Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: G779OblZqEMvW3zZo/BaNoLChGbAz+kSRclR8az/Jzc=
Subject key identifier: 5F:1E:4C:45:FB:57:07:D1:5C:99:06:B5:4B:C0:89:98:44:CD:CA:2D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6979D0DEB8FB4440B5C24CA21E585A863C8AEB9F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
Signing time: Sun 20 Jul 2025 00:00:33 +0000
ROA not before: Sat 19 Jul 2025 23:55:33 +0000
ROA not after: Sun 19 Jul 2026 00:00:33 +0000
asID: 6079
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.136.0/22 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.36.0/22 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.52.0/22 maxlen: 24
82.27.24.0/21 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.144.0/20 maxlen: 24
82.27.168.0/21 maxlen: 24
82.29.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:79:d0:de:b8:fb:44:40:b5:c2:4c:a2:1e:58:5a:86:3c:8a:eb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 19 23:55:33 2025 GMT
Not After : Jul 19 00:00:33 2026 GMT
Subject: CN=5F1E4C45FB5707D15C9906B54BC0899844CDCA2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:92:c2:43:2e:87:34:b6:59:f7:7c:2a:95:
75:9a:8d:d1:62:60:1b:c0:5e:68:fd:2d:ac:b9:ed:
8a:93:23:12:d7:e3:e0:d7:24:d1:92:bd:30:26:16:
4c:28:ab:7c:9e:8c:8e:58:7c:7b:c8:95:cb:ed:90:
ac:73:01:55:93:c2:30:3a:5a:e1:72:33:22:b0:9a:
77:b5:fa:3d:10:76:6f:f7:6b:80:c4:40:6a:f6:0c:
05:f1:39:bd:9f:98:b8:b4:77:ff:ce:07:fc:24:17:
87:34:7d:a2:5f:df:ca:01:be:35:90:65:4d:62:c2:
32:a7:40:be:61:7a:22:eb:c0:6d:45:4c:1f:84:7b:
7d:d5:03:97:51:e1:57:1d:9f:d4:a4:2e:53:c9:35:
87:d7:fc:86:64:cc:12:66:8a:24:f0:87:53:23:b6:
18:8d:7d:dc:83:70:0d:40:81:70:68:df:0b:2b:c8:
58:2e:f2:59:6e:85:58:7b:85:f1:36:50:bc:d6:9d:
de:c4:fc:4d:cf:b6:85:09:5d:b4:5b:88:e6:94:db:
57:d4:02:c5:5d:9c:e5:54:e2:56:97:fa:43:88:7d:
33:84:63:af:94:57:b0:fc:15:cb:16:36:93:5f:d3:
0e:ba:d7:45:41:57:95:a6:23:63:fe:c7:14:99:62:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:4C:45:FB:57:07:D1:5C:99:06:B5:4B:C0:89:98:44:CD:CA:2D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.128.0-82.22.139.255
82.22.148.0-82.22.155.255
82.23.152.0/21
82.24.36.0/22
82.25.0.0/22
82.25.52.0/22
82.27.24.0/21
82.27.48.0/20
82.27.136.0-82.27.159.255
82.27.168.0/21
82.29.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c8:32:b8:68:dc:05:0d:7e:6e:0f:dd:04:e1:b5:3f:ad:74:
ab:14:8e:e7:29:f0:09:d1:dd:66:00:ba:f4:7c:9e:e9:82:ef:
91:71:ea:3f:bc:a7:28:b6:9e:34:c0:32:20:f7:09:65:00:5e:
9f:61:8d:17:e8:2a:ec:14:a4:34:78:57:55:f9:df:0c:1b:12:
96:07:ab:c6:23:2a:ed:2c:00:88:c8:87:b6:60:21:42:9e:8e:
b0:68:77:fd:b1:96:7f:d5:4d:b1:c1:a7:26:35:d5:17:30:25:
13:d7:0a:9a:ba:4b:a3:9c:ba:ee:98:00:5a:1a:bd:24:82:0f:
c3:a0:5a:a6:ce:8e:f6:3a:11:af:4d:3e:c3:e2:f3:f7:28:16:
c0:cb:53:44:c4:03:02:6d:b9:cb:01:66:96:11:6b:34:5e:57:
72:85:ff:3e:9c:e2:3d:45:85:20:2c:9a:47:57:0f:b0:38:5a:
fe:08:91:26:1b:1f:31:f0:cc:b9:86:d8:4f:f8:69:cb:f6:64:
d5:72:c6:38:b5:7f:4d:ed:b5:75:6d:12:12:f1:53:2d:87:ff:
76:3d:bb:8f:05:20:9e:f5:39:ce:52:ab:d2:28:c3:20:2d:31:
1b:bd:be:ec:f5:f4:c3:e5:28:03:bc:5c:7c:d3:63:5b:c4:d0:
f8:3d:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:43 2025 by rpki-client