This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          ncxLqKJyW+sLBkLi12pC8/NW43iu3ut3BWxzvgz0YAE=
Subject key identifier:   75:BB:6A:F1:4E:0C:66:3E:01:F7:77:25:A6:CD:8B:D8:02:A9:7D:7D
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       20EF87D074F3120204286EEFBD0847D6E8A71385
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
Signing time:             Mon 01 Dec 2025 14:52:42 +0000
ROA not before:           Mon 01 Dec 2025 14:47:42 +0000
ROA not after:            Mon 30 Nov 2026 14:52:42 +0000
asID:                     6079
IP address blocks:        2a0a:7e00::/29 maxlen: 48
                          2a0c:fa40::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 10:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ef:87:d0:74:f3:12:02:04:28:6e:ef:bd:08:47:d6:e8:a7:13:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Dec  1 14:47:42 2025 GMT
            Not After : Nov 30 14:52:42 2026 GMT
        Subject: CN=75BB6AF14E0C663E01F77725A6CD8BD802A97D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:20:27:51:55:92:5c:c5:e6:68:f4:c1:93:
                    60:6a:5c:b5:12:f3:23:ab:b7:37:1c:14:f3:7e:62:
                    93:2e:67:ad:f0:e8:c7:b0:69:59:fa:10:a0:ae:89:
                    da:87:d7:63:38:fe:c0:97:84:36:e5:13:4d:b4:a6:
                    98:4b:95:00:d7:3d:e9:ff:7a:94:11:ff:af:d4:5c:
                    79:6a:12:56:5b:cc:72:99:d8:3b:75:64:7c:de:b9:
                    40:e2:c7:5a:a4:db:d5:5e:1a:29:70:f4:fa:9d:3d:
                    9b:4a:60:1b:7e:13:50:0f:f4:d2:97:43:6c:47:bc:
                    fa:03:07:2e:54:c2:1f:d6:79:7d:ec:86:f2:a9:9d:
                    d0:82:7e:78:16:a3:49:24:ca:a3:c3:7b:04:65:84:
                    22:e3:27:fb:6b:96:cd:c9:89:a7:05:7e:24:29:d0:
                    d0:1b:ff:62:cc:81:86:45:11:6d:87:0f:04:ac:f4:
                    57:d5:0f:70:d7:af:35:1c:dd:0e:8d:3b:ac:fd:f2:
                    5a:65:dc:d0:ea:8c:71:0b:e8:63:d6:9a:15:45:a8:
                    34:ac:11:ee:b6:b4:7c:29:f1:b4:08:ce:64:ab:12:
                    c2:1d:4e:e2:96:d2:3c:2a:4c:aa:5f:71:28:c9:a1:
                    7b:6a:b8:17:31:70:fe:af:ae:e3:a2:89:22:1a:1c:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:6A:F1:4E:0C:66:3E:01:F7:77:25:A6:CD:8B:D8:02:A9:7D:7D
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:7e00::/29
                  2a0c:fa40::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:12:af:b9:a2:4a:63:fc:0d:a9:d6:33:f4:8b:b5:e0:14:28:
         10:6b:45:ca:31:68:2b:e0:aa:48:a0:44:8b:de:ad:8e:97:ec:
         1f:b0:65:43:36:0d:02:dd:0b:e1:47:c4:a3:0b:9b:2e:97:5a:
         a8:08:cf:49:a6:b6:8b:e2:94:fd:ac:c8:20:33:0b:bd:f7:e6:
         1d:be:fb:20:b0:15:78:a0:a0:1f:4e:61:d7:96:de:bd:b2:ad:
         12:94:6a:f9:2c:f9:ca:ea:fc:a7:7f:7c:5c:b8:ec:7f:50:14:
         ae:23:df:60:cd:08:6f:9e:ae:3c:4a:18:6f:9c:33:82:6a:5d:
         b7:2f:d8:66:12:2f:bf:dd:21:d7:3f:5f:b3:f7:6c:72:0c:95:
         40:d2:54:d7:16:43:cf:14:8f:a8:c5:57:f7:9f:31:3f:b3:88:
         27:27:7d:14:df:2e:31:91:95:af:f1:10:d6:80:e9:34:91:ee:
         a6:ff:78:19:7d:14:4b:3b:f5:b0:53:85:78:94:f1:8e:e8:39:
         34:75:a4:95:f6:6e:4d:30:a7:cb:84:ac:e6:25:9c:1d:4b:43:
         c8:95:1c:ab:32:d1:32:35:11:e6:db:bd:7d:cc:1c:30:e3:e3:
         05:cc:aa:0d:be:8a:68:21:bd:dd:0f:d8:fa:5e:76:27:d7:54:
         0c:19:05:08
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUIO+H0HTzEgIEKG7vvQhH1uinE4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTEyMDExNDQ3NDJaFw0yNjExMzAxNDUyNDJaMDMxMTAvBgNV
BAMTKDc1QkI2QUYxNEUwQzY2M0UwMUY3NzcyNUE2Q0Q4QkQ4MDJBOTdEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCiAnUVWSXMXmaPTBk2BqXLUS
8yOrtzccFPN+YpMuZ63w6MewaVn6EKCuidqH12M4/sCXhDblE020pphLlQDXPen/
epQR/6/UXHlqElZbzHKZ2Dt1ZHzeuUDix1qk29VeGilw9PqdPZtKYBt+E1AP9NKX
Q2xHvPoDBy5Uwh/WeX3shvKpndCCfngWo0kkyqPDewRlhCLjJ/trls3JiacFfiQp
0NAb/2LMgYZFEW2HDwSs9FfVD3DXrzUc3Q6NO6z98lpl3NDqjHEL6GPWmhVFqDSs
Ee62tHwp8bQIzmSrEsIdTuKW0jwqTKpfcSjJoXtquBcxcP6vruOiiSIaHElRAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUdbtq8U4MZj4B93clps2L2AKpfX0wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAIwDgMFAyoKfgAD
BQMqDPpAMA0GCSqGSIb3DQEBCwUAA4IBAQBTEq+5okpj/A2p1jP0i7XgFCgQa0XK
MWgr4KpIoESL3q2Ol+wfsGVDNg0C3QvhR8SjC5sul1qoCM9JpraL4pT9rMggMwu9
9+YdvvsgsBV4oKAfTmHXlt69sq0SlGr5LPnK6vynf3xcuOx/UBSuI99gzQhvnq48
ShhvnDOCal23L9hmEi+/3SHXP1+z92xyDJVA0lTXFkPPFI+oxVf3nzE/s4gnJ30U
3y4xkZWv8RDWgOk0ke6m/3gZfRRLO/WwU4V4lPGO6Dk0daSV9m5NMKfLhKzmJZwd
S0PIlRyrMtEyNRHm2719zBww4+MFzKoNvopoIb3dD9j6XnYn11QMGQUI
-----END CERTIFICATE-----
Generated at Fri Dec 5 12:23:26 2025 by rpki-client