Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: lL05aZ1lRfii1rk5ICFstPeN+6lrnq1X9OpIs/JIv5Y=
Subject key identifier: C9:A0:01:AE:93:92:2B:71:A8:6A:71:E5:2C:02:57:B4:59:7C:F7:D2
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 456C04AFBF1AF9844265E3FD5A50F3C29F04CAB7
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS6079.roa
Signing time: Mon 05 Oct 2026 08:44:25 +0000
ROA not before: Mon 05 Oct 2026 08:39:25 +0000
ROA not after: Mon 04 Oct 2027 08:44:25 +0000
asID: 6079
IP address blocks: 79.176.3.0/24 maxlen: 24
79.176.5.0/24 maxlen: 24
79.176.7.0/24 maxlen: 24
79.176.9.0/24 maxlen: 24
79.176.41.0/24 maxlen: 24
79.176.78.0/24 maxlen: 24
79.176.96.0/24 maxlen: 24
79.182.1.0/24 maxlen: 24
79.182.3.0/24 maxlen: 24
79.182.5.0/24 maxlen: 24
109.66.48.0/24 maxlen: 24
109.66.55.0/24 maxlen: 24
109.66.58.0/24 maxlen: 24
109.66.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6c:04:af:bf:1a:f9:84:42:65:e3:fd:5a:50:f3:c2:9f:04:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:25 2026 GMT
Not After : Oct 4 08:44:25 2027 GMT
Subject: CN=C9A001AE93922B71A86A71E52C0257B4597CF7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:57:d1:a3:5a:a1:a3:1a:18:96:25:8d:18:
55:14:15:11:9e:de:98:bb:c8:f2:a5:df:26:c4:82:
8d:71:fb:44:82:5c:37:04:df:3a:78:12:28:88:16:
66:7c:ff:e1:b6:f3:e4:12:e6:ee:71:30:6f:21:d1:
3d:51:f8:56:82:9f:58:a9:6a:6d:32:2e:a1:cb:1a:
e4:76:34:16:74:5f:df:72:c5:a6:9f:2c:5e:1b:8d:
52:1e:e5:16:b4:76:19:00:4f:97:a0:45:ac:42:1e:
63:bf:38:9f:84:fc:31:39:13:b4:2d:29:c1:bb:5a:
69:52:42:9c:73:6a:64:e1:4c:b7:93:ff:76:02:11:
4b:48:c3:0a:97:23:2e:1a:7b:12:d5:2c:62:19:ba:
55:24:e4:90:e1:61:54:b2:5d:5e:cd:ea:9a:bf:bc:
a0:c3:ca:61:a5:cc:3a:12:d5:07:65:c8:fc:c8:50:
f0:54:46:d8:50:f7:7a:47:55:24:c1:1e:6e:58:47:
99:30:2d:d8:ab:e6:f5:7d:37:67:60:48:99:39:92:
40:da:e1:26:b8:d1:ff:72:3f:ed:42:43:b0:6d:19:
83:e8:95:5f:f9:2d:72:9a:ca:77:4e:a0:3f:10:b1:
70:a1:ae:df:13:c9:29:8e:52:3f:b3:c8:b0:0b:80:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:01:AE:93:92:2B:71:A8:6A:71:E5:2C:02:57:B4:59:7C:F7:D2
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.3.0/24
79.176.5.0/24
79.176.7.0/24
79.176.9.0/24
79.176.41.0/24
79.176.78.0/24
79.176.96.0/24
79.182.1.0/24
79.182.3.0/24
79.182.5.0/24
109.66.48.0/24
109.66.55.0/24
109.66.58.0/24
109.66.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:8c:92:ac:81:e5:6b:05:db:eb:48:7a:4a:41:d9:ad:18:f5:
ed:70:c8:ce:1c:59:ea:88:47:4b:17:7b:e4:fb:0b:08:b6:d8:
53:f5:2b:ad:3b:e1:d0:cd:89:17:3a:12:3c:9f:92:ec:6e:fa:
b8:b1:1c:e2:2e:78:84:0e:4e:ac:3a:32:0b:5b:ab:c0:65:62:
63:e7:e6:d0:4e:c2:03:f8:78:a3:12:65:c9:48:2c:48:e2:c5:
28:1b:18:6a:fb:a7:72:fa:26:77:ef:ac:7f:4f:97:55:4f:ad:
5c:5a:f1:e5:9c:70:9a:6e:8a:9e:d7:82:f1:bb:77:7b:0c:79:
c6:0b:87:4a:12:0d:ad:93:ab:37:12:9e:86:b5:3c:15:10:42:
ef:e8:85:93:23:70:be:d0:ba:a4:76:48:a4:d7:3e:48:c7:12:
8b:13:26:d2:6d:40:c1:cf:ff:ce:9a:7c:dc:31:3a:14:55:1e:
55:cb:e3:e8:ce:69:60:0a:b2:85:04:19:78:16:6c:0a:dc:f6:
62:68:bc:5d:b8:f1:34:71:c6:fb:34:43:aa:29:66:a4:3c:4c:
47:86:5a:2d:a7:81:1d:95:a5:dd:c0:8c:80:73:b3:ca:84:d4:
62:e3:cd:a7:e3:3c:7a:cd:65:f7:f7:b1:48:84:75:c6:01:86:
d7:58:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:36:56 2026 by rpki-client