Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: MuO7pElGNKA5XoNc3xcLIc312o9uhH4IDDzFy7mLL8g=
Subject key identifier: A4:0F:16:CC:A7:9C:57:B5:13:92:2D:13:2D:DD:F5:67:96:CC:8B:21
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5CC613A39286650A6A40392426F01E076E9EFB14
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Thu 21 Aug 2025 14:36:54 +0000
ROA not before: Thu 21 Aug 2025 14:31:54 +0000
ROA not after: Thu 20 Aug 2026 14:36:54 +0000
asID: 6079
IP address blocks: 96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
96.62.249.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.16.0/21 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.110.0/24 maxlen: 24
155.117.111.0/24 maxlen: 24
155.117.115.0/24 maxlen: 24
155.117.116.0/24 maxlen: 24
155.117.140.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.156.0/24 maxlen: 24
155.117.169.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.198.0/23 maxlen: 23
155.117.204.0/24 maxlen: 24
155.117.206.0/24 maxlen: 24
155.117.222.0/24 maxlen: 24
155.117.242.0/24 maxlen: 24
155.117.244.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.139.0/24 maxlen: 24
167.148.144.0/24 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.186.0/24 maxlen: 24
167.148.212.0/24 maxlen: 24
167.148.214.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c6:13:a3:92:86:65:0a:6a:40:39:24:26:f0:1e:07:6e:9e:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 14:31:54 2025 GMT
Not After : Aug 20 14:36:54 2026 GMT
Subject: CN=A40F16CCA79C57B513922D132DDDF56796CC8B21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:ee:cf:ef:71:fe:16:d8:d1:ad:9d:ab:b2:
43:88:60:09:a9:bd:95:15:4d:6d:9b:8a:94:02:6f:
24:70:d7:43:a5:d3:6f:b0:1f:73:ba:ee:c8:2c:6f:
f7:b4:0e:69:11:03:1d:bf:d3:a3:1a:f1:3e:62:b8:
b1:ec:02:ca:69:eb:af:cd:9e:11:4a:d5:5e:f1:12:
ad:12:67:1f:93:84:5e:f6:d4:ec:14:87:d7:4d:c0:
45:ad:ec:b7:e4:12:fd:69:5c:20:37:4b:98:6c:74:
94:44:17:0c:92:70:73:e2:df:4d:c2:3b:d6:4f:56:
a4:9f:4b:b7:99:63:cf:74:57:29:e6:b7:22:b5:1c:
fc:27:9c:c6:6f:e0:03:08:c0:3d:a5:6e:d0:2e:9b:
05:5c:bb:52:e9:bd:0a:de:84:83:9b:8a:d9:eb:0f:
ae:5b:3c:21:64:5a:6f:9b:68:f9:8c:6e:22:60:2e:
18:9a:2d:6b:2f:4e:dc:19:f2:4e:9b:f2:76:28:8d:
5b:ea:47:10:20:91:8d:77:96:c8:5e:3c:73:c8:86:
a0:45:b2:e6:4b:e4:ca:a3:ec:b7:c8:06:40:3f:05:
fa:8e:8d:bd:3b:72:f4:5d:ac:92:3a:ea:7d:e6:20:
26:b1:06:63:d8:10:1d:9a:17:57:25:e4:2f:a9:38:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0F:16:CC:A7:9C:57:B5:13:92:2D:13:2D:DD:F5:67:96:CC:8B:21
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.227.0/24
96.62.248.0/23
140.150.160.0/20
140.233.192.0/18
143.14.16.0/21
155.117.109.0-155.117.111.255
155.117.115.0-155.117.116.255
155.117.140.0/23
155.117.149.0/24
155.117.156.0/24
155.117.169.0/24
155.117.190.0/24
155.117.198.0/23
155.117.204.0/24
155.117.206.0/24
155.117.222.0/24
155.117.242.0/24
155.117.244.0/24
167.148.44.0/23
167.148.139.0/24
167.148.144.0/23
167.148.186.0/24
167.148.212.0/24
167.148.214.0/23
Signature Algorithm: sha256WithRSAEncryption
27:10:df:b0:58:6e:00:19:41:a0:cb:ab:01:35:b6:95:e6:35:
1f:e3:0a:f7:dd:ae:2c:4d:cf:e6:3e:69:8e:f8:a9:f1:fd:d5:
df:02:a7:f8:3e:17:f8:a8:da:89:8c:62:85:47:34:83:2c:e9:
b2:d9:9b:5e:b9:aa:45:4d:68:0e:ae:7c:55:9d:46:f0:ff:1d:
d7:b9:4a:4b:c7:31:b4:9f:bc:74:26:03:96:dd:43:0e:ba:ee:
27:38:9f:2e:04:e3:3a:24:d1:a4:40:81:d6:4e:d7:b3:73:7b:
ed:ef:d1:4b:1a:55:8e:03:d8:9e:43:4e:77:1d:b1:e7:98:0d:
b0:68:27:b5:5b:16:5b:6a:36:e0:f7:b3:47:77:1d:1d:45:94:
d9:62:ac:53:37:9f:5d:a3:29:3f:1c:de:2a:dc:59:b7:0d:d7:
35:41:54:e6:8c:19:6b:1c:99:3e:e2:a5:49:1c:3f:94:f4:33:
64:35:59:42:8d:93:a5:58:14:57:74:ae:88:24:e6:91:3d:49:
b8:32:7c:48:a1:c5:dd:f1:84:74:98:5b:f1:0a:bb:b6:53:4a:
8d:5d:dc:e5:ec:02:fd:4a:8e:9e:c5:6c:95:29:5b:c0:3b:d8:
3e:c1:60:ee:4c:e0:50:66:21:d5:96:c3:09:fa:43:42:24:30:
fc:f9:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:40 2025 by rpki-client