Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: RXAfPFPwKgXf3Wu2SwpfY9Qoiw6ab3uk83Xbfy/9usA=
Subject key identifier: 4D:2D:20:FE:A4:F6:B5:22:DA:22:5D:5D:58:B3:CD:4C:C2:90:6C:00
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 51F8CB315946B0203B1C10F5741DC4D655EF931E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
Signing time: Mon 31 Aug 2026 09:44:18 +0000
ROA not before: Mon 31 Aug 2026 09:39:18 +0000
ROA not after: Mon 30 Aug 2027 09:44:18 +0000
asID: 6079
IP address blocks: 51.19.0.0/17 maxlen: 24
51.19.128.0/17 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.146.160.0/20 maxlen: 24
51.146.188.0/23 maxlen: 23
51.146.212.0/22 maxlen: 22
51.146.216.0/23 maxlen: 23
51.146.224.0/22 maxlen: 22
51.146.232.0/24 maxlen: 24
51.194.8.0/21 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.69.0/24 maxlen: 24
51.194.83.0/24 maxlen: 24
51.194.84.0/24 maxlen: 24
51.194.85.0/24 maxlen: 24
51.241.4.0/24 maxlen: 24
51.241.6.0/24 maxlen: 24
51.241.22.0/24 maxlen: 24
51.241.52.0/24 maxlen: 24
51.241.73.0/24 maxlen: 24
51.241.96.0/24 maxlen: 24
51.241.122.0/24 maxlen: 24
51.241.126.0/24 maxlen: 24
51.241.234.0/24 maxlen: 24
51.241.240.0/22 maxlen: 24
51.241.252.0/24 maxlen: 24
78.105.98.0/23 maxlen: 23
78.105.104.0/21 maxlen: 21
78.105.119.0/24 maxlen: 24
78.105.126.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.148.0/24 maxlen: 24
78.105.172.0/24 maxlen: 24
78.105.196.0/24 maxlen: 24
78.105.215.0/24 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.240.0/24 maxlen: 24
78.105.241.0/24 maxlen: 24
78.105.245.0/24 maxlen: 24
78.105.247.0/24 maxlen: 24
78.105.248.0/21 maxlen: 24
94.195.0.0/16 maxlen: 24
188.220.153.0/24 maxlen: 24
188.220.155.0/24 maxlen: 24
188.220.162.0/24 maxlen: 24
188.220.163.0/24 maxlen: 24
188.220.211.0/24 maxlen: 24
188.220.234.0/24 maxlen: 24
188.221.9.0/24 maxlen: 24
188.221.29.0/24 maxlen: 24
188.221.65.0/24 maxlen: 24
188.221.100.0/24 maxlen: 24
188.221.107.0/24 maxlen: 24
188.221.128.0/24 maxlen: 24
188.221.160.0/24 maxlen: 24
188.221.198.0/24 maxlen: 24
188.221.221.0/24 maxlen: 24
188.221.225.0/24 maxlen: 24
188.221.239.0/24 maxlen: 24
188.221.243.0/24 maxlen: 24
188.221.246.0/24 maxlen: 24
188.221.252.0/24 maxlen: 24
188.223.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f8:cb:31:59:46:b0:20:3b:1c:10:f5:74:1d:c4:d6:55:ef:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 31 09:39:18 2026 GMT
Not After : Aug 30 09:44:18 2027 GMT
Subject: CN=4D2D20FEA4F6B522DA225D5D58B3CD4CC2906C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:69:b3:99:0f:2a:fb:b3:56:19:8f:1e:10:
26:04:a5:0f:5a:89:b4:bb:f7:aa:d6:e6:f3:d7:9e:
e8:1a:a9:aa:7c:bb:6a:61:27:c0:b7:a2:03:fd:c1:
49:fb:9a:fd:d1:66:e7:b0:dc:cd:e9:98:5d:09:1f:
cf:e9:02:d7:52:dc:85:f7:47:e6:ec:93:bd:05:e0:
b1:01:bc:48:2a:21:a7:b5:df:b2:25:c9:e3:91:d9:
21:ec:6f:85:ba:e4:12:e0:cf:e7:8b:cb:68:15:3b:
37:c2:5f:d2:ad:fb:86:da:5d:9c:78:4a:95:d2:76:
76:6c:55:6f:a3:ce:8a:11:72:94:08:c1:71:d5:71:
37:c3:07:3d:4c:6f:44:af:c7:a9:f2:05:c4:d8:49:
47:98:df:41:2a:f2:a6:f3:e8:f2:87:85:c0:a3:7d:
f2:f5:c7:37:62:88:57:b3:1e:a6:c9:c8:c6:e5:e0:
6d:e4:5c:db:45:3f:06:2f:87:3a:92:50:ed:21:05:
62:60:f1:49:ff:83:41:3f:b4:98:e5:71:cb:6b:43:
8f:0d:af:73:a2:2f:5b:4a:99:a5:51:ff:5c:24:83:
0b:1e:e4:54:fa:03:30:0a:f9:42:b4:44:1a:8c:67:
c1:83:7b:c3:af:96:29:a1:12:48:4c:52:b2:66:9a:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:20:FE:A4:F6:B5:22:DA:22:5D:5D:58:B3:CD:4C:C2:90:6C:00
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.19.0.0/16
51.146.44.0/22
51.146.49.0-51.146.55.255
51.146.128.0/22
51.146.136.0/22
51.146.144.0-51.146.149.255
51.146.160.0/20
51.146.188.0/23
51.146.212.0-51.146.217.255
51.146.224.0/22
51.146.232.0/24
51.194.8.0-51.194.31.255
51.194.69.0/24
51.194.83.0-51.194.85.255
51.241.4.0/24
51.241.6.0/24
51.241.22.0/24
51.241.52.0/24
51.241.73.0/24
51.241.96.0/24
51.241.122.0/24
51.241.126.0/24
51.241.234.0/24
51.241.240.0/22
51.241.252.0/24
78.105.98.0/23
78.105.104.0/21
78.105.119.0/24
78.105.126.0/24
78.105.128.0/21
78.105.148.0/24
78.105.172.0/24
78.105.196.0/24
78.105.215.0/24
78.105.224.0/21
78.105.240.0/23
78.105.245.0/24
78.105.247.0-78.105.255.255
94.195.0.0/16
188.220.153.0/24
188.220.155.0/24
188.220.162.0/23
188.220.211.0/24
188.220.234.0/24
188.221.9.0/24
188.221.29.0/24
188.221.65.0/24
188.221.100.0/24
188.221.107.0/24
188.221.128.0/24
188.221.160.0/24
188.221.198.0/24
188.221.221.0/24
188.221.225.0/24
188.221.239.0/24
188.221.243.0/24
188.221.246.0/24
188.221.252.0/24
188.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:08:0f:e6:66:32:7c:7d:99:02:b0:4a:38:11:ad:27:98:ef:
5a:5b:64:77:93:bb:a0:c2:ca:de:cc:37:7f:46:bf:8c:b1:2b:
93:5d:29:8d:f3:ad:a0:7a:59:25:17:c5:19:35:33:5e:d2:83:
48:81:98:d8:89:24:f0:aa:25:d0:6b:62:be:45:8f:d3:32:0f:
dc:13:fe:7e:6d:34:2c:80:b3:8b:f7:4c:0b:4d:6f:2c:7a:a8:
22:62:c8:d1:d3:b7:75:03:a0:92:69:7a:fc:eb:74:1d:4d:ad:
22:fe:99:c5:23:dc:2c:3c:e3:cf:06:8b:fd:05:2f:c5:74:29:
a7:56:fc:36:9a:69:9c:3f:5e:4a:d4:85:17:08:06:49:66:6b:
7b:49:da:17:c6:f6:10:06:e1:9c:ab:bb:aa:02:45:c5:ae:a1:
7e:55:cd:a0:54:3d:b2:83:d1:b3:67:56:14:5f:f4:2c:7a:84:
4c:d5:89:46:b1:bf:2b:34:30:5e:99:2c:f4:18:12:c8:ca:cd:
a6:ab:17:38:b2:62:32:85:05:c5:24:2b:55:e6:88:12:4c:af:
5a:bf:e4:da:7b:27:4f:7e:6f:37:85:40:8c:ca:45:dd:9e:1e:
9d:04:ff:38:65:e8:e9:28:6b:27:9e:46:76:40:d9:6b:51:e9:
05:c9:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:08 2026 by rpki-client