Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: cznchaz1Zx6KDRJGKPcIAe61baGmc5n59SRIcK2FfLY=
Subject key identifier: 15:85:FD:01:73:93:F8:DD:E4:C5:99:6E:2B:CB:D6:5B:ED:9F:12:BB
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0CE7AF4B43BC4FA0017C808828007FB2818C83B0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
Signing time: Wed 23 Sep 2026 06:11:20 +0000
ROA not before: Wed 23 Sep 2026 06:06:20 +0000
ROA not after: Wed 22 Sep 2027 06:11:20 +0000
asID: 6079
IP address blocks: 51.19.0.0/17 maxlen: 24
51.19.128.0/17 maxlen: 24
51.146.44.0/22 maxlen: 24
51.146.49.0/24 maxlen: 24
51.146.50.0/24 maxlen: 24
51.146.51.0/24 maxlen: 24
51.146.52.0/22 maxlen: 24
51.146.128.0/22 maxlen: 24
51.146.136.0/22 maxlen: 24
51.146.144.0/22 maxlen: 24
51.146.148.0/23 maxlen: 24
51.146.160.0/20 maxlen: 24
51.146.188.0/23 maxlen: 23
51.146.212.0/22 maxlen: 22
51.146.216.0/23 maxlen: 23
51.146.224.0/22 maxlen: 22
51.146.232.0/24 maxlen: 24
51.194.8.0/21 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
51.194.69.0/24 maxlen: 24
51.194.83.0/24 maxlen: 24
51.194.84.0/24 maxlen: 24
51.194.85.0/24 maxlen: 24
51.241.4.0/24 maxlen: 24
51.241.6.0/24 maxlen: 24
51.241.22.0/24 maxlen: 24
51.241.52.0/24 maxlen: 24
51.241.73.0/24 maxlen: 24
51.241.96.0/24 maxlen: 24
51.241.122.0/24 maxlen: 24
51.241.126.0/24 maxlen: 24
51.241.234.0/24 maxlen: 24
51.241.240.0/22 maxlen: 24
51.241.252.0/24 maxlen: 24
78.105.98.0/23 maxlen: 23
78.105.104.0/21 maxlen: 21
78.105.119.0/24 maxlen: 24
78.105.126.0/24 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.148.0/24 maxlen: 24
78.105.172.0/24 maxlen: 24
78.105.196.0/24 maxlen: 24
78.105.215.0/24 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.240.0/24 maxlen: 24
78.105.241.0/24 maxlen: 24
78.105.245.0/24 maxlen: 24
78.105.247.0/24 maxlen: 24
78.105.248.0/21 maxlen: 24
94.195.0.0/16 maxlen: 24
188.220.153.0/24 maxlen: 24
188.220.155.0/24 maxlen: 24
188.220.162.0/24 maxlen: 24
188.220.163.0/24 maxlen: 24
188.220.211.0/24 maxlen: 24
188.220.234.0/24 maxlen: 24
188.221.9.0/24 maxlen: 24
188.221.29.0/24 maxlen: 24
188.221.65.0/24 maxlen: 24
188.221.100.0/24 maxlen: 24
188.221.107.0/24 maxlen: 24
188.221.128.0/24 maxlen: 24
188.221.160.0/24 maxlen: 24
188.221.198.0/24 maxlen: 24
188.221.221.0/24 maxlen: 24
188.221.225.0/24 maxlen: 24
188.221.239.0/24 maxlen: 24
188.221.243.0/24 maxlen: 24
188.221.246.0/24 maxlen: 24
188.221.252.0/24 maxlen: 24
188.223.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e7:af:4b:43:bc:4f:a0:01:7c:80:88:28:00:7f:b2:81:8c:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 06:06:20 2026 GMT
Not After : Sep 22 06:11:20 2027 GMT
Subject: CN=1585FD017393F8DDE4C5996E2BCBD65BED9F12BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:97:b0:d4:8a:6f:26:aa:93:21:bf:65:c8:
8b:4a:a1:fa:e4:b1:32:0e:89:34:64:ec:69:e9:4c:
a9:f6:0d:f1:5e:6b:b8:e4:0d:00:9b:61:d0:b5:40:
f8:a2:d0:13:cf:33:31:b8:a9:02:e8:a0:4b:cc:8d:
ac:e0:9c:7a:af:97:d1:14:65:be:c1:94:a7:28:c5:
75:fb:ca:40:08:60:7d:d0:ae:04:ae:16:eb:b9:1c:
e4:7f:83:b4:6a:1c:e6:c8:92:e0:57:48:0f:7c:a9:
47:73:b6:ad:6f:b9:cf:d3:c1:ab:c5:a3:6f:17:78:
98:0d:fc:85:00:b2:60:ea:e2:8f:1e:d9:33:80:6e:
be:e4:6e:8b:50:fd:bd:48:fb:6c:7c:2e:0c:ef:02:
8c:0b:f3:4f:74:7f:83:85:c5:5f:f0:62:ce:68:79:
21:24:e9:4a:b4:e5:a1:61:84:48:e5:80:23:21:50:
18:e6:4e:51:16:1a:f4:72:d8:2f:0e:f0:7b:9e:20:
6d:2a:7c:14:73:49:32:25:16:98:d5:f0:87:46:6d:
a4:0c:40:6c:17:6e:a1:31:76:8b:bb:62:e4:bd:dc:
b4:0e:ad:c9:bb:0a:7c:95:e6:64:6d:eb:6b:6f:9e:
99:49:da:a7:d7:a8:02:46:a4:b4:67:1d:58:67:2e:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:FD:01:73:93:F8:DD:E4:C5:99:6E:2B:CB:D6:5B:ED:9F:12:BB
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.19.0.0/16
51.146.44.0/22
51.146.49.0-51.146.55.255
51.146.128.0/22
51.146.136.0/22
51.146.144.0-51.146.149.255
51.146.160.0/20
51.146.188.0/23
51.146.212.0-51.146.217.255
51.146.224.0/22
51.146.232.0/24
51.194.8.0-51.194.31.255
51.194.69.0/24
51.194.83.0-51.194.85.255
51.241.4.0/24
51.241.6.0/24
51.241.22.0/24
51.241.52.0/24
51.241.73.0/24
51.241.96.0/24
51.241.122.0/24
51.241.126.0/24
51.241.234.0/24
51.241.240.0/22
51.241.252.0/24
78.105.98.0/23
78.105.104.0/21
78.105.119.0/24
78.105.126.0/24
78.105.128.0/21
78.105.148.0/24
78.105.172.0/24
78.105.196.0/24
78.105.215.0/24
78.105.224.0/21
78.105.240.0/23
78.105.245.0/24
78.105.247.0-78.105.255.255
94.195.0.0/16
188.220.153.0/24
188.220.155.0/24
188.220.162.0/23
188.220.211.0/24
188.220.234.0/24
188.221.9.0/24
188.221.29.0/24
188.221.65.0/24
188.221.100.0/24
188.221.107.0/24
188.221.128.0/24
188.221.160.0/24
188.221.198.0/24
188.221.221.0/24
188.221.225.0/24
188.221.239.0/24
188.221.243.0/24
188.221.246.0/24
188.221.252.0/24
188.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:4a:ee:6a:95:78:a8:24:e6:17:a5:88:77:c9:74:0e:6a:99:
c2:05:d2:13:38:fc:7a:b4:02:a4:2a:c2:6f:ca:89:b7:5d:0f:
de:6f:d0:b0:a3:f6:00:7e:d8:a5:a4:3c:d6:be:41:4c:25:bc:
34:3b:34:fc:12:56:61:0a:31:90:f1:2a:4e:04:0b:7c:30:04:
3c:68:14:af:5c:62:01:20:51:be:a4:f0:fe:2f:e6:9c:28:4f:
6d:4d:19:0f:af:d5:9e:33:19:20:27:dc:b7:bd:9f:b2:66:b5:
c5:97:5a:bb:ba:ba:19:f5:b8:23:46:be:f5:1d:be:bf:67:41:
a0:fb:43:6f:4e:f1:17:fa:50:33:39:9e:60:81:60:89:32:ab:
0b:27:db:6c:63:86:64:55:96:3c:26:7d:50:ab:fd:a4:80:de:
ce:e3:d5:f0:7e:ca:48:19:a1:f1:1c:75:ee:53:20:fd:7d:8d:
a2:66:5e:bc:51:09:0c:b7:d6:e7:2b:2e:43:e7:09:08:41:8b:
8a:57:d0:6d:ca:29:3e:af:10:73:71:0e:03:35:d5:4f:3f:de:
02:47:99:3c:99:a9:56:27:b2:75:1d:7c:9e:85:55:9d:e5:34:
9f:e0:61:b6:f8:26:c4:ed:b1:1e:f7:34:1f:08:60:e5:fa:c8:
41:23:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:15:09 2026 by rpki-client