Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: wst5DdlScSmggLa5tmTy2ODdhFJyo+SyOQmWD6AKtFk=
Subject key identifier: C4:35:18:3D:8C:DE:D5:68:C1:79:72:25:25:AB:CF:96:4E:73:AC:C5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4C44C5F61A432FA15BCC9570C5E8ED0161DC5D60
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Mon 26 May 2025 00:01:59 +0000
ROA not before: Sun 25 May 2025 23:56:59 +0000
ROA not after: Mon 25 May 2026 00:01:59 +0000
asID: 6079
IP address blocks: 46.203.173.0/24 maxlen: 24
91.124.180.0/23 maxlen: 24
91.124.182.0/23 maxlen: 24
91.124.188.0/23 maxlen: 24
91.124.190.0/23 maxlen: 24
92.113.176.0/22 maxlen: 24
92.113.180.0/22 maxlen: 24
92.113.184.0/22 maxlen: 24
92.113.188.0/22 maxlen: 24
92.113.192.0/22 maxlen: 24
92.113.196.0/22 maxlen: 24
92.113.200.0/22 maxlen: 24
92.113.204.0/22 maxlen: 24
92.113.208.0/22 maxlen: 24
92.113.216.0/22 maxlen: 24
92.113.220.0/22 maxlen: 24
92.113.248.0/22 maxlen: 24
92.113.252.0/22 maxlen: 24
95.134.164.0/22 maxlen: 24
95.135.134.0/24 maxlen: 24
95.135.139.0/24 maxlen: 24
95.135.140.0/24 maxlen: 24
95.135.141.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
178.95.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:44:c5:f6:1a:43:2f:a1:5b:cc:95:70:c5:e8:ed:01:61:dc:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 25 23:56:59 2025 GMT
Not After : May 25 00:01:59 2026 GMT
Subject: CN=C435183D8CDED568C179722525ABCF964E73ACC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:3a:47:c5:c5:1e:f0:2d:de:fa:7a:e1:14:
f8:51:53:be:96:22:98:de:30:73:9b:25:05:f7:01:
66:e8:00:5c:77:17:b0:d0:7b:7f:ca:ce:20:0e:0f:
6a:43:eb:55:cd:fa:d2:f6:4f:e1:93:c5:ac:61:b7:
8d:9b:2e:64:73:60:1c:af:07:d6:7c:35:4d:27:c6:
4f:97:57:72:98:16:7c:dd:2d:ed:1b:c4:3f:6b:b6:
4a:7c:61:26:3c:e8:56:c6:95:ee:92:7e:de:b6:0a:
f8:e7:e8:ad:39:d8:13:dc:5d:af:8e:1f:b6:bb:17:
a4:40:ff:3d:fc:84:9c:1b:fe:f2:49:7d:fa:8f:0e:
7e:8c:9f:fb:0c:49:b9:62:12:92:ce:5e:74:71:50:
65:35:44:9b:05:fa:e5:de:85:82:bb:be:60:cf:a6:
8d:9c:00:59:d9:9b:42:91:9f:b3:89:c2:80:e6:08:
53:38:40:5a:7a:b5:0d:d4:7f:d2:10:35:d1:36:c9:
83:55:a6:cc:82:c5:00:1c:43:77:53:33:81:3a:23:
d2:6d:0d:16:0b:26:5b:57:a3:94:40:93:85:30:aa:
f2:6c:4c:ca:ce:09:9d:65:39:5d:95:92:03:31:2e:
49:70:f5:8c:12:77:7e:db:9a:31:31:c0:87:ed:7b:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:18:3D:8C:DE:D5:68:C1:79:72:25:25:AB:CF:96:4E:73:AC:C5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.173.0/24
91.124.180.0/22
91.124.188.0/22
92.113.176.0-92.113.211.255
92.113.216.0/21
92.113.248.0/21
95.134.164.0/22
95.135.134.0/24
95.135.139.0-95.135.141.255
95.135.233.0/24
178.95.255.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e8:1f:29:8b:28:e3:f6:db:22:da:be:31:e2:aa:eb:a1:11:
b0:a9:1a:99:08:17:2e:8b:4b:b5:d0:59:c2:ff:e0:08:c4:00:
85:65:35:2d:21:b0:24:c5:bf:07:64:d0:f0:55:e4:cb:9d:67:
7a:6d:ab:01:3b:81:44:a3:46:2d:78:2a:5c:cf:b3:3b:75:db:
22:44:20:39:f0:69:1c:7b:e8:55:80:72:0a:f7:cb:ec:53:cf:
d6:6b:d3:cc:2f:48:f8:dc:44:41:19:1e:41:27:8e:ec:75:f8:
f1:d9:d0:94:1a:ad:ad:8b:49:43:0c:30:19:48:a5:a1:c5:fd:
64:20:94:73:01:1b:6d:8b:ff:43:49:02:8f:15:1c:00:db:c2:
67:73:2a:dd:9c:2e:86:17:0f:63:42:48:a1:da:f8:39:d9:1b:
1f:d2:b0:1a:a5:05:c7:9d:d7:10:22:4c:cd:da:f6:ff:24:eb:
6d:56:a2:a6:cd:e3:24:97:f2:0f:59:c1:20:69:5d:c5:0b:4d:
ae:d9:c4:4d:0e:9b:db:6e:65:48:7d:79:42:57:f3:4e:72:cd:
af:5e:8b:9e:16:68:d1:7e:a5:6a:22:a0:ec:8f:61:91:30:95:
8f:9a:c1:bc:54:d5:9e:35:c1:b9:c6:68:3c:ee:0e:b8:48:1c:
09:d3:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:12:07 2025 by rpki-client