Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: 5BUJ2i/MWT/GUucjsRjY1xgQItKEmYxcSIE6G9hIvcU=
Subject key identifier: DB:BC:E5:FB:46:97:0D:8E:37:A6:DC:D8:19:18:0A:F7:9E:4A:FB:33
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 32ACDFBFBAD74510DA3F212AEE9F8BDC98982FCA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
Signing time: Sat 14 Mar 2026 11:24:06 +0000
ROA not before: Sat 14 Mar 2026 11:19:06 +0000
ROA not after: Sat 13 Mar 2027 11:24:06 +0000
asID: 6079
IP address blocks: 191.101.27.0/24 maxlen: 24
2a03:a960::/29 maxlen: 48
2a0a:7e00::/29 maxlen: 48
2a0a:8600::/29 maxlen: 48
2a0c:fa40::/29 maxlen: 48
2a0d:4b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:18:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ac:df:bf:ba:d7:45:10:da:3f:21:2a:ee:9f:8b:dc:98:98:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 14 11:19:06 2026 GMT
Not After : Mar 13 11:24:06 2027 GMT
Subject: CN=DBBCE5FB46970D8E37A6DCD819180AF79E4AFB33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:e9:17:4f:1d:e8:c2:95:1f:70:3f:c1:76:
a2:69:99:96:25:bd:33:cf:0e:09:db:1e:a0:ac:a7:
9a:c8:48:f1:82:f9:72:07:30:9e:ee:fe:ec:a9:1a:
f0:13:d5:03:e6:8b:54:29:f8:d3:0c:34:d9:d9:94:
dd:11:57:82:d8:3e:5a:2a:f9:14:99:14:03:02:cd:
ef:46:ae:7e:4c:03:d9:77:eb:0c:36:18:f3:1a:4c:
d8:2f:38:84:44:2e:b7:a3:81:66:e1:d5:19:11:1e:
0f:ee:4e:13:72:4b:d4:50:e5:af:d8:75:09:cb:30:
47:3f:de:9b:6a:d3:0a:7d:1f:b9:5d:97:2b:1f:75:
81:b9:de:de:1f:50:b2:ad:8b:7f:e0:8c:9b:04:aa:
08:31:d8:88:b0:25:d3:c4:46:76:6b:58:f7:7c:a3:
af:e1:b9:32:ca:49:ee:1a:51:0d:f7:50:cc:c7:89:
b1:09:8d:75:51:51:d1:f7:56:a5:3f:66:2d:5d:1e:
39:e4:87:cc:58:1f:67:dd:07:bd:70:a2:3a:88:eb:
65:55:72:28:33:7e:00:b4:7d:2a:70:2c:b3:6b:f6:
78:d3:f8:11:02:8f:18:ee:57:12:62:9f:cc:2c:68:
ce:8d:c2:e7:04:5b:06:e5:54:5c:81:2f:66:40:56:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:E5:FB:46:97:0D:8E:37:A6:DC:D8:19:18:0A:F7:9E:4A:FB:33
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.27.0/24
IPv6:
2a03:a960::/29
2a0a:7e00::/29
2a0a:8600::/29
2a0c:fa40::/29
2a0d:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
30:33:30:0a:ed:fb:97:9c:2d:70:5a:c8:19:f3:26:06:64:7a:
6e:49:f9:2a:0f:31:bd:b3:0f:06:b2:40:72:79:ba:f1:bd:84:
e6:ce:a5:7a:d4:89:e7:b3:ed:04:31:8c:23:b0:f5:6a:94:9d:
41:49:d2:eb:18:b9:8f:41:e6:23:b7:52:ed:1f:1a:8c:f4:b2:
5b:51:fb:e5:cc:bb:6d:6d:f7:fe:3a:23:09:68:78:3a:c6:f5:
49:16:c4:92:de:b6:0e:bd:bb:48:0a:bc:60:67:cb:6b:d9:f3:
9a:63:84:e5:bd:9b:ea:7b:bf:00:6a:d4:52:cf:72:0a:b1:01:
9a:bf:7a:f5:2e:2d:e3:d9:37:d5:f2:05:14:7a:e9:cb:24:71:
37:6d:ea:62:b5:92:ae:4d:09:43:31:54:84:3f:8f:00:53:ab:
0e:42:dc:66:69:20:60:ad:6d:d5:0c:6b:d7:92:41:8b:82:54:
6b:c9:6c:25:4b:31:20:20:08:c0:63:3a:da:6a:66:ef:c4:41:
f8:b2:36:15:ab:dd:c4:17:0b:a9:f9:f1:e5:39:b4:96:4c:f6:
1a:cb:1d:f5:0c:39:76:fd:fc:bd:a1:cd:fe:f6:84:86:32:6e:
79:b6:f3:58:b5:a4:16:d5:b9:68:d2:e4:3d:89:99:93:ce:b8:
c6:5a:a3:48
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUMqzfv7rXRRDaPyEq7p+L3JiYL8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAzMTQxMTE5MDZaFw0yNzAzMTMxMTI0MDZaMDMxMTAvBgNV
BAMTKERCQkNFNUZCNDY5NzBEOEUzN0E2RENEODE5MTgwQUY3OUU0QUZCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTukXTx3owpUfcD/BdqJpmZYl
vTPPDgnbHqCsp5rISPGC+XIHMJ7u/uypGvAT1QPmi1Qp+NMMNNnZlN0RV4LYPloq
+RSZFAMCze9Grn5MA9l36ww2GPMaTNgvOIRELrejgWbh1RkRHg/uThNyS9RQ5a/Y
dQnLMEc/3ptq0wp9H7ldlysfdYG53t4fULKti3/gjJsEqggx2IiwJdPERnZrWPd8
o6/huTLKSe4aUQ33UMzHibEJjXVRUdH3VqU/Zi1dHjnkh8xYH2fdB71wojqI62VV
cigzfgC0fSpwLLNr9njT+BECjxjuVxJin8wsaM6NwucEWwblVFyBL2ZAVopFAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU27zl+0aXDY43ptzYGRgK955K+zMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBKBggrBgEFBQcBBwEB/wQ7MDkwDAQCAAEwBgMEAL9lGzAp
BAIAAjAjAwUDKgOpYAMFAyoKfgADBQMqCoYAAwUDKgz6QAMFAyoNS0AwDQYJKoZI
hvcNAQELBQADggEBADAzMArt+5ecLXBayBnzJgZkem5J+SoPMb2zDwayQHJ5uvG9
hObOpXrUieez7QQxjCOw9WqUnUFJ0usYuY9B5iO3Uu0fGoz0sltR++XMu21t9/46
IwloeDrG9UkWxJLetg69u0gKvGBny2vZ85pjhOW9m+p7vwBq1FLPcgqxAZq/evUu
LePZN9XyBRR66cskcTdt6mK1kq5NCUMxVIQ/jwBTqw5C3GZpIGCtbdUMa9eSQYuC
VGvJbCVLMSAgCMBjOtpqZu/EQfiyNhWr3cQXC6n58eU5tJZM9hrLHfUMOXb9/L2h
zf72hIYybnm281i1pBbVuWjS5D2JmZPOuMZao0g=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:24 2026 by rpki-client