Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          2I28bOn5lwxP5tm0qqJFY9mfBAYUA4h0Q3dxBYoyjco=
Subject key identifier:   13:DF:18:F6:01:C1:9E:FB:85:4A:42:35:DE:0E:A3:15:66:B7:C4:FF
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       541FE4A7C33290FE153F32D6D57ED5835D486236
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time:             Wed 27 May 2026 07:47:25 +0000
ROA not before:           Wed 27 May 2026 07:42:25 +0000
ROA not after:            Wed 26 May 2027 07:47:25 +0000
asID:                     6079
IP address blocks:        96.62.227.0/24 maxlen: 24
                          96.62.248.0/24 maxlen: 24
                          140.150.160.0/21 maxlen: 24
                          140.150.168.0/21 maxlen: 24
                          140.233.192.0/18 maxlen: 24
                          143.14.232.0/21 maxlen: 24
                          155.117.111.0/24 maxlen: 24
                          155.117.149.0/24 maxlen: 24
                          155.117.169.0/24 maxlen: 24
                          155.117.190.0/24 maxlen: 24
                          155.117.195.0/24 maxlen: 24
                          155.117.215.0/24 maxlen: 24
                          155.117.222.0/24 maxlen: 24
                          162.141.2.0/23 maxlen: 24
                          162.141.6.0/23 maxlen: 24
                          162.141.22.0/23 maxlen: 24
                          162.141.24.0/22 maxlen: 24
                          162.141.28.0/22 maxlen: 24
                          162.141.32.0/22 maxlen: 24
                          162.141.40.0/22 maxlen: 24
                          162.141.56.0/22 maxlen: 24
                          162.141.60.0/22 maxlen: 24
                          162.141.72.0/22 maxlen: 24
                          162.141.76.0/23 maxlen: 24
                          162.141.134.0/23 maxlen: 24
                          162.141.144.0/21 maxlen: 24
                          162.141.156.0/23 maxlen: 24
                          162.141.168.0/21 maxlen: 24
                          162.141.184.0/21 maxlen: 24
                          162.141.192.0/21 maxlen: 24
                          162.141.200.0/21 maxlen: 24
                          162.141.208.0/21 maxlen: 24
                          162.141.216.0/21 maxlen: 24
                          162.141.224.0/21 maxlen: 24
                          162.141.232.0/21 maxlen: 24
                          162.141.240.0/21 maxlen: 24
                          162.141.248.0/21 maxlen: 24
                          167.148.16.0/21 maxlen: 24
                          167.148.24.0/22 maxlen: 24
                          167.148.43.0/24 maxlen: 24
                          167.148.44.0/23 maxlen: 24
                          167.148.48.0/21 maxlen: 24
                          167.148.56.0/22 maxlen: 24
                          167.148.60.0/22 maxlen: 24
                          167.148.64.0/22 maxlen: 24
                          167.148.75.0/24 maxlen: 24
                          167.148.76.0/22 maxlen: 24
                          167.148.88.0/21 maxlen: 24
                          167.148.108.0/22 maxlen: 24
                          167.148.145.0/24 maxlen: 24
                          167.148.185.0/24 maxlen: 24
                          167.148.220.0/23 maxlen: 24
                          167.148.224.0/21 maxlen: 24
                          167.148.232.0/21 maxlen: 24
                          167.148.240.0/21 maxlen: 24
                          167.148.248.0/21 maxlen: 24
                          168.222.6.0/24 maxlen: 24
                          168.222.11.0/24 maxlen: 24
                          168.222.63.0/24 maxlen: 24
                          168.222.98.0/23 maxlen: 24
                          168.222.123.0/24 maxlen: 24
                          168.222.124.0/24 maxlen: 24
                          168.222.126.0/23 maxlen: 24
                          203.160.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1f:e4:a7:c3:32:90:fe:15:3f:32:d6:d5:7e:d5:83:5d:48:62:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: May 27 07:42:25 2026 GMT
            Not After : May 26 07:47:25 2027 GMT
        Subject: CN=13DF18F601C19EFB854A4235DE0EA31566B7C4FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:d2:c6:36:ab:b4:6e:08:34:fb:3c:b6:33:
                    fe:b7:59:35:ac:b7:cb:e9:ae:ab:09:43:f5:50:ca:
                    96:5f:44:24:cb:93:0a:ba:aa:d2:82:70:8e:e6:5e:
                    6b:b5:f5:f7:8a:1f:15:25:c3:54:51:94:86:bd:ad:
                    b0:14:6a:8f:94:73:bb:37:f7:73:85:be:3e:d9:d1:
                    3e:8f:32:d2:c1:f7:d8:35:d6:5a:83:23:80:21:df:
                    2a:41:6d:29:69:13:b5:ac:54:20:80:15:44:01:a3:
                    e2:29:9d:ad:28:93:c3:19:f5:5c:05:c7:a8:04:5a:
                    9d:16:47:fb:e2:65:28:c4:4f:3f:fb:2a:00:0a:a8:
                    06:e3:62:62:eb:1a:4b:73:e0:ea:a7:76:7f:8b:34:
                    3b:d7:1a:6d:60:37:08:c3:53:89:3d:12:31:97:aa:
                    58:b0:48:25:52:57:fb:08:56:b9:a8:00:ab:1e:f5:
                    a2:54:8d:bb:ea:1b:95:87:90:39:32:e4:2f:24:68:
                    04:82:8b:cb:a4:44:9c:8e:8d:6a:ec:ae:06:a4:0e:
                    35:58:3e:a9:ad:19:8c:e7:bf:9c:68:cb:a9:a9:28:
                    78:55:00:36:7e:49:27:ef:0d:b4:83:75:94:72:65:
                    82:98:91:42:cd:68:42:85:68:6b:a7:23:a5:31:c7:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DF:18:F6:01:C1:9E:FB:85:4A:42:35:DE:0E:A3:15:66:B7:C4:FF
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.62.227.0/24
                  96.62.248.0/24
                  140.150.160.0/20
                  140.233.192.0/18
                  143.14.232.0/21
                  155.117.111.0/24
                  155.117.149.0/24
                  155.117.169.0/24
                  155.117.190.0/24
                  155.117.195.0/24
                  155.117.215.0/24
                  155.117.222.0/24
                  162.141.2.0/23
                  162.141.6.0/23
                  162.141.22.0-162.141.35.255
                  162.141.40.0/22
                  162.141.56.0/21
                  162.141.72.0-162.141.77.255
                  162.141.134.0/23
                  162.141.144.0/21
                  162.141.156.0/23
                  162.141.168.0/21
                  162.141.184.0-162.141.255.255
                  167.148.16.0-167.148.27.255
                  167.148.43.0-167.148.45.255
                  167.148.48.0-167.148.67.255
                  167.148.75.0-167.148.79.255
                  167.148.88.0/21
                  167.148.108.0/22
                  167.148.145.0/24
                  167.148.185.0/24
                  167.148.220.0/23
                  167.148.224.0/19
                  168.222.6.0/24
                  168.222.11.0/24
                  168.222.63.0/24
                  168.222.98.0/23
                  168.222.123.0-168.222.124.255
                  168.222.126.0/23
                  203.160.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:ec:cb:36:56:e0:5e:dc:27:75:ee:65:67:59:54:8f:89:
         4e:d8:d1:31:94:b0:4b:0b:e6:c9:13:b0:78:8f:b2:ef:59:ea:
         3d:ae:85:fa:0e:26:eb:49:1b:d5:16:78:91:6e:53:49:ca:c9:
         18:19:86:cb:ca:70:18:55:2c:a2:c0:ed:a0:a5:17:2f:75:be:
         4a:ca:11:08:88:18:2b:d0:e6:31:b7:09:53:80:a3:ed:2f:63:
         05:73:c3:7f:6a:f3:0d:67:e7:6f:d7:a9:19:49:b7:44:83:f4:
         39:8e:be:d0:94:21:37:ae:ae:9c:1d:fe:e5:75:5a:2f:8b:48:
         88:d2:06:eb:b8:a8:5e:ba:97:57:fe:7e:1c:bd:ec:7a:81:64:
         33:77:80:b0:b8:af:5e:26:e9:b2:48:da:70:51:41:08:a1:cc:
         a7:c7:a5:9f:67:61:ae:fe:14:1f:3b:99:ce:ef:03:f6:df:86:
         80:88:ee:ed:ad:f8:3a:dd:b3:ea:5b:4e:e7:93:59:75:5d:79:
         00:cc:87:47:81:64:8a:8e:6f:e7:ea:26:ae:fe:11:57:e5:64:
         a9:14:dd:40:81:41:ce:8a:f5:b1:8c:d8:90:5f:92:f3:2d:d5:
         81:63:5d:1e:c6:6b:6d:ef:a4:73:01:60:28:c4:26:d0:91:7b:
         e2:ca:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:52 2026 by rpki-client