Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          JCfrcQBkjegHRPW1K94USyR3mYV6qFbso/nfSUJ3bkc=
Subject key identifier:   51:EE:03:7D:13:85:23:00:39:6F:51:B2:EE:0C:3B:74:8B:7E:CD:C2
Certificate issuer:       /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial:       04B664F2146E86082C9E91CAC03667A649942E95
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS6079.roa
Signing time:             Thu 15 Oct 2026 07:51:56 +0000
ROA not before:           Thu 15 Oct 2026 07:46:56 +0000
ROA not after:            Thu 14 Oct 2027 07:51:56 +0000
asID:                     6079
IP address blocks:        186.241.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 09:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b6:64:f2:14:6e:86:08:2c:9e:91:ca:c0:36:67:a6:49:94:2e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
        Validity
            Not Before: Oct 15 07:46:56 2026 GMT
            Not After : Oct 14 07:51:56 2027 GMT
        Subject: CN=51EE037D13852300396F51B2EE0C3B748B7ECDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:f4:d6:33:7d:28:11:86:16:c4:1b:9a:74:
                    72:54:ce:34:e9:57:7a:2b:4a:8a:d0:23:6b:34:82:
                    b9:4d:8b:46:1a:f0:5c:d2:01:99:09:30:70:f1:f9:
                    e6:58:35:f9:03:c8:7e:a7:3b:97:81:6d:6f:bb:91:
                    5d:15:0b:d9:de:5c:4a:8e:aa:6f:c3:6c:5f:ae:8e:
                    78:ba:ce:fa:af:6e:04:66:2f:69:28:87:84:6a:65:
                    ee:a5:86:f5:93:88:5f:1c:fd:1a:6b:50:fa:88:fc:
                    89:93:01:65:df:a3:fe:b3:ec:32:22:98:8c:0a:6b:
                    ba:45:4d:9e:9b:4e:52:48:6e:f0:c7:61:c6:1d:2f:
                    c0:57:36:b3:f3:39:06:87:96:81:65:9b:e1:10:18:
                    8b:11:7b:48:e8:06:e6:ae:12:3d:20:f8:e7:e5:87:
                    b7:e5:37:d9:ad:9c:95:ae:4a:fc:8d:aa:dc:12:5a:
                    63:45:cf:25:ad:ff:e4:95:f5:6e:9e:75:b9:10:60:
                    56:71:cc:45:44:86:6f:0a:be:7a:45:06:7f:a8:aa:
                    a6:1c:f3:a5:e0:23:bc:1d:2e:ce:a4:38:14:33:8a:
                    ea:d6:13:12:fc:37:be:93:a1:ce:90:d6:b4:1b:ed:
                    4e:ac:a6:c7:dd:0f:49:53:4f:90:d9:32:25:48:1d:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:03:7D:13:85:23:00:39:6F:51:B2:EE:0C:3B:74:8B:7E:CD:C2
            X509v3 Authority Key Identifier:
                keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.241.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:30:19:70:49:72:88:b1:87:8a:a3:71:c2:cf:76:0c:0a:
         1a:eb:d4:2e:13:5f:34:d8:ca:d9:8b:a0:dc:4c:a3:07:60:b7:
         f5:fa:a9:09:42:71:c3:af:2e:5d:d2:0b:e6:42:77:03:d6:28:
         c6:cb:be:23:7e:26:2b:c8:e7:5f:52:bd:98:70:88:36:e7:12:
         d0:1f:f7:49:3d:91:4c:9b:a7:93:69:3f:7c:ce:77:ad:f9:90:
         7e:5c:12:d8:fc:66:61:2a:54:78:c0:4a:8a:fa:ed:af:6d:d4:
         0d:97:08:52:3d:d8:4a:a3:67:82:b9:62:c7:89:30:e5:3a:2c:
         c7:93:20:6f:1f:54:57:be:d4:1b:82:72:77:46:15:ef:a8:fe:
         88:7a:7f:ab:c8:1d:89:f6:25:cb:bc:37:28:b7:2b:58:5b:57:
         5c:0c:f4:31:8d:29:c4:ee:17:df:cc:2c:57:90:75:44:90:3c:
         81:27:d2:b0:6d:98:c4:16:cf:a5:e4:74:8e:39:eb:39:30:15:
         f2:39:dd:60:e5:9f:99:15:6e:e8:af:e3:cc:84:55:ac:72:b6:
         b7:37:dd:9f:33:93:30:d4:83:b1:e6:36:ff:1b:2e:55:59:b7:
         ad:3d:ec:5b:44:58:88:f0:8d:e6:86:43:76:2d:35:e6:41:02:
         42:3c:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:39 2026 by rpki-client