Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: RXShpdHuxw+QM6na1AyYWjTSvHMWWA2kd8uzsgQD5Pg=
Subject key identifier: CF:22:A6:3F:46:2E:4C:85:D6:D4:76:BC:FE:1A:F2:9C:7C:EB:80:02
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1E7D4E35B5371EE9924358A8F4A0FA429220DDF4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Mon 11 May 2026 22:20:21 +0000
ROA not before: Mon 11 May 2026 22:15:21 +0000
ROA not after: Mon 10 May 2027 22:20:21 +0000
asID: 6079
IP address blocks: 46.202.200.0/24 maxlen: 24
46.202.206.0/24 maxlen: 24
46.203.6.0/24 maxlen: 24
46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.146.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.169.0/24 maxlen: 24
46.203.171.0/24 maxlen: 24
46.203.173.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
91.124.0.0/24 maxlen: 24
91.124.2.0/24 maxlen: 24
91.124.3.0/24 maxlen: 24
91.124.16.0/24 maxlen: 24
91.124.59.0/24 maxlen: 24
91.124.82.0/24 maxlen: 24
91.124.90.0/24 maxlen: 24
91.124.180.0/23 maxlen: 24
91.124.182.0/23 maxlen: 24
91.124.188.0/23 maxlen: 24
91.124.190.0/23 maxlen: 24
91.124.208.0/24 maxlen: 24
91.124.228.0/23 maxlen: 24
91.124.230.0/23 maxlen: 24
91.124.232.0/23 maxlen: 24
91.124.234.0/23 maxlen: 24
91.124.242.0/24 maxlen: 24
92.112.6.0/24 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.111.0/24 maxlen: 24
92.112.112.0/24 maxlen: 24
92.112.113.0/24 maxlen: 24
92.112.114.0/24 maxlen: 24
92.112.115.0/24 maxlen: 24
92.112.116.0/24 maxlen: 24
92.112.117.0/24 maxlen: 24
92.112.118.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
92.113.188.0/22 maxlen: 24
92.113.200.0/22 maxlen: 24
92.113.220.0/22 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.204.0/24 maxlen: 24
95.134.206.0/24 maxlen: 24
95.134.221.0/24 maxlen: 24
95.134.223.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
95.135.134.0/24 maxlen: 24
95.135.139.0/24 maxlen: 24
95.135.140.0/24 maxlen: 24
95.135.141.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
178.92.80.0/24 maxlen: 24
178.92.82.0/24 maxlen: 24
178.92.151.0/24 maxlen: 24
178.92.167.0/24 maxlen: 24
178.92.171.0/24 maxlen: 24
178.92.186.0/24 maxlen: 24
178.93.180.0/24 maxlen: 24
178.93.187.0/24 maxlen: 24
178.93.209.0/24 maxlen: 24
178.93.220.0/24 maxlen: 24
178.95.73.0/24 maxlen: 24
178.95.76.0/24 maxlen: 24
178.95.122.0/24 maxlen: 24
178.95.139.0/24 maxlen: 24
178.95.147.0/24 maxlen: 24
178.95.180.0/22 maxlen: 24
178.95.212.0/22 maxlen: 22
178.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7d:4e:35:b5:37:1e:e9:92:43:58:a8:f4:a0:fa:42:92:20:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 11 22:15:21 2026 GMT
Not After : May 10 22:20:21 2027 GMT
Subject: CN=CF22A63F462E4C85D6D476BCFE1AF29C7CEB8002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:4e:2b:b5:31:72:40:ca:6c:48:57:71:49:
9f:53:77:ee:73:89:7f:ed:32:66:63:13:5c:40:9a:
ec:28:fb:35:9b:89:8f:eb:d4:1b:66:6e:75:ed:51:
7c:2e:97:ed:93:1f:8f:99:ed:24:7f:a3:8a:ef:94:
79:7f:b8:88:e9:53:d0:60:a8:36:55:f1:2a:26:1d:
94:98:4b:bd:87:90:80:96:e1:ba:87:4f:58:f3:ab:
81:79:d9:dc:dc:8b:80:83:1f:5a:50:ed:17:65:2c:
a9:49:7a:17:48:68:bf:e2:49:34:ae:19:b9:81:10:
0e:b8:99:b3:20:d3:bc:d6:f9:e2:5d:c3:55:1e:04:
4d:1b:23:e1:ce:19:d5:f8:d5:01:0d:bd:1d:a0:26:
f3:d4:8c:ab:a0:41:69:f9:6d:a5:85:97:78:e6:bb:
24:db:ae:68:02:25:ae:05:04:34:5d:0c:34:b6:3d:
ed:9a:29:77:86:c8:fe:58:1b:a9:a8:b7:98:5d:a4:
8a:3e:ed:f8:7f:93:d3:6e:fc:e3:af:7e:7c:62:de:
da:00:5e:47:8e:30:38:c9:ae:f2:47:ae:fc:14:33:
2d:67:01:f8:f3:e1:79:e8:41:54:fb:51:1d:b1:01:
d5:b2:2d:c2:9c:43:95:4d:a3:ae:ac:af:74:0b:6c:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:A6:3F:46:2E:4C:85:D6:D4:76:BC:FE:1A:F2:9C:7C:EB:80:02
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.200.0/24
46.202.206.0/24
46.203.6.0/24
46.203.107.0/24
46.203.114.0/24
46.203.145.0-46.203.146.255
46.203.168.0/23
46.203.171.0/24
46.203.173.0-46.203.174.255
46.203.177.0/24
46.203.179.0/24
91.124.0.0/24
91.124.2.0/23
91.124.16.0/24
91.124.59.0/24
91.124.82.0/24
91.124.90.0/24
91.124.180.0/22
91.124.188.0/22
91.124.208.0/24
91.124.228.0-91.124.235.255
91.124.242.0/24
92.112.6.0/24
92.112.8.0/24
92.112.55.0/24
92.112.62.0/24
92.112.89.0/24
92.112.111.0-92.112.118.255
92.112.142.0/24
92.113.6.0/24
92.113.15.0/24
92.113.40.0/24
92.113.188.0/22
92.113.200.0/22
92.113.220.0/22
95.134.184.0/24
95.134.204.0/24
95.134.206.0/24
95.134.221.0/24
95.134.223.0/24
95.135.72.0/24
95.135.134.0/24
95.135.139.0-95.135.141.255
95.135.233.0/24
178.92.80.0/24
178.92.82.0/24
178.92.151.0/24
178.92.167.0/24
178.92.171.0/24
178.92.186.0/24
178.93.180.0/24
178.93.187.0/24
178.93.209.0/24
178.93.220.0/24
178.95.73.0/24
178.95.76.0/24
178.95.122.0/24
178.95.139.0/24
178.95.147.0/24
178.95.180.0/22
178.95.212.0/22
178.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:33:4d:96:21:6a:6d:b4:b8:8f:a8:9d:a3:a3:16:08:e7:fd:
9b:73:1c:c6:1b:1d:c9:43:9f:27:d2:d6:78:0c:5f:4f:d1:61:
6f:be:8d:d4:ba:24:64:54:b1:5f:34:b5:9f:c1:c8:13:ac:5f:
70:43:d0:a3:52:7b:7b:a7:a6:0f:bc:6e:db:35:9d:8c:e3:46:
e9:42:37:a2:03:bd:13:5c:d3:ee:ff:3e:bd:4e:ae:bc:34:37:
66:43:11:9f:7d:25:a2:d5:06:44:b2:cd:8f:95:06:af:c9:a9:
85:aa:af:0b:04:fb:a3:04:71:34:47:e4:a9:c5:84:69:ba:01:
b5:46:ff:70:c2:30:c0:ac:31:f9:c7:c5:03:80:2b:6c:c2:f3:
ec:37:4c:e3:a1:4f:4b:8b:7c:ab:0a:5c:ff:b8:63:71:c3:81:
92:ca:8b:0e:d0:a1:d7:f3:7c:60:a4:9b:38:ac:83:e8:3d:09:
01:1d:d3:24:96:a5:69:bc:54:50:7d:9f:c3:76:22:e6:60:c3:
9c:7a:ab:4f:51:34:75:a1:7f:58:d1:fa:53:7c:e1:8b:14:ca:
7e:21:9d:4b:f7:92:0c:32:a3:43:a9:2e:41:20:3e:a2:b8:73:
a2:79:8b:4d:9f:af:0a:f2:43:13:a6:d9:0b:bb:ee:bb:3f:56:
89:12:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:38:43 2026 by rpki-client