Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: WYVul34mR4Jq7n6CsLJP5xPN30e4/YS3nxGcFu1iLb4=
Subject key identifier: 09:08:3F:DC:88:25:22:6C:65:0E:78:1B:E2:A1:D6:EB:BE:97:34:B2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 44BB2D9E9ED73FCC49F5EF3603D5610434F8E1C6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Fri 26 Sep 2025 17:09:14 +0000
ROA not before: Fri 26 Sep 2025 17:04:14 +0000
ROA not after: Fri 25 Sep 2026 17:09:14 +0000
asID: 6079
IP address blocks: 96.62.103.0/24 maxlen: 24
96.62.217.0/24 maxlen: 24
96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
96.62.249.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.16.0/21 maxlen: 24
146.103.52.0/24 maxlen: 24
146.103.53.0/24 maxlen: 24
150.241.254.0/24 maxlen: 24
155.117.22.0/24 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
155.117.97.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
155.117.105.0/24 maxlen: 24
155.117.106.0/24 maxlen: 24
155.117.109.0/24 maxlen: 24
155.117.110.0/24 maxlen: 24
155.117.111.0/24 maxlen: 24
155.117.115.0/24 maxlen: 24
155.117.116.0/24 maxlen: 24
155.117.118.0/24 maxlen: 24
155.117.140.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
155.117.149.0/24 maxlen: 24
155.117.156.0/24 maxlen: 24
155.117.169.0/24 maxlen: 24
155.117.190.0/24 maxlen: 24
155.117.195.0/24 maxlen: 24
155.117.196.0/24 maxlen: 24
155.117.198.0/23 maxlen: 23
155.117.204.0/24 maxlen: 24
155.117.206.0/24 maxlen: 24
155.117.222.0/24 maxlen: 24
155.117.244.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.139.0/24 maxlen: 24
167.148.144.0/24 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.186.0/24 maxlen: 24
167.148.212.0/24 maxlen: 24
167.148.214.0/24 maxlen: 24
167.148.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bb:2d:9e:9e:d7:3f:cc:49:f5:ef:36:03:d5:61:04:34:f8:e1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 26 17:04:14 2025 GMT
Not After : Sep 25 17:09:14 2026 GMT
Subject: CN=09083FDC8825226C650E781BE2A1D6EBBE9734B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:b0:82:74:fc:bf:25:1e:40:0f:39:b6:a6:
33:fc:3e:64:a3:10:6e:1e:96:a3:86:b1:5d:ad:5a:
42:ae:d3:b6:1c:26:73:66:36:e1:17:9d:a0:f2:64:
3b:fe:90:42:9b:03:8c:4a:49:97:d3:f0:36:38:f3:
23:a8:26:67:01:b9:d6:e1:e0:38:d7:26:a5:dc:2e:
53:92:60:0b:60:26:58:76:77:17:74:a7:6a:b7:be:
af:2d:ee:83:26:6f:61:2f:63:66:35:02:10:67:0b:
c2:02:16:82:94:e6:88:34:58:b8:a9:bb:d7:54:28:
a6:6b:db:56:c0:89:b8:30:0e:c2:7b:dd:b0:2b:e7:
4c:43:c1:0a:69:53:45:4f:2b:35:b3:29:09:42:23:
d1:24:5f:e4:14:61:f1:69:e6:81:d3:15:7e:bb:ee:
94:fb:00:8d:7c:f9:e7:a9:8e:65:2a:18:74:41:10:
c7:f9:05:17:86:61:12:62:83:56:2d:84:11:6e:ed:
bd:74:ea:5c:98:61:e8:8f:e4:b2:69:68:d0:e4:9c:
d8:fe:d2:91:b7:91:93:2b:b0:ac:a6:b1:f4:55:a7:
5c:82:78:14:f4:f6:7f:38:f4:c4:21:ca:af:99:43:
fd:99:aa:cc:64:88:72:97:7d:0a:5d:a3:e1:fd:d0:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:3F:DC:88:25:22:6C:65:0E:78:1B:E2:A1:D6:EB:BE:97:34:B2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.103.0/24
96.62.217.0/24
96.62.227.0/24
96.62.248.0/23
140.150.160.0/20
140.233.192.0/18
143.14.16.0/21
146.103.52.0/23
150.241.254.0/24
155.117.22.0/23
155.117.86.0/24
155.117.97.0/24
155.117.102.0/24
155.117.105.0-155.117.106.255
155.117.109.0-155.117.111.255
155.117.115.0-155.117.116.255
155.117.118.0/24
155.117.140.0/23
155.117.149.0/24
155.117.156.0/24
155.117.169.0/24
155.117.190.0/24
155.117.195.0-155.117.196.255
155.117.198.0/23
155.117.204.0/24
155.117.206.0/24
155.117.222.0/24
155.117.244.0/24
167.148.44.0/23
167.148.139.0/24
167.148.144.0/23
167.148.186.0/24
167.148.212.0/24
167.148.214.0/23
Signature Algorithm: sha256WithRSAEncryption
39:9e:26:05:21:b3:88:aa:ae:03:85:e2:5a:15:2a:ab:01:19:
4a:54:70:34:6c:1c:03:03:ee:9f:6e:39:7c:5e:9f:74:e4:79:
26:94:8d:5f:cd:e7:ca:6d:6f:80:70:eb:24:8d:8f:1b:84:49:
41:b3:bc:05:d7:cb:30:03:d8:8b:13:53:3a:c5:9f:95:c7:25:
e9:13:6f:4a:0b:de:82:9d:5c:64:3e:85:0e:34:58:ac:a1:2a:
ec:0c:df:b7:0c:27:ab:df:4d:7f:e3:02:e7:9e:16:f2:14:66:
bb:ae:4c:5a:32:08:68:6f:75:5a:e8:c5:ad:a5:26:1a:78:24:
06:f4:b4:4e:cf:2a:03:e5:eb:cf:e1:6a:6a:e4:ca:d5:9c:6e:
d3:97:73:11:d9:62:a3:da:bf:b3:0e:dc:ab:e5:66:fd:f4:fc:
da:2c:d0:ee:96:4f:7b:b8:bc:23:93:c8:72:b5:5a:cd:68:70:
6b:fd:c6:be:c3:9b:9d:3e:01:7c:c5:31:89:c6:b2:71:b2:f5:
c0:0b:ef:7e:ab:de:69:f1:2d:42:71:76:a2:52:9e:c4:d7:a4:
22:0b:ad:a1:3e:80:9f:73:b8:0c:23:41:4e:b0:d1:8e:eb:60:
01:a5:b5:93:01:cd:6a:09:86:ac:6c:c1:93:ee:d3:e5:0f:e3:
be:a4:7e:98
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgIURLstnp7XP8xJ9e82A9VhBDT44cYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA5MjYxNzA0MTRaFw0yNjA5MjUxNzA5MTRaMDMxMTAvBgNV
BAMTKDA5MDgzRkRDODgyNTIyNkM2NTBFNzgxQkUyQTFENkVCQkU5NzM0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdLCCdPy/JR5ADzm2pjP8PmSj
EG4elqOGsV2tWkKu07YcJnNmNuEXnaDyZDv+kEKbA4xKSZfT8DY48yOoJmcBudbh
4DjXJqXcLlOSYAtgJlh2dxd0p2q3vq8t7oMmb2EvY2Y1AhBnC8ICFoKU5og0WLip
u9dUKKZr21bAibgwDsJ73bAr50xDwQppU0VPKzWzKQlCI9EkX+QUYfFp5oHTFX67
7pT7AI18+eepjmUqGHRBEMf5BReGYRJig1YthBFu7b106lyYYeiP5LJpaNDknNj+
0pG3kZMrsKymsfRVp1yCeBT09n849MQhyq+ZQ/2ZqsxkiHKXfQpdo+H90J7bAgMB
AAGjggL0MIIC8DAdBgNVHQ4EFgQUCQg/3IglImxlDngb4qHW676XNLIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAQkGCCsGAQUFBwEHAQH/BIH5MIH2MIHzBAIAATCB7AME
AGA+ZwMEAGA+2QMEAGA+4wMEAWA++AMEBIyWoAMEBozpwAMEA48OEAMEAZJnNAME
AJbx/gMEAZt1FgMEAJt1VgMEAJt1YQMEAJt1ZjAMAwQAm3VpAwQAm3VqMAwDBACb
dW0DBASbdWAwDAMEAJt1cwMEAJt1dAMEAJt1dgMEAZt1jAMEAJt1lQMEAJt1nAME
AJt1qQMEAJt1vjAMAwQAm3XDAwQAm3XEAwQBm3XGAwQAm3XMAwQAm3XOAwQAm3Xe
AwQAm3X0AwQBp5QsAwQAp5SLAwQBp5SQAwQAp5S6AwQAp5TUAwQBp5TWMA0GCSqG
SIb3DQEBCwUAA4IBAQA5niYFIbOIqq4DheJaFSqrARlKVHA0bBwDA+6fbjl8Xp90
5HkmlI1fzefKbW+AcOskjY8bhElBs7wF18swA9iLE1M6xZ+VxyXpE29KC96CnVxk
PoUONFisoSrsDN+3DCer301/4wLnnhbyFGa7rkxaMghob3Va6MWtpSYaeCQG9LRO
zyoD5evP4Wpq5MrVnG7Tl3MR2WKj2r+zDtyr5Wb99PzaLNDulk97uLwjk8hytVrN
aHBr/ca+w5udPgF8xTGJxrJxsvXAC+9+q95p8S1CcXaiUp7E16QiC62hPoCfc7gM
I0FOsNGO62ABpbWTAc1qCYasbMGT7tPlD+O+pH6Y
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:57:06 2025 by rpki-client