Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: ATcxOuzH+RanTHQUCALRSekRr3+IXs9fNKOI46yoGeo=
Subject key identifier: A7:DC:96:12:21:CA:E4:CE:A9:C3:F3:0A:75:DB:DC:28:C3:EC:64:8B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04E371AB9228E39EE48DBD39FB4504980935B081
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Mon 13 Jul 2026 22:15:07 +0000
ROA not before: Mon 13 Jul 2026 22:10:07 +0000
ROA not after: Mon 12 Jul 2027 22:15:07 +0000
asID: 6079
IP address blocks: 96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.232.0/21 maxlen: 24
155.117.111.0/24 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.195.0/24 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.115.0/24 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.63.0/24 maxlen: 24
168.222.123.0/24 maxlen: 24
168.222.124.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e3:71:ab:92:28:e3:9e:e4:8d:bd:39:fb:45:04:98:09:35:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 22:10:07 2026 GMT
Not After : Jul 12 22:15:07 2027 GMT
Subject: CN=A7DC961221CAE4CEA9C3F30A75DBDC28C3EC648B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:ff:09:dc:c3:cf:29:32:7a:5d:77:48:8c:
e8:c1:2e:ee:35:39:13:38:ef:13:02:d4:29:34:df:
06:8a:ab:40:79:a0:f4:a6:78:77:71:33:50:6d:82:
1f:95:8e:fe:03:f9:c2:9d:5f:04:92:d3:7b:4c:5c:
6f:c4:e8:0a:ab:e1:d9:bb:f8:f6:dd:f1:e3:a1:90:
84:87:18:1f:77:23:d4:29:46:ea:98:fc:20:d6:c5:
23:bc:b9:3a:8f:62:39:4e:46:8b:a8:b7:d1:e1:6f:
ea:9d:67:61:bb:37:1a:e7:cc:b8:d8:9d:83:80:f7:
2e:bc:c6:35:7a:ab:77:94:e6:04:81:80:f2:a5:de:
6d:31:6e:d6:ae:33:a2:8e:5a:83:be:80:da:fe:c3:
a6:17:c2:3f:cf:b7:ca:eb:da:e9:b1:21:d3:ce:51:
0f:4b:cb:21:f7:08:c7:ac:5a:c4:1e:0c:8b:bb:44:
77:8a:85:c1:5a:d5:b0:55:55:af:d6:4e:c8:08:46:
1e:82:58:9f:74:4d:4e:61:ff:dd:39:90:70:8c:71:
98:33:ad:e6:e2:b3:80:02:b9:98:46:04:ee:61:02:
4a:c5:9b:5d:1e:bf:34:91:22:47:df:c8:0e:c9:7e:
fc:d8:71:89:30:1c:bf:c6:1d:c7:63:1f:ff:5e:c9:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:96:12:21:CA:E4:CE:A9:C3:F3:0A:75:DB:DC:28:C3:EC:64:8B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.227.0/24
96.62.248.0/24
140.150.160.0/20
140.233.192.0/18
143.14.232.0/21
155.117.111.0/24
155.117.149.0/24
155.117.195.0/24
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.115.0/24
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.255.255
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.11.0/24
168.222.63.0/24
168.222.123.0-168.222.124.255
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
53:c7:3c:72:ef:3c:12:7e:2a:ba:d4:a6:17:f5:72:d9:27:f4:
8d:ba:49:95:92:da:04:47:1f:c6:68:ed:40:8f:37:24:3f:b1:
7c:19:8c:54:f4:7d:8e:e5:ac:b4:d6:20:08:83:92:7b:8e:4e:
32:59:b4:f2:de:c7:93:e3:12:d8:b6:e2:1a:a8:ac:e9:03:54:
cc:5d:9a:f3:4b:75:7b:57:9c:ea:bb:43:be:f4:6c:bf:16:a0:
87:dd:b6:64:21:a8:8a:80:49:61:25:f4:c7:b1:11:7e:ee:6c:
f2:47:50:1d:f3:74:c3:d8:b9:d3:1c:fa:b2:be:69:e3:d6:41:
3f:c4:56:63:40:cc:02:e9:b9:c8:70:d4:5a:db:44:a6:64:f5:
0a:b3:42:37:94:02:03:a8:46:85:57:11:85:0f:c2:38:96:5d:
57:fc:8e:78:1e:42:49:02:cb:b2:ef:55:a3:3a:14:7d:89:58:
73:d9:56:df:f8:ef:f0:22:2b:e6:38:cc:58:52:1f:68:b4:bc:
88:63:e9:a9:30:28:0a:61:e9:5b:0a:1d:62:94:c4:24:ba:e8:
c5:93:08:15:32:62:3c:c0:b1:46:5f:a0:40:52:7f:7b:e7:6a:
df:fd:ee:1d:e0:dc:34:ca:77:59:44:32:86:9b:3a:a4:c4:8a:
92:2b:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:53 2026 by rpki-client