Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          /hcWMgY990Vn1klM99l9WIdMbymKpCAhX2SMhB++1Tk=
Subject key identifier:   E0:E6:59:33:8D:3B:10:74:57:0E:A0:9B:B7:92:D6:F1:2B:9E:E0:C9
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       7271119DD45E458FCFB77CF2DF4216E656A322E2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6079.roa
Signing time:             Thu 15 Oct 2026 07:51:55 +0000
ROA not before:           Thu 15 Oct 2026 07:46:55 +0000
ROA not after:            Thu 14 Oct 2027 07:51:55 +0000
asID:                     6079
IP address blocks:        193.111.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:71:11:9d:d4:5e:45:8f:cf:b7:7c:f2:df:42:16:e6:56:a3:22:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Oct 15 07:46:55 2026 GMT
            Not After : Oct 14 07:51:55 2027 GMT
        Subject: CN=E0E659338D3B1074570EA09BB792D6F12B9EE0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:39:2f:1d:89:12:a5:29:c2:f5:49:05:56:
                    0b:f1:74:19:2e:3d:0e:c5:e3:85:dd:e8:0b:d2:97:
                    19:97:78:62:8c:4a:5f:7d:08:25:cd:a7:6f:f8:f9:
                    e4:c2:2f:e2:0e:5d:92:d0:5b:a1:a0:08:bf:a6:f2:
                    41:7c:bf:a9:cc:31:14:0e:bb:39:93:8c:8d:61:ae:
                    1b:f1:85:d5:fb:88:8b:e1:d0:62:34:bb:07:4d:60:
                    33:82:fd:2a:9f:17:b3:c7:4a:ce:c5:53:f1:e3:d6:
                    84:9e:dc:50:b2:34:23:92:2b:fa:45:a5:83:61:83:
                    d4:43:0c:b2:a1:d4:de:ad:51:ca:11:d4:0b:f7:a4:
                    52:4d:93:bf:95:05:1b:da:ee:f9:39:a7:a9:50:c2:
                    dd:99:9a:bb:9e:27:60:1e:b9:1c:a1:ed:a6:7a:2c:
                    37:81:94:c5:20:8c:84:57:70:ef:89:d0:a0:66:78:
                    0d:71:60:76:e5:3f:92:29:fb:59:4e:21:c2:0b:fe:
                    82:a4:a1:df:29:9d:cb:12:70:6e:8b:70:b3:4f:a3:
                    78:d8:9d:c9:b3:dd:1f:c5:22:ca:de:e0:32:18:44:
                    25:a1:68:33:44:81:14:53:c8:cd:94:8c:68:6e:ab:
                    b0:ea:55:27:ce:1b:d0:42:ea:13:1b:39:12:bf:65:
                    48:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E6:59:33:8D:3B:10:74:57:0E:A0:9B:B7:92:D6:F1:2B:9E:E0:C9
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:d5:be:25:08:1d:c1:e1:ab:f2:87:28:8c:9c:e4:e8:a7:
         a6:b8:1a:39:fb:25:25:4c:6a:ad:0a:23:91:e9:94:25:ab:32:
         04:54:49:a5:77:9d:f9:1a:5f:1b:46:3b:5a:b0:94:cf:33:c4:
         0c:0e:76:5c:76:d3:5e:be:f1:d3:4d:25:6c:2a:a2:f5:7a:15:
         98:dc:9d:8d:fa:89:4f:b6:ee:53:38:bc:85:7e:ce:d7:ab:f9:
         12:e3:cf:46:d9:75:cd:26:ad:af:ec:89:dc:8e:ff:94:3b:fd:
         33:b4:08:ec:df:87:89:91:41:ee:af:20:29:fa:53:1f:4c:19:
         22:d6:c6:df:e4:2a:e3:32:0f:ef:66:d0:ef:6e:3a:89:ca:b8:
         a5:a1:a7:4f:0e:f3:f2:fc:f8:55:a8:68:22:88:1f:3e:53:ae:
         43:db:25:74:ba:e8:93:1e:e1:62:5b:a5:5d:50:b6:ac:ae:a0:
         35:19:47:84:f9:06:c7:13:0b:87:99:0e:e0:9b:89:ad:eb:03:
         5a:b0:1e:71:01:28:49:5a:6a:de:d9:a8:73:ef:cb:7d:23:40:
         9d:c6:01:87:28:9c:8a:0a:68:85:55:3f:82:2c:08:05:55:2b:
         58:de:bd:9b:c3:5e:fb:90:a8:72:79:2a:ca:43:99:cd:59:24:
         17:06:f6:35
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUcnERndReRY/Pt3zy30IW5lajIuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjEwMTUwNzQ2NTVaFw0yNzEwMTQwNzUxNTVaMDMxMTAvBgNV
BAMTKEUwRTY1OTMzOEQzQjEwNzQ1NzBFQTA5QkI3OTJENkYxMkI5RUUwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tDkvHYkSpSnC9UkFVgvxdBku
PQ7F44Xd6AvSlxmXeGKMSl99CCXNp2/4+eTCL+IOXZLQW6GgCL+m8kF8v6nMMRQO
uzmTjI1hrhvxhdX7iIvh0GI0uwdNYDOC/SqfF7PHSs7FU/Hj1oSe3FCyNCOSK/pF
pYNhg9RDDLKh1N6tUcoR1Av3pFJNk7+VBRva7vk5p6lQwt2ZmrueJ2AeuRyh7aZ6
LDeBlMUgjIRXcO+J0KBmeA1xYHblP5Ip+1lOIcIL/oKkod8pncsScG6LcLNPo3jY
ncmz3R/FIsre4DIYRCWhaDNEgRRTyM2UjGhuq7DqVSfOG9BC6hMbORK/ZUj1AgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQU4OZZM407EHRXDqCbt5LW8Sue4MkwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFvfDAN
BgkqhkiG9w0BAQsFAAOCAQEAa7DVviUIHcHhq/KHKIyc5OinprgaOfslJUxqrQoj
kemUJasyBFRJpXed+RpfG0Y7WrCUzzPEDA52XHbTXr7x000lbCqi9XoVmNydjfqJ
T7buUzi8hX7O16v5EuPPRtl1zSatr+yJ3I7/lDv9M7QI7N+HiZFB7q8gKfpTH0wZ
ItbG3+Qq4zIP72bQ7246icq4paGnTw7z8vz4VahoIogfPlOuQ9sldLrokx7hYlul
XVC2rK6gNRlHhPkGxxMLh5kO4JuJresDWrAecQEoSVpq3tmoc+/LfSNAncYBhyic
igpohVU/giwIBVUrWN69m8Ne+5CocnkqykOZzVkkFwb2NQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:40 2026 by rpki-client