Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: UA9oceTKub+RjzSJ8B4f5LhU/IfHptX9Fz37ci6dr2Q=
Subject key identifier: 21:13:53:DA:57:01:F5:1E:95:7F:49:69:2F:EB:42:EA:47:1D:40:82
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4359BC98A74E3C80D7B1EFC54277622E6E26AEAC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Mon 21 Sep 2026 07:41:07 +0000
ROA not before: Mon 21 Sep 2026 07:36:07 +0000
ROA not after: Mon 20 Sep 2027 07:41:07 +0000
asID: 6079
IP address blocks: 86.226.128.0/22 maxlen: 24
86.226.132.0/22 maxlen: 24
86.226.136.0/22 maxlen: 24
86.226.140.0/22 maxlen: 24
86.226.144.0/22 maxlen: 24
86.226.148.0/22 maxlen: 24
86.226.152.0/22 maxlen: 24
86.226.156.0/22 maxlen: 24
86.226.160.0/22 maxlen: 24
86.226.164.0/22 maxlen: 24
86.226.168.0/22 maxlen: 24
86.226.172.0/22 maxlen: 24
86.226.176.0/22 maxlen: 24
86.226.180.0/22 maxlen: 24
86.226.184.0/22 maxlen: 24
86.226.188.0/22 maxlen: 24
86.226.192.0/22 maxlen: 24
86.226.196.0/22 maxlen: 24
86.226.200.0/22 maxlen: 24
86.226.204.0/22 maxlen: 24
86.226.208.0/22 maxlen: 24
86.226.212.0/22 maxlen: 24
86.226.216.0/22 maxlen: 24
86.226.220.0/22 maxlen: 24
86.226.224.0/22 maxlen: 24
86.226.228.0/22 maxlen: 24
86.226.232.0/22 maxlen: 24
86.226.236.0/22 maxlen: 24
86.226.240.0/22 maxlen: 24
86.226.244.0/22 maxlen: 24
86.226.248.0/22 maxlen: 24
86.226.252.0/22 maxlen: 24
143.20.186.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.223.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:59:bc:98:a7:4e:3c:80:d7:b1:ef:c5:42:77:62:2e:6e:26:ae:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 21 07:36:07 2026 GMT
Not After : Sep 20 07:41:07 2027 GMT
Subject: CN=211353DA5701F51E957F49692FEB42EA471D4082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:37:e1:0b:6c:39:ec:10:c0:a0:c2:56:75:
f4:a1:a3:af:65:51:03:d5:a7:77:a0:d9:eb:2d:8a:
66:56:3f:97:88:25:cf:1b:25:a9:3e:b0:fd:b3:b6:
32:1e:28:fa:6e:79:a6:94:d2:5e:cc:0b:09:66:b9:
40:a5:75:d0:bb:81:54:94:ae:1f:73:11:c0:42:cd:
4d:65:03:5f:5f:3f:13:77:3a:da:4f:7d:9f:6d:12:
07:94:34:91:8d:ae:57:45:29:ae:e6:9a:eb:82:de:
5b:52:dc:d0:b3:fb:6c:c9:26:f5:cd:06:04:6c:87:
1d:1c:e2:c4:a3:a2:67:a2:0c:7e:ec:22:84:8a:37:
eb:2e:92:4c:19:44:cf:8b:77:d4:c7:bc:d7:6d:01:
bb:46:7a:be:20:fb:84:9a:b1:ea:fb:89:72:4f:4d:
78:06:3e:e3:57:3a:13:07:8a:42:47:54:84:2d:fb:
dd:09:f2:63:43:db:e9:14:d3:33:70:6d:ec:97:78:
5d:53:7c:49:4b:73:ff:10:58:b6:73:c7:96:32:18:
c2:9e:f0:15:f8:6d:22:86:f7:16:08:1d:1f:66:81:
53:2f:04:fe:b0:93:e0:12:8b:56:93:eb:18:92:11:
17:b0:60:37:76:5a:9e:45:90:60:cd:35:3e:b5:a4:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:53:DA:57:01:F5:1E:95:7F:49:69:2F:EB:42:EA:47:1D:40:82
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.226.128.0/17
143.20.186.0/24
143.20.198.0/24
143.20.211.0/24
143.20.223.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:0e:cb:1e:23:04:f6:36:73:50:21:0b:ba:63:c7:3f:dd:d3:
6f:fe:ab:a9:99:09:18:0e:49:ab:da:38:a4:5d:00:6c:9a:71:
e3:9f:91:66:e8:cd:ee:f4:e6:e7:66:f1:4c:df:74:5d:47:67:
28:90:88:2e:db:69:de:c7:33:84:0f:a2:26:a9:38:a7:e8:35:
fd:3e:8d:40:25:a9:61:ec:df:83:23:ee:6a:c0:0f:e7:60:a7:
44:23:0b:1f:14:62:97:4f:89:a9:4f:ca:ce:03:15:8d:39:83:
07:11:18:cd:31:28:99:e4:8a:5e:5a:6e:50:73:47:04:67:10:
68:4e:a6:71:fd:a0:9e:8f:cb:69:e5:93:b1:7e:d1:97:81:f3:
82:d1:71:78:8c:67:69:4b:0a:ee:bf:80:36:c5:74:4f:6e:3c:
e1:27:1b:10:11:64:4e:1d:91:4d:c6:79:5f:a3:ac:e9:7d:99:
c4:fb:22:e3:fd:0c:02:c3:fe:25:5c:9a:60:d1:26:0d:07:04:
77:4a:42:e1:36:b9:01:db:9a:0c:49:bb:b3:8f:f7:0c:1c:cc:
05:93:ab:df:ec:83:8f:06:24:82:9e:ef:ec:66:66:c2:aa:ce:
b4:fb:52:71:6c:27:03:e2:e3:1c:61:43:9d:7d:48:25:44:11:
57:8c:f7:02
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUQ1m8mKdOPIDXse/FQndiLm4mrqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MjEwNzM2MDdaFw0yNzA5MjAwNzQxMDdaMDMxMTAvBgNV
BAMTKDIxMTM1M0RBNTcwMUY1MUU5NTdGNDk2OTJGRUI0MkVBNDcxRDQwODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlzfhC2w57BDAoMJWdfSho69l
UQPVp3eg2estimZWP5eIJc8bJak+sP2ztjIeKPpueaaU0l7MCwlmuUClddC7gVSU
rh9zEcBCzU1lA19fPxN3OtpPfZ9tEgeUNJGNrldFKa7mmuuC3ltS3NCz+2zJJvXN
BgRshx0c4sSjomeiDH7sIoSKN+sukkwZRM+Ld9THvNdtAbtGer4g+4Saser7iXJP
TXgGPuNXOhMHikJHVIQt+90J8mND2+kU0zNwbeyXeF1TfElLc/8QWLZzx5YyGMKe
8BX4bSKG9xYIHR9mgVMvBP6wk+ASi1aT6xiSERewYDd2Wp5FkGDNNT61pHXBAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUIRNT2lcB9R6Vf0lpL+tC6kcdQIIwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEB1bigAME
AI8UugMEAI8UxgMEAI8U0wMEAI8U3wMEAI8U6DANBgkqhkiG9w0BAQsFAAOCAQEA
yQ7LHiME9jZzUCELumPHP93Tb/6rqZkJGA5Jq9o4pF0AbJpx45+RZujN7vTm52bx
TN90XUdnKJCILttp3sczhA+iJqk4p+g1/T6NQCWpYezfgyPuasAP52CnRCMLHxRi
l0+JqU/KzgMVjTmDBxEYzTEomeSKXlpuUHNHBGcQaE6mcf2gno/LaeWTsX7Rl4Hz
gtFxeIxnaUsK7r+ANsV0T2484ScbEBFkTh2RTcZ5X6Os6X2ZxPsi4/0MAsP+JVya
YNEmDQcEd0pC4Ta5AduaDEm7s4/3DBzMBZOr3+yDjwYkgp7v7GZmwqrOtPtScWwn
A+LjHGFDnX1IJUQRV4z3Ag==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:05:51 2026 by rpki-client