Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: 2GVXTiKMjG6yNSNcGFA7PXSsaApsTVCo4mDoTevh1YQ=
Subject key identifier: 69:6B:40:90:0B:AB:17:D9:D9:4A:69:37:10:1E:72:F5:2E:5F:8A:F0
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 556999D5BE476039BF88C17B36A4C843D4368CB0
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS6079.roa
Signing time: Fri 26 Jun 2026 10:40:27 +0000
ROA not before: Fri 26 Jun 2026 10:35:27 +0000
ROA not after: Fri 25 Jun 2027 10:40:27 +0000
asID: 6079
IP address blocks: 5.151.103.0/24 maxlen: 24
5.151.122.0/24 maxlen: 24
5.151.126.0/24 maxlen: 24
5.151.128.0/24 maxlen: 24
5.151.129.0/24 maxlen: 24
5.151.150.0/24 maxlen: 24
5.151.192.0/24 maxlen: 24
5.151.193.0/24 maxlen: 24
5.151.194.0/24 maxlen: 24
5.151.195.0/24 maxlen: 24
5.151.224.0/24 maxlen: 24
5.151.225.0/24 maxlen: 24
5.151.243.0/24 maxlen: 24
5.151.253.0/24 maxlen: 24
31.220.243.0/24 maxlen: 24
37.203.146.0/24 maxlen: 24
37.203.168.0/24 maxlen: 24
37.203.169.0/24 maxlen: 24
37.203.170.0/24 maxlen: 24
46.33.2.0/24 maxlen: 24
46.33.30.0/24 maxlen: 24
46.33.31.0/24 maxlen: 24
95.175.148.0/24 maxlen: 24
109.175.153.0/24 maxlen: 24
109.175.163.0/24 maxlen: 24
109.175.164.0/24 maxlen: 24
109.175.165.0/24 maxlen: 24
109.175.171.0/24 maxlen: 24
109.175.182.0/24 maxlen: 24
109.175.191.0/24 maxlen: 24
109.175.198.0/24 maxlen: 24
109.175.199.0/24 maxlen: 24
109.175.201.0/24 maxlen: 24
109.175.202.0/24 maxlen: 24
109.175.203.0/24 maxlen: 24
109.175.204.0/24 maxlen: 24
130.43.143.0/24 maxlen: 24
130.43.156.0/24 maxlen: 24
130.43.166.0/24 maxlen: 24
130.43.178.0/24 maxlen: 24
130.43.179.0/24 maxlen: 24
130.43.184.0/24 maxlen: 24
130.43.188.0/24 maxlen: 24
130.43.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:69:99:d5:be:47:60:39:bf:88:c1:7b:36:a4:c8:43:d4:36:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Jun 26 10:35:27 2026 GMT
Not After : Jun 25 10:40:27 2027 GMT
Subject: CN=696B40900BAB17D9D94A6937101E72F52E5F8AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:54:54:d0:c7:13:aa:8d:75:4a:17:3f:38:
b1:dc:3c:c2:02:90:f0:7b:ed:0e:90:c5:9e:a1:32:
6d:aa:1a:a0:40:7a:6d:98:13:be:16:6f:d2:56:06:
ad:1a:c3:55:bb:33:0d:db:47:06:d5:d1:e5:64:fe:
17:1b:4b:a8:70:50:6a:b3:51:c8:d9:e5:05:5e:0b:
51:d6:fb:2c:35:06:60:5b:9d:ec:6f:23:86:9c:37:
19:d3:dd:31:74:c1:89:ea:02:19:cd:27:f4:3a:d0:
d5:49:ca:be:79:c3:c4:bf:1a:66:f9:05:ec:f3:58:
15:f4:dc:f8:c4:ab:bc:2d:70:d5:20:65:1d:65:06:
7d:79:f6:7e:61:19:39:e3:59:f2:89:31:5d:bf:e7:
2d:76:eb:43:7e:ed:b8:33:56:da:9f:63:d8:1f:96:
6d:a2:4f:6c:20:e7:a5:df:a4:8e:c9:32:0a:83:31:
eb:17:b3:51:c1:f3:a1:bd:f4:5e:7b:c5:09:a8:0f:
52:19:aa:34:0e:7b:7a:e3:ed:92:b5:99:3a:32:cd:
c8:ae:e7:2d:ae:90:f3:b6:65:75:89:29:fc:be:60:
c5:7e:3a:c6:14:aa:00:02:9d:0f:e6:62:f2:f4:d6:
ae:ea:3b:b1:4d:6d:03:60:b5:8b:3d:0d:a0:56:c5:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:40:90:0B:AB:17:D9:D9:4A:69:37:10:1E:72:F5:2E:5F:8A:F0
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.151.103.0/24
5.151.122.0/24
5.151.126.0/24
5.151.128.0/23
5.151.150.0/24
5.151.192.0/22
5.151.224.0/23
5.151.243.0/24
5.151.253.0/24
31.220.243.0/24
37.203.146.0/24
37.203.168.0-37.203.170.255
46.33.2.0/24
46.33.30.0/23
95.175.148.0/24
109.175.153.0/24
109.175.163.0-109.175.165.255
109.175.171.0/24
109.175.182.0/24
109.175.191.0/24
109.175.198.0/23
109.175.201.0-109.175.204.255
130.43.143.0/24
130.43.156.0/24
130.43.166.0/24
130.43.178.0/23
130.43.184.0/24
130.43.188.0/23
Signature Algorithm: sha256WithRSAEncryption
74:27:4f:46:20:6a:69:24:87:a0:46:18:cc:b9:ea:9b:d3:1c:
be:ab:38:93:16:d0:ec:e5:39:09:62:96:4a:1c:f7:7c:69:1e:
99:22:32:57:eb:f8:b1:d7:2b:ad:d5:ae:3b:60:3a:e1:ef:75:
e3:c8:32:0c:57:84:cb:20:6d:5b:a2:19:2e:5c:df:2e:8b:e0:
80:6d:3e:10:cc:07:e4:4d:e8:a6:4a:6f:11:a7:bb:86:50:64:
31:1a:5e:97:43:81:e4:ab:6b:1d:29:00:fc:08:75:25:1b:1c:
9b:a7:4b:8b:6b:73:03:bc:30:0b:30:18:ed:dd:0c:e7:32:4b:
e8:3d:26:11:6e:de:ca:c1:5a:ca:70:83:20:a2:77:47:1e:a2:
da:72:2d:3c:2a:da:a2:70:c4:fd:61:c3:35:7c:d0:bc:a7:15:
0f:5c:eb:ef:ef:f3:e9:3e:d0:d4:25:32:4a:ad:54:f8:b2:19:
d0:98:23:cb:5e:90:cf:77:92:f3:c9:f0:86:ab:c8:b1:02:78:
49:b5:bb:f4:f7:62:ad:bc:40:c1:57:26:04:7e:5a:70:34:03:
b1:67:a8:61:ab:41:fb:db:c9:4f:8c:9c:d0:98:fa:c2:49:5a:
76:55:b0:c1:da:64:1d:78:5b:32:c6:e6:be:bc:af:61:91:1b:
51:f9:00:46
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUVWmZ1b5HYDm/iMF7NqTIQ9Q2jLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj
YzRhOTMyNjAeFw0yNjA2MjYxMDM1MjdaFw0yNzA2MjUxMDQwMjdaMDMxMTAvBgNV
BAMTKDY5NkI0MDkwMEJBQjE3RDlEOTRBNjkzNzEwMUU3MkY1MkU1RjhBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh01RU0McTqo11Shc/OLHcPMIC
kPB77Q6QxZ6hMm2qGqBAem2YE74Wb9JWBq0aw1W7Mw3bRwbV0eVk/hcbS6hwUGqz
UcjZ5QVeC1HW+yw1BmBbnexvI4acNxnT3TF0wYnqAhnNJ/Q60NVJyr55w8S/Gmb5
BezzWBX03PjEq7wtcNUgZR1lBn159n5hGTnjWfKJMV2/5y1260N+7bgzVtqfY9gf
lm2iT2wg56XfpI7JMgqDMesXs1HB86G99F57xQmoD1IZqjQOe3rj7ZK1mToyzciu
5y2ukPO2ZXWJKfy+YMV+OsYUqgACnQ/mYvL01q7qO7FNbQNgtYs9DaBWxdU/AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUaWtAkAurF9nZSmk3EB5y9S5fivAwHwYDVR0j
BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy
OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14
S2t5WS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJlNmRhNWM3LTY3MGEt
NDFiMS05NmViLTM4OTkzODhiMjkyYy8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB3QYIKwYBBQUHAQcBAf8Egc0wgcowgccEAgABMIHAAwQA
BZdnAwQABZd6AwQABZd+AwQBBZeAAwQABZeWAwQCBZfAAwQBBZfgAwQABZfzAwQA
BZf9AwQAH9zzAwQAJcuSMAwDBAMly6gDBAAly6oDBAAuIQIDBAEuIR4DBABfr5QD
BABtr5kwDAMEAG2vowMEAW2vpAMEAG2vqwMEAG2vtgMEAG2vvwMEAW2vxjAMAwQA
ba/JAwQAba/MAwQAgiuPAwQAgiucAwQAgiumAwQBgiuyAwQAgiu4AwQBgiu8MA0G
CSqGSIb3DQEBCwUAA4IBAQB0J09GIGppJIegRhjMueqb0xy+qziTFtDs5TkJYpZK
HPd8aR6ZIjJX6/ix1yut1a47YDrh73XjyDIMV4TLIG1bohkuXN8ui+CAbT4QzAfk
TeimSm8Rp7uGUGQxGl6XQ4Hkq2sdKQD8CHUlGxybp0uLa3MDvDALMBjt3QznMkvo
PSYRbt7KwVrKcIMgondHHqLaci08KtqicMT9YcM1fNC8pxUPXOvv7/PpPtDUJTJK
rVT4shnQmCPLXpDPd5LzyfCGq8ixAnhJtbv092KtvEDBVyYEflpwNAOxZ6hhq0H7
28lPjJzQmPrCSVp2VbDB2mQdeFsyxua+vK9hkRtR+QBG
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:26:05 2026 by rpki-client