Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: hr0zqbre4nwF+T1CrlXLaP8g9WU4HkEOX6C+20mta0g=
Subject key identifier: F5:21:E3:CF:DF:F8:44:A0:C8:6E:47:E6:D0:BB:35:3C:38:14:FE:5B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 304AE42149FCC188F9023833232F27C23FE301C2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Mon 28 Sep 2026 19:50:30 +0000
ROA not before: Mon 28 Sep 2026 19:45:30 +0000
ROA not after: Mon 27 Sep 2027 19:50:30 +0000
asID: 6079
IP address blocks: 86.226.128.0/22 maxlen: 24
86.226.132.0/22 maxlen: 24
86.226.136.0/22 maxlen: 24
86.226.140.0/22 maxlen: 24
86.226.144.0/22 maxlen: 24
86.226.148.0/22 maxlen: 24
86.226.152.0/22 maxlen: 24
86.226.156.0/22 maxlen: 24
86.226.160.0/22 maxlen: 24
86.226.164.0/22 maxlen: 24
86.226.168.0/22 maxlen: 24
86.226.172.0/22 maxlen: 24
86.226.176.0/22 maxlen: 24
86.226.180.0/22 maxlen: 24
86.226.184.0/22 maxlen: 24
86.226.188.0/22 maxlen: 24
86.226.192.0/22 maxlen: 24
86.226.196.0/22 maxlen: 24
86.226.200.0/22 maxlen: 24
86.226.204.0/22 maxlen: 24
86.226.208.0/22 maxlen: 24
86.226.212.0/22 maxlen: 24
86.226.216.0/22 maxlen: 24
86.226.220.0/22 maxlen: 24
86.226.224.0/22 maxlen: 24
86.226.228.0/22 maxlen: 24
86.226.232.0/22 maxlen: 24
86.226.236.0/22 maxlen: 24
86.226.240.0/22 maxlen: 24
86.226.244.0/22 maxlen: 24
86.226.248.0/22 maxlen: 24
86.226.252.0/22 maxlen: 24
90.96.192.0/22 maxlen: 24
143.20.186.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.223.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4a:e4:21:49:fc:c1:88:f9:02:38:33:23:2f:27:c2:3f:e3:01:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 28 19:45:30 2026 GMT
Not After : Sep 27 19:50:30 2027 GMT
Subject: CN=F521E3CFDFF844A0C86E47E6D0BB353C3814FE5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:06:71:dd:ac:60:6a:fe:82:c4:47:f6:df:
c1:87:5c:31:19:b0:72:d3:32:0e:ac:59:b9:9f:82:
e2:05:fa:b6:9e:dd:35:57:ad:b3:08:89:f2:5c:66:
1f:b0:45:97:91:15:74:49:5d:2c:12:ec:40:0b:87:
76:3f:7d:46:cf:a4:b7:a2:17:7c:d2:50:ef:ee:35:
a0:bf:75:07:df:14:d6:a6:87:cb:fa:89:32:38:15:
52:bf:f1:6d:fb:43:32:ca:d8:ae:41:b9:e7:93:73:
79:06:01:9f:62:fb:ce:a6:60:7c:80:a8:6a:ea:7b:
87:c4:4a:09:e9:2e:59:cb:15:52:af:93:1e:9b:6c:
5c:b2:d3:bd:8a:59:6c:65:2d:ff:2e:43:d9:7f:b6:
75:1f:a7:8c:15:1a:5f:4d:44:10:3b:f0:c4:05:e3:
d4:80:d2:4f:a1:91:24:0f:8e:ed:42:f7:e2:b4:98:
4c:ab:a9:1b:23:d6:d8:9e:53:48:18:c3:af:86:b9:
ac:ac:c7:0f:32:87:d7:dc:e0:9a:60:e3:10:88:73:
9c:93:93:5f:0f:b5:d9:31:a1:16:70:1e:fa:65:24:
ff:30:b7:a2:53:94:fc:9c:32:0e:a0:2d:78:a4:67:
14:53:37:c1:da:6f:73:4f:9c:a2:f6:54:32:e1:45:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:E3:CF:DF:F8:44:A0:C8:6E:47:E6:D0:BB:35:3C:38:14:FE:5B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.226.128.0/17
90.96.192.0/22
143.20.186.0/24
143.20.198.0/24
143.20.211.0/24
143.20.223.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:44:5c:51:17:e3:7e:f6:f2:aa:72:8f:3d:ee:33:5a:b5:e7:
dc:75:57:c1:32:7d:28:f2:41:84:f3:75:5f:1a:7f:e0:99:8b:
19:b3:59:44:88:28:bf:fc:05:ee:13:30:fc:c0:87:d1:32:54:
7f:8b:fb:d5:06:51:5e:10:86:31:ac:63:0b:4f:98:eb:f4:e7:
0d:00:ca:b6:a9:1b:6f:81:1a:28:eb:8f:84:f7:16:c6:f6:f4:
eb:61:73:7d:24:20:c0:c3:e1:63:a3:a4:53:a2:84:db:52:60:
9c:db:91:d4:77:11:79:b2:50:79:d5:b1:f2:b7:73:36:b2:ba:
c8:f0:e5:75:85:8e:09:b8:10:c6:3f:fe:3b:08:05:46:98:90:
20:76:a8:a0:64:26:23:9f:5c:37:44:2c:bb:f1:71:c1:7b:21:
a4:47:8f:5c:cd:4f:c6:9a:43:c4:11:0f:1b:92:54:ef:24:df:
8f:90:4f:12:28:ea:c0:fe:eb:9d:04:13:10:9a:1b:5a:5f:ac:
cb:81:c0:61:83:95:02:0f:10:04:cf:df:13:08:a9:25:a4:f7:
a4:7f:e5:20:9f:f8:76:ae:37:cc:0f:db:bb:cd:e6:a5:a2:e8:
34:69:0b:2f:93:3f:bb:d4:75:ba:6c:84:1e:de:3d:a9:f7:91:
d3:e7:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:21:53 2026 by rpki-client