
96.62.249.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.16.0/21 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.198.0/23 maxlen: 23
155.117.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0e:4b:71:c1:3f:de:05:50:bf:30:9e:fa:f3:d7:56:77:1a:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 22 14:50:56 2025 GMT
Not After : Jul 21 14:55:56 2026 GMT
Subject: CN=819D463D0A847277221FF1932BF0F4BA4F78C5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:c5:4e:9a:7c:e3:11:4d:a6:e9:0c:5e:10:
10:ac:53:9a:a0:a7:9a:57:80:ce:30:ff:8a:89:c8:
a5:97:fd:3e:6e:0a:01:1a:f0:87:b8:a6:39:e1:1e:
a7:39:39:27:4a:65:52:67:f1:ee:5f:d8:07:b5:11:
0e:48:8e:11:9f:3c:04:5d:a1:46:dc:a9:c0:f3:65:
f6:52:b8:ea:8b:ec:c9:1a:ed:4a:97:ff:50:8f:d6:
00:e7:f7:4a:98:d3:ef:06:08:03:ec:e9:88:73:db:
53:49:7f:ef:5c:9b:6c:56:0d:ec:47:84:ae:e3:08:
97:44:16:0e:3a:3b:91:a7:3c:4e:ee:82:1b:c7:e0:
32:15:a8:6e:b8:76:28:5f:b9:aa:53:b7:a6:c6:91:
b8:0a:6b:d5:fd:3a:a9:f0:29:98:0f:c3:85:59:48:
42:92:a8:54:80:44:6e:a5:f8:1b:10:25:b8:35:20:
d1:c2:20:7f:c0:a4:d9:c9:7f:fa:9c:13:64:c4:e7:
cd:ea:02:48:e5:6f:2d:e4:02:c7:58:43:eb:02:44:
0d:9d:f9:76:c2:15:74:ae:59:5b:1e:cc:2c:04:02:
5e:1f:6a:a4:5a:cf:59:07:8f:24:1b:4c:49:1a:7f:
39:8f:1b:88:6c:69:b1:b5:8b:62:be:36:2f:84:85:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9D:46:3D:0A:84:72:77:22:1F:F1:93:2B:F0:F4:BA:4F:78:C5:DA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.227.0/24
96.62.248.0/23
140.150.160.0/20
140.233.192.0/18
143.14.16.0/21
155.117.149.0/24
155.117.198.0/23
155.117.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:97:27:23:8d:cb:29:16:d0:70:b3:1a:03:77:98:fa:05:02:
3a:c7:b2:ac:b8:15:ae:d8:38:56:87:c8:57:eb:e0:ba:c7:b8:
30:dc:31:6a:47:95:58:0c:77:b2:5e:ba:f1:04:bf:b6:f3:d3:
09:1f:52:b5:25:ec:c8:96:f7:e3:2d:89:2a:f9:08:40:bc:03:
86:dd:3f:03:cb:0e:b6:fe:a2:cf:02:7f:a1:17:87:34:b5:8e:
09:7d:ba:03:f2:f9:c0:6e:52:f5:5c:a0:59:e6:23:12:ed:69:
02:84:68:81:93:b7:da:67:45:69:45:a3:e7:69:36:2e:95:96:
0f:6a:74:b6:4f:13:6e:d4:e0:0c:5a:4d:28:b8:9e:3c:2f:bc:
a6:c5:21:86:9a:0d:ad:8b:a8:62:e8:3b:d0:c0:17:4f:85:17:
bf:a2:55:c4:e2:86:29:9a:15:46:39:01:b0:7e:42:82:12:9f:
6f:02:ef:9c:2b:69:74:c6:4a:7b:79:40:c1:5b:26:75:45:aa:
1e:8e:95:bd:ac:52:83:a9:c7:ad:e7:08:47:e4:ab:16:f8:08:
57:cd:bb:1d:82:c6:6a:44:d6:de:90:ac:f8:e0:8d:18:b1:a7:
d9:a2:8b:dc:dc:2a:9e:b9:a9:7e:39:76:72:71:3e:b1:5e:7e:
13:4f:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:49 2025 by rpki-client