This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          CB41oLRDn1DQhM+vOPhNpxrrUgrbh1FHhNFANU2ZZNU=
Subject key identifier:   BF:68:49:93:D5:AC:6C:33:28:69:11:45:D8:9C:FD:21:D1:00:91:3B
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       65379FEE4FE36CCD0C7805DB72AEC7CD4237CF4C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time:             Tue 11 Nov 2025 23:16:00 +0000
ROA not before:           Tue 11 Nov 2025 23:11:00 +0000
ROA not after:            Tue 10 Nov 2026 23:16:00 +0000
asID:                     6079
IP address blocks:        46.203.173.0/24 maxlen: 24
                          91.124.0.0/24 maxlen: 24
                          91.124.2.0/24 maxlen: 24
                          91.124.3.0/24 maxlen: 24
                          91.124.16.0/24 maxlen: 24
                          91.124.59.0/24 maxlen: 24
                          91.124.82.0/24 maxlen: 24
                          91.124.90.0/24 maxlen: 24
                          91.124.180.0/23 maxlen: 24
                          91.124.182.0/23 maxlen: 24
                          91.124.188.0/23 maxlen: 24
                          91.124.190.0/23 maxlen: 24
                          91.124.208.0/24 maxlen: 24
                          92.112.111.0/24 maxlen: 24
                          92.112.112.0/24 maxlen: 24
                          92.112.113.0/24 maxlen: 24
                          92.112.114.0/24 maxlen: 24
                          92.112.115.0/24 maxlen: 24
                          92.112.116.0/24 maxlen: 24
                          92.112.117.0/24 maxlen: 24
                          92.112.118.0/24 maxlen: 24
                          92.113.188.0/22 maxlen: 24
                          92.113.200.0/22 maxlen: 24
                          92.113.220.0/22 maxlen: 24
                          95.135.134.0/24 maxlen: 24
                          95.135.139.0/24 maxlen: 24
                          95.135.140.0/24 maxlen: 24
                          95.135.141.0/24 maxlen: 24
                          95.135.233.0/24 maxlen: 24
                          178.92.69.0/24 maxlen: 24
                          178.92.151.0/24 maxlen: 24
                          178.92.167.0/24 maxlen: 24
                          178.92.171.0/24 maxlen: 24
                          178.92.186.0/24 maxlen: 24
                          178.92.228.0/24 maxlen: 24
                          178.93.180.0/24 maxlen: 24
                          178.93.187.0/24 maxlen: 24
                          178.93.209.0/24 maxlen: 24
                          178.93.220.0/24 maxlen: 24
                          178.95.23.0/24 maxlen: 24
                          178.95.73.0/24 maxlen: 24
                          178.95.76.0/24 maxlen: 24
                          178.95.109.0/24 maxlen: 24
                          178.95.122.0/24 maxlen: 24
                          178.95.135.0/24 maxlen: 24
                          178.95.139.0/24 maxlen: 24
                          178.95.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:37:9f:ee:4f:e3:6c:cd:0c:78:05:db:72:ae:c7:cd:42:37:cf:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov 11 23:11:00 2025 GMT
            Not After : Nov 10 23:16:00 2026 GMT
        Subject: CN=BF684993D5AC6C3328691145D89CFD21D100913B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:05:2c:34:3b:f3:99:61:d6:f1:85:0c:e4:
                    b8:75:64:05:42:20:77:c9:9e:a5:24:6b:99:7f:21:
                    30:b6:f7:cd:b8:a0:57:ae:2d:2c:60:03:31:5c:b2:
                    0c:35:44:1e:7a:91:69:75:86:9f:eb:63:9b:17:f2:
                    fa:c2:6d:40:b2:da:71:19:f7:da:09:65:98:0d:42:
                    eb:11:7a:4e:e1:2f:a4:6d:34:d1:42:9d:bf:e0:b6:
                    44:57:32:e2:61:36:64:79:12:2f:1d:3c:dc:52:cb:
                    d4:da:10:fe:7b:b1:b0:cd:0b:1f:96:52:5f:18:33:
                    fc:f1:ca:a2:c1:13:91:c8:60:d9:fb:91:4b:cc:be:
                    61:5b:0d:2a:1b:b0:6b:d2:f8:d9:56:e5:1d:e1:5b:
                    67:dc:f9:cf:10:c2:00:bd:ef:9f:dd:6c:8b:2a:f4:
                    36:34:94:98:91:43:c0:b1:89:dd:0c:a6:61:30:93:
                    eb:f8:3d:47:ff:e7:4c:2c:69:ac:de:ae:b2:6d:c3:
                    d1:7a:32:fc:3d:e7:a3:8a:92:1f:89:b8:3f:d2:12:
                    4b:e3:fe:9d:ec:8e:b0:d6:e0:9f:d4:86:86:f6:48:
                    e8:52:1a:8e:55:22:d7:9e:8f:25:c4:96:1d:1e:19:
                    31:80:c9:19:02:de:df:41:bf:74:ce:25:70:70:f5:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:49:93:D5:AC:6C:33:28:69:11:45:D8:9C:FD:21:D1:00:91:3B
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.203.173.0/24
                  91.124.0.0/24
                  91.124.2.0/23
                  91.124.16.0/24
                  91.124.59.0/24
                  91.124.82.0/24
                  91.124.90.0/24
                  91.124.180.0/22
                  91.124.188.0/22
                  91.124.208.0/24
                  92.112.111.0-92.112.118.255
                  92.113.188.0/22
                  92.113.200.0/22
                  92.113.220.0/22
                  95.135.134.0/24
                  95.135.139.0-95.135.141.255
                  95.135.233.0/24
                  178.92.69.0/24
                  178.92.151.0/24
                  178.92.167.0/24
                  178.92.171.0/24
                  178.92.186.0/24
                  178.92.228.0/24
                  178.93.180.0/24
                  178.93.187.0/24
                  178.93.209.0/24
                  178.93.220.0/24
                  178.95.23.0/24
                  178.95.73.0/24
                  178.95.76.0/24
                  178.95.109.0/24
                  178.95.122.0/24
                  178.95.135.0/24
                  178.95.139.0/24
                  178.95.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:41:5f:40:75:4c:a8:c4:75:e5:65:ae:a6:8a:ff:85:11:
         b2:19:af:14:3a:4f:84:16:ef:aa:7a:ab:7f:d2:09:89:7c:8d:
         06:05:2d:b6:11:ec:85:3a:34:dc:57:93:e5:5d:ba:be:c9:b0:
         86:00:ce:ad:80:e9:be:04:d8:28:00:00:c0:31:36:66:12:f4:
         ed:68:97:66:fd:a5:05:1e:18:c2:53:53:84:00:ea:16:b6:10:
         fa:92:76:82:76:96:0b:48:1b:49:63:27:c1:c3:08:bb:8c:81:
         e6:f8:17:9e:09:ec:7f:62:63:e3:d2:8a:e8:11:77:d5:33:ef:
         34:95:b8:54:41:b1:1a:5c:1b:b7:c5:f8:4d:eb:17:93:51:1b:
         fd:cf:22:36:5b:24:c4:0f:44:bf:43:c4:e9:2c:c5:f3:19:47:
         d2:63:52:56:ac:dd:f4:f8:d3:9a:d0:9f:28:bb:fd:2b:9f:2f:
         cf:09:b3:aa:e2:cf:d8:64:38:2d:cd:a7:c8:d9:21:15:e1:d5:
         1f:ff:18:6b:5b:29:c9:bb:f2:e1:4d:6f:83:00:ec:26:18:d1:
         76:a1:d0:2c:6f:ef:87:3e:b4:dc:51:d1:1d:7f:61:26:ef:11:
         c4:d6:c4:d1:0c:db:da:5f:02:a3:c7:34:98:24:99:8e:1f:11:
         bb:ec:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:36:26 2025 by rpki-client