Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          jUnscajoe1mo8FMsEnNkR2eW7mIR8cmhq+MiVqIKr9Y=
Subject key identifier:   40:F4:45:1B:74:EE:41:FE:C3:20:B7:A7:AA:D6:76:22:22:86:2F:10
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       1B8C142230D18821D71B5D53EFB6C72ADA1338FA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time:             Fri 14 Aug 2026 00:05:22 +0000
ROA not before:           Fri 14 Aug 2026 00:00:22 +0000
ROA not after:            Fri 13 Aug 2027 00:05:22 +0000
asID:                     6079
IP address blocks:        46.202.200.0/24 maxlen: 24
                          46.202.206.0/24 maxlen: 24
                          46.203.6.0/24 maxlen: 24
                          46.203.107.0/24 maxlen: 24
                          46.203.114.0/24 maxlen: 24
                          46.203.145.0/24 maxlen: 24
                          46.203.146.0/24 maxlen: 24
                          46.203.168.0/24 maxlen: 24
                          46.203.169.0/24 maxlen: 24
                          46.203.171.0/24 maxlen: 24
                          46.203.173.0/24 maxlen: 24
                          46.203.174.0/24 maxlen: 24
                          46.203.177.0/24 maxlen: 24
                          46.203.179.0/24 maxlen: 24
                          91.124.0.0/24 maxlen: 24
                          91.124.2.0/24 maxlen: 24
                          91.124.3.0/24 maxlen: 24
                          91.124.16.0/24 maxlen: 24
                          91.124.59.0/24 maxlen: 24
                          91.124.82.0/24 maxlen: 24
                          91.124.90.0/24 maxlen: 24
                          91.124.180.0/23 maxlen: 24
                          91.124.182.0/23 maxlen: 24
                          91.124.188.0/23 maxlen: 24
                          91.124.190.0/23 maxlen: 24
                          91.124.208.0/24 maxlen: 24
                          91.124.228.0/23 maxlen: 24
                          91.124.230.0/23 maxlen: 24
                          91.124.232.0/23 maxlen: 24
                          91.124.234.0/23 maxlen: 24
                          91.124.242.0/24 maxlen: 24
                          92.112.6.0/24 maxlen: 24
                          92.112.8.0/24 maxlen: 24
                          92.112.55.0/24 maxlen: 24
                          92.112.62.0/24 maxlen: 24
                          92.112.89.0/24 maxlen: 24
                          92.112.111.0/24 maxlen: 24
                          92.112.112.0/24 maxlen: 24
                          92.112.113.0/24 maxlen: 24
                          92.112.114.0/24 maxlen: 24
                          92.112.115.0/24 maxlen: 24
                          92.112.116.0/24 maxlen: 24
                          92.112.117.0/24 maxlen: 24
                          92.112.118.0/24 maxlen: 24
                          92.113.6.0/24 maxlen: 24
                          92.113.15.0/24 maxlen: 24
                          92.113.40.0/24 maxlen: 24
                          92.113.188.0/22 maxlen: 24
                          92.113.200.0/22 maxlen: 24
                          92.113.220.0/22 maxlen: 24
                          95.134.184.0/24 maxlen: 24
                          95.134.204.0/24 maxlen: 24
                          95.134.206.0/24 maxlen: 24
                          95.134.213.0/24 maxlen: 24
                          95.134.220.0/24 maxlen: 24
                          95.134.221.0/24 maxlen: 24
                          95.134.223.0/24 maxlen: 24
                          95.134.228.0/24 maxlen: 24
                          95.134.229.0/24 maxlen: 24
                          95.134.234.0/24 maxlen: 24
                          95.135.72.0/24 maxlen: 24
                          95.135.134.0/24 maxlen: 24
                          95.135.139.0/24 maxlen: 24
                          95.135.140.0/24 maxlen: 24
                          95.135.141.0/24 maxlen: 24
                          95.135.233.0/24 maxlen: 24
                          178.92.80.0/24 maxlen: 24
                          178.92.82.0/24 maxlen: 24
                          178.92.128.0/24 maxlen: 24
                          178.92.129.0/24 maxlen: 24
                          178.92.136.0/24 maxlen: 24
                          178.92.137.0/24 maxlen: 24
                          178.92.142.0/24 maxlen: 24
                          178.92.143.0/24 maxlen: 24
                          178.92.146.0/24 maxlen: 24
                          178.92.147.0/24 maxlen: 24
                          178.92.151.0/24 maxlen: 24
                          178.92.167.0/24 maxlen: 24
                          178.92.171.0/24 maxlen: 24
                          178.92.186.0/24 maxlen: 24
                          178.93.180.0/24 maxlen: 24
                          178.93.187.0/24 maxlen: 24
                          178.93.209.0/24 maxlen: 24
                          178.93.213.0/24 maxlen: 24
                          178.93.216.0/24 maxlen: 24
                          178.93.217.0/24 maxlen: 24
                          178.93.220.0/24 maxlen: 24
                          178.93.246.0/24 maxlen: 24
                          178.93.248.0/24 maxlen: 24
                          178.93.249.0/24 maxlen: 24
                          178.93.250.0/24 maxlen: 24
                          178.93.251.0/24 maxlen: 24
                          178.93.252.0/24 maxlen: 24
                          178.93.253.0/24 maxlen: 24
                          178.94.214.0/24 maxlen: 24
                          178.94.218.0/24 maxlen: 24
                          178.95.73.0/24 maxlen: 24
                          178.95.76.0/24 maxlen: 24
                          178.95.122.0/24 maxlen: 24
                          178.95.139.0/24 maxlen: 24
                          178.95.147.0/24 maxlen: 24
                          178.95.180.0/22 maxlen: 24
                          178.95.212.0/22 maxlen: 22
                          178.95.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8c:14:22:30:d1:88:21:d7:1b:5d:53:ef:b6:c7:2a:da:13:38:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Aug 14 00:00:22 2026 GMT
            Not After : Aug 13 00:05:22 2027 GMT
        Subject: CN=40F4451B74EE41FEC320B7A7AAD6762222862F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b5:5e:71:fc:5f:4f:91:88:68:46:fd:4a:90:
                    7d:89:48:a9:10:9a:22:b3:4b:c4:93:31:c2:4d:fe:
                    75:ab:1a:01:d6:c4:da:d9:86:a4:2d:1c:4d:bc:87:
                    71:a0:99:a3:89:08:7f:26:58:81:39:c6:0e:78:e6:
                    7f:65:ea:dd:9c:36:8e:1c:37:f7:55:51:1d:bc:50:
                    d2:b0:b2:2e:0e:12:ba:f2:db:3f:57:eb:1e:81:29:
                    a3:70:1f:f2:12:bf:06:e0:b4:17:9c:bd:98:f7:d8:
                    73:63:84:2d:60:35:a8:54:c1:3c:c0:33:2a:9d:92:
                    13:35:71:18:6b:54:48:a0:ca:80:76:5f:ae:cb:05:
                    3f:8f:df:fd:2d:c3:22:ea:b9:f7:05:37:8e:c7:99:
                    f5:a7:5c:6c:a3:86:9e:cc:91:fa:17:2a:17:a3:f2:
                    83:cc:f8:c6:72:0c:40:69:ca:41:80:da:38:b3:54:
                    b4:c6:48:24:d6:23:5f:0f:a8:5b:88:18:c5:e2:0c:
                    dc:d3:16:e9:30:0d:a1:0e:24:5f:55:58:9f:ff:bf:
                    f9:16:14:32:23:8b:fa:8d:d0:e1:e1:53:c9:21:dd:
                    22:df:67:43:85:fc:7f:35:12:af:a2:f7:12:ba:f7:
                    50:1e:f1:36:d6:6e:27:0f:4f:1b:2f:3a:dc:15:fc:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F4:45:1B:74:EE:41:FE:C3:20:B7:A7:AA:D6:76:22:22:86:2F:10
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.200.0/24
                  46.202.206.0/24
                  46.203.6.0/24
                  46.203.107.0/24
                  46.203.114.0/24
                  46.203.145.0-46.203.146.255
                  46.203.168.0/23
                  46.203.171.0/24
                  46.203.173.0-46.203.174.255
                  46.203.177.0/24
                  46.203.179.0/24
                  91.124.0.0/24
                  91.124.2.0/23
                  91.124.16.0/24
                  91.124.59.0/24
                  91.124.82.0/24
                  91.124.90.0/24
                  91.124.180.0/22
                  91.124.188.0/22
                  91.124.208.0/24
                  91.124.228.0-91.124.235.255
                  91.124.242.0/24
                  92.112.6.0/24
                  92.112.8.0/24
                  92.112.55.0/24
                  92.112.62.0/24
                  92.112.89.0/24
                  92.112.111.0-92.112.118.255
                  92.113.6.0/24
                  92.113.15.0/24
                  92.113.40.0/24
                  92.113.188.0/22
                  92.113.200.0/22
                  92.113.220.0/22
                  95.134.184.0/24
                  95.134.204.0/24
                  95.134.206.0/24
                  95.134.213.0/24
                  95.134.220.0/23
                  95.134.223.0/24
                  95.134.228.0/23
                  95.134.234.0/24
                  95.135.72.0/24
                  95.135.134.0/24
                  95.135.139.0-95.135.141.255
                  95.135.233.0/24
                  178.92.80.0/24
                  178.92.82.0/24
                  178.92.128.0/23
                  178.92.136.0/23
                  178.92.142.0/23
                  178.92.146.0/23
                  178.92.151.0/24
                  178.92.167.0/24
                  178.92.171.0/24
                  178.92.186.0/24
                  178.93.180.0/24
                  178.93.187.0/24
                  178.93.209.0/24
                  178.93.213.0/24
                  178.93.216.0/23
                  178.93.220.0/24
                  178.93.246.0/24
                  178.93.248.0-178.93.253.255
                  178.94.214.0/24
                  178.94.218.0/24
                  178.95.73.0/24
                  178.95.76.0/24
                  178.95.122.0/24
                  178.95.139.0/24
                  178.95.147.0/24
                  178.95.180.0/22
                  178.95.212.0/22
                  178.95.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:18:fd:c1:e5:39:fa:91:cb:ca:82:29:66:bf:0a:48:8c:c4:
         5d:7c:68:01:a5:db:ad:2e:e8:18:89:a3:88:10:73:da:2b:72:
         6a:21:53:e7:41:5c:38:fd:20:cd:b7:85:3f:80:5a:af:50:5b:
         6d:56:85:06:dc:33:fa:d8:0c:c0:99:2e:1b:5f:8d:3a:92:97:
         4c:f2:5d:ee:e1:c0:dd:21:48:8c:1b:57:e6:6b:67:6d:85:a3:
         ad:e0:4d:83:6d:7f:c3:ae:85:b1:33:ca:a1:10:aa:53:bb:4f:
         c0:48:ff:13:d7:37:f4:b3:6c:85:14:93:9e:18:97:68:8d:48:
         da:51:3e:25:0c:50:e5:f6:40:9b:2b:e3:7d:ee:49:c3:ce:70:
         d5:a1:e3:82:a8:73:4b:1f:ad:6b:27:25:36:3b:2b:14:10:db:
         8d:3b:f2:16:8d:ad:b2:fc:05:e8:86:d9:fe:29:fe:c6:31:03:
         9d:71:f2:5f:cb:af:dd:02:d4:5b:49:00:4d:7e:89:d4:73:02:
         d3:34:0b:d1:ff:9e:92:4f:b0:85:5e:b5:6c:05:df:f8:6b:a8:
         10:64:79:7f:9a:f9:ef:15:92:c4:81:49:88:cb:8b:20:9e:28:
         f8:00:30:93:96:c2:98:a9:79:98:3e:1c:15:61:f9:4f:c9:ca:
         64:cf:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:14:18 2026 by rpki-client