Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          Rw3n6RFfd55oAy2/vWjpnmekl0AB+qZNjX/4NYvkdjI=
Subject key identifier:   B9:14:6C:51:08:9A:13:0F:95:81:94:0B:13:71:E5:6F:E8:DD:10:E1
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       361CFF84C2AE96B676EC8BEEC704E9D2572D0860
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time:             Fri 20 Mar 2026 04:50:44 +0000
ROA not before:           Fri 20 Mar 2026 04:45:44 +0000
ROA not after:            Fri 19 Mar 2027 04:50:44 +0000
asID:                     6079
IP address blocks:        46.202.200.0/24 maxlen: 24
                          46.202.206.0/24 maxlen: 24
                          46.203.6.0/24 maxlen: 24
                          46.203.107.0/24 maxlen: 24
                          46.203.114.0/24 maxlen: 24
                          46.203.145.0/24 maxlen: 24
                          46.203.146.0/24 maxlen: 24
                          46.203.168.0/24 maxlen: 24
                          46.203.169.0/24 maxlen: 24
                          46.203.171.0/24 maxlen: 24
                          46.203.173.0/24 maxlen: 24
                          46.203.174.0/24 maxlen: 24
                          46.203.177.0/24 maxlen: 24
                          46.203.179.0/24 maxlen: 24
                          46.203.249.0/24 maxlen: 24
                          91.124.0.0/24 maxlen: 24
                          91.124.2.0/24 maxlen: 24
                          91.124.3.0/24 maxlen: 24
                          91.124.16.0/24 maxlen: 24
                          91.124.59.0/24 maxlen: 24
                          91.124.82.0/24 maxlen: 24
                          91.124.90.0/24 maxlen: 24
                          91.124.180.0/23 maxlen: 24
                          91.124.182.0/23 maxlen: 24
                          91.124.188.0/23 maxlen: 24
                          91.124.190.0/23 maxlen: 24
                          91.124.208.0/24 maxlen: 24
                          91.124.228.0/23 maxlen: 24
                          91.124.230.0/23 maxlen: 24
                          91.124.232.0/23 maxlen: 24
                          91.124.234.0/23 maxlen: 24
                          91.124.242.0/24 maxlen: 24
                          92.112.6.0/24 maxlen: 24
                          92.112.7.0/24 maxlen: 24
                          92.112.8.0/24 maxlen: 24
                          92.112.55.0/24 maxlen: 24
                          92.112.62.0/24 maxlen: 24
                          92.112.89.0/24 maxlen: 24
                          92.112.111.0/24 maxlen: 24
                          92.112.112.0/24 maxlen: 24
                          92.112.113.0/24 maxlen: 24
                          92.112.114.0/24 maxlen: 24
                          92.112.115.0/24 maxlen: 24
                          92.112.116.0/24 maxlen: 24
                          92.112.117.0/24 maxlen: 24
                          92.112.118.0/24 maxlen: 24
                          92.112.142.0/24 maxlen: 24
                          92.113.6.0/24 maxlen: 24
                          92.113.15.0/24 maxlen: 24
                          92.113.40.0/24 maxlen: 24
                          92.113.188.0/22 maxlen: 24
                          92.113.200.0/22 maxlen: 24
                          92.113.220.0/22 maxlen: 24
                          95.134.184.0/24 maxlen: 24
                          95.134.204.0/24 maxlen: 24
                          95.134.206.0/24 maxlen: 24
                          95.134.221.0/24 maxlen: 24
                          95.134.223.0/24 maxlen: 24
                          95.135.72.0/24 maxlen: 24
                          95.135.134.0/24 maxlen: 24
                          95.135.139.0/24 maxlen: 24
                          95.135.140.0/24 maxlen: 24
                          95.135.141.0/24 maxlen: 24
                          95.135.233.0/24 maxlen: 24
                          178.92.69.0/24 maxlen: 24
                          178.92.151.0/24 maxlen: 24
                          178.92.167.0/24 maxlen: 24
                          178.92.171.0/24 maxlen: 24
                          178.92.186.0/24 maxlen: 24
                          178.92.228.0/24 maxlen: 24
                          178.93.180.0/24 maxlen: 24
                          178.93.187.0/24 maxlen: 24
                          178.93.209.0/24 maxlen: 24
                          178.93.220.0/24 maxlen: 24
                          178.95.23.0/24 maxlen: 24
                          178.95.73.0/24 maxlen: 24
                          178.95.76.0/24 maxlen: 24
                          178.95.109.0/24 maxlen: 24
                          178.95.122.0/24 maxlen: 24
                          178.95.135.0/24 maxlen: 24
                          178.95.139.0/24 maxlen: 24
                          178.95.147.0/24 maxlen: 24
                          178.95.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1c:ff:84:c2:ae:96:b6:76:ec:8b:ee:c7:04:e9:d2:57:2d:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Mar 20 04:45:44 2026 GMT
            Not After : Mar 19 04:50:44 2027 GMT
        Subject: CN=B9146C51089A130F9581940B1371E56FE8DD10E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:3b:5f:4b:98:10:b0:a7:2f:34:69:d5:d7:
                    7a:c7:05:22:8c:d7:7f:c0:39:58:aa:42:58:28:37:
                    3b:82:93:b6:b7:5e:53:3f:28:5e:75:e3:c0:1f:e6:
                    cd:c3:c2:c3:d0:d7:a5:ff:bf:d5:24:e3:26:ea:86:
                    15:98:17:40:40:12:71:45:ce:a3:88:e3:54:02:d3:
                    12:32:96:1d:32:78:b9:19:f5:60:d7:9b:13:05:83:
                    c1:68:3f:ec:79:be:ea:3d:d7:9a:0b:37:b6:58:33:
                    14:5e:6a:2f:8f:f6:ac:58:3c:ba:59:e6:7f:ce:6b:
                    65:43:d9:71:e2:1c:9d:8b:46:a0:74:ed:bf:a7:24:
                    ec:9b:a3:ef:25:5f:40:0c:4c:bc:e9:78:6d:b6:50:
                    38:e9:65:46:4b:2d:0b:73:dd:c0:aa:59:e8:6b:f9:
                    c6:bd:0d:e9:74:c8:f8:50:7a:b9:f2:2f:25:34:5e:
                    49:cb:78:82:33:25:05:bd:74:0a:62:9d:65:f5:8d:
                    f3:a7:d0:5c:7b:4d:70:ac:8c:8d:41:aa:61:3e:8f:
                    5c:ce:be:5d:75:48:7a:a8:a4:90:f2:ec:8c:96:c1:
                    99:e7:8e:64:a5:b2:3e:42:6c:64:04:c2:81:97:32:
                    80:e8:8e:bc:df:83:c4:33:57:8f:a8:a8:ab:2c:40:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:6C:51:08:9A:13:0F:95:81:94:0B:13:71:E5:6F:E8:DD:10:E1
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.200.0/24
                  46.202.206.0/24
                  46.203.6.0/24
                  46.203.107.0/24
                  46.203.114.0/24
                  46.203.145.0-46.203.146.255
                  46.203.168.0/23
                  46.203.171.0/24
                  46.203.173.0-46.203.174.255
                  46.203.177.0/24
                  46.203.179.0/24
                  46.203.249.0/24
                  91.124.0.0/24
                  91.124.2.0/23
                  91.124.16.0/24
                  91.124.59.0/24
                  91.124.82.0/24
                  91.124.90.0/24
                  91.124.180.0/22
                  91.124.188.0/22
                  91.124.208.0/24
                  91.124.228.0-91.124.235.255
                  91.124.242.0/24
                  92.112.6.0-92.112.8.255
                  92.112.55.0/24
                  92.112.62.0/24
                  92.112.89.0/24
                  92.112.111.0-92.112.118.255
                  92.112.142.0/24
                  92.113.6.0/24
                  92.113.15.0/24
                  92.113.40.0/24
                  92.113.188.0/22
                  92.113.200.0/22
                  92.113.220.0/22
                  95.134.184.0/24
                  95.134.204.0/24
                  95.134.206.0/24
                  95.134.221.0/24
                  95.134.223.0/24
                  95.135.72.0/24
                  95.135.134.0/24
                  95.135.139.0-95.135.141.255
                  95.135.233.0/24
                  178.92.69.0/24
                  178.92.151.0/24
                  178.92.167.0/24
                  178.92.171.0/24
                  178.92.186.0/24
                  178.92.228.0/24
                  178.93.180.0/24
                  178.93.187.0/24
                  178.93.209.0/24
                  178.93.220.0/24
                  178.95.23.0/24
                  178.95.73.0/24
                  178.95.76.0/24
                  178.95.109.0/24
                  178.95.122.0/24
                  178.95.135.0/24
                  178.95.139.0/24
                  178.95.147.0/24
                  178.95.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:b6:aa:5a:89:a6:e6:34:84:4f:ca:21:f5:5d:64:da:67:
         bc:14:bc:4e:f8:07:99:1d:e4:3b:43:2b:a4:07:c4:19:ae:72:
         8b:5a:c0:ab:48:ef:9e:ff:d3:73:d1:c0:53:7b:90:cb:07:b2:
         70:34:d4:b9:a0:c4:a6:78:65:e2:83:13:55:91:4c:75:5a:e3:
         ab:49:c3:c8:4d:ed:a0:5a:90:42:d8:74:90:d1:7e:7b:44:0c:
         39:ae:84:2e:eb:4d:7b:2a:1f:e4:18:7f:7a:62:cf:ac:b1:22:
         bc:3a:15:d1:dd:52:65:d8:42:49:02:a8:52:0e:d2:38:90:43:
         57:4b:78:ee:be:a6:2d:7b:9d:ec:bd:18:61:78:d0:67:0f:a2:
         c4:84:49:14:5d:bf:4b:22:9a:58:10:3d:74:b2:41:0e:5c:0a:
         67:bd:60:ac:05:a1:8a:07:22:7a:26:bb:49:f7:e1:0a:ef:42:
         cd:48:0f:89:ec:13:8a:6c:a6:e8:92:97:6b:ca:ee:47:54:17:
         67:f3:5f:d6:c8:78:ad:da:ee:8f:22:09:70:f1:2d:39:00:49:
         77:3d:f8:05:6a:ea:d3:c1:08:24:cb:39:31:f2:57:3f:ba:02:
         ea:89:81:ea:f4:b6:b1:8b:c0:f0:76:0f:4f:65:52:4c:91:35:
         bd:3d:ff:83
-----BEGIN CERTIFICATE-----
MIIGrDCCBZSgAwIBAgIUNhz/hMKulrZ27IvuxwTp0lctCGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAzMjAwNDQ1NDRaFw0yNzAzMTkwNDUwNDRaMDMxMTAvBgNV
BAMTKEI5MTQ2QzUxMDg5QTEzMEY5NTgxOTQwQjEzNzFFNTZGRThERDEwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWzztfS5gQsKcvNGnV13rHBSKM
13/AOViqQlgoNzuCk7a3XlM/KF5148Af5s3DwsPQ16X/v9Uk4ybqhhWYF0BAEnFF
zqOI41QC0xIylh0yeLkZ9WDXmxMFg8FoP+x5vuo915oLN7ZYMxReai+P9qxYPLpZ
5n/Oa2VD2XHiHJ2LRqB07b+nJOybo+8lX0AMTLzpeG22UDjpZUZLLQtz3cCqWehr
+ca9Del0yPhQernyLyU0XknLeIIzJQW9dApinWX1jfOn0Fx7TXCsjI1BqmE+j1zO
vl11SHqopJDy7IyWwZnnjmSlsj5CbGQEwoGXMoDojrzfg8QzV4+oqKssQI5RAgMB
AAGjggO2MIIDsjAdBgNVHQ4EFgQUuRRsUQiaEw+VgZQLE3Hlb+jdEOEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAcsGCCsGAQUFBwEHAQH/BIIBujCCAbYwggGyBAIAATCC
AaoDBAAuysgDBAAuys4DBAAuywYDBAAuy2sDBAAuy3IwDAMEAC7LkQMEAC7LkgME
AS7LqAMEAC7LqzAMAwQALsutAwQALsuuAwQALsuxAwQALsuzAwQALsv5AwQAW3wA
AwQBW3wCAwQAW3wQAwQAW3w7AwQAW3xSAwQAW3xaAwQCW3y0AwQCW3y8AwQAW3zQ
MAwDBAJbfOQDBAJbfOgDBABbfPIwDAMEAVxwBgMEAFxwCAMEAFxwNwMEAFxwPgME
AFxwWTAMAwQAXHBvAwQAXHB2AwQAXHCOAwQAXHEGAwQAXHEPAwQAXHEoAwQCXHG8
AwQCXHHIAwQCXHHcAwQAX4a4AwQAX4bMAwQAX4bOAwQAX4bdAwQAX4bfAwQAX4dI
AwQAX4eGMAwDBABfh4sDBAFfh4wDBABfh+kDBACyXEUDBACyXJcDBACyXKcDBACy
XKsDBACyXLoDBACyXOQDBACyXbQDBACyXbsDBACyXdEDBACyXdwDBACyXxcDBACy
X0kDBACyX0wDBACyX20DBACyX3oDBACyX4cDBACyX4sDBACyX5MDBACyX+YwDQYJ
KoZIhvcNAQELBQADggEBACMLtqpaiabmNIRPyiH1XWTaZ7wUvE74B5kd5DtDK6QH
xBmucotawKtI757/03PRwFN7kMsHsnA01LmgxKZ4ZeKDE1WRTHVa46tJw8hN7aBa
kELYdJDRfntEDDmuhC7rTXsqH+QYf3piz6yxIrw6FdHdUmXYQkkCqFIO0jiQQ1dL
eO6+pi17ney9GGF40GcPosSESRRdv0simlgQPXSyQQ5cCme9YKwFoYoHInomu0n3
4QrvQs1ID4nsE4pspuiSl2vK7kdUF2fzX9bIeK3a7o8iCXDxLTkASXc9+AVq6tPB
CCTLOTHyVz+6AuqJger0trGLwPB2D09lUkyRNb09/4M=
-----END CERTIFICATE-----
Generated at Sat Mar 28 02:33:11 2026 by rpki-client