Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6282.roa
File: AS6282.roa (raw, json)
Hash identifier: 0TqJ8DTWag1FvDePF93B7j7eLVDA5PwhcPrGPVKRT44=
Subject key identifier: EE:0F:6C:5B:03:35:D5:B1:48:CE:9A:27:24:50:8F:F5:C6:CD:C4:78
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 77627E0CE794B43CCAF6BC6977BF513A30DABB11
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6282.roa
Signing time: Fri 09 Oct 2026 12:48:42 +0000
ROA not before: Fri 09 Oct 2026 12:43:42 +0000
ROA not after: Fri 08 Oct 2027 12:48:42 +0000
asID: 6282
IP address blocks: 94.116.116.0/22 maxlen: 22
94.116.132.0/22 maxlen: 22
94.118.148.0/22 maxlen: 22
94.192.28.0/22 maxlen: 22
94.192.112.0/22 maxlen: 22
94.192.120.0/22 maxlen: 22
94.193.136.0/22 maxlen: 22
94.193.140.0/22 maxlen: 22
94.193.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:62:7e:0c:e7:94:b4:3c:ca:f6:bc:69:77:bf:51:3a:30:da:bb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 9 12:43:42 2026 GMT
Not After : Oct 8 12:48:42 2027 GMT
Subject: CN=EE0F6C5B0335D5B148CE9A2724508FF5C6CDC478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:d4:45:3d:4a:1f:6d:1c:33:e4:dd:53:e7:
11:7c:93:f9:a6:7a:c8:a5:9f:61:65:6d:c0:5f:45:
e2:63:51:c4:4d:a5:47:4e:fc:56:0e:20:17:1e:5c:
b4:05:ff:e0:7e:47:1d:d3:38:8e:46:f0:8c:58:99:
4f:d0:e3:9c:c1:be:4f:ad:da:8b:23:46:39:b5:4c:
a2:0c:7b:48:22:35:0d:3e:f8:95:6e:1c:7e:2d:73:
79:45:94:7e:67:60:88:89:f1:e6:74:85:76:b3:68:
c6:17:42:42:18:ef:98:4c:7e:6f:3c:56:86:9a:f6:
12:3d:b2:74:9b:5c:0e:fd:4c:6e:7d:9f:48:ce:4b:
10:8b:96:57:31:df:ef:ce:8c:6c:f1:32:aa:12:c3:
2a:da:10:4f:27:bb:cb:db:f1:f0:b7:2f:2d:48:77:
55:70:ac:e8:ea:6e:48:70:f0:ff:19:3d:c1:ca:c2:
95:8e:9f:89:23:03:70:7b:9e:23:ef:a6:70:4c:d5:
0f:05:00:c2:0f:19:b7:ed:39:0a:f4:fa:60:fb:a1:
9c:f5:4e:f7:2d:cc:d5:73:fb:3c:b9:74:af:3d:a3:
11:9f:c7:82:bc:2d:36:36:39:50:38:4a:c7:75:94:
ee:78:44:20:5a:94:7d:d2:c4:07:d1:db:2d:3f:a0:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:6C:5B:03:35:D5:B1:48:CE:9A:27:24:50:8F:F5:C6:CD:C4:78
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS6282.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.116.0/22
94.116.132.0/22
94.118.148.0/22
94.192.28.0/22
94.192.112.0/22
94.192.120.0/22
94.193.136.0-94.193.147.255
Signature Algorithm: sha256WithRSAEncryption
04:ac:cd:5c:34:ef:4c:cd:a0:ca:d9:e0:a4:68:07:93:f5:ef:
1b:ad:62:ed:4e:0d:3d:78:79:fd:14:9c:76:80:3c:e5:2d:f0:
60:41:b5:ff:55:42:5e:83:a5:67:63:a2:be:62:f8:fa:97:cd:
7b:ec:95:4b:89:8c:b4:a1:0c:48:b0:3f:5e:30:98:0f:6a:c8:
10:2b:8a:f4:4f:25:c4:eb:f5:3b:36:37:3e:26:fe:6e:3e:50:
0f:eb:e7:b5:ef:2e:8b:14:41:3f:e9:27:bb:48:3e:98:9a:5d:
2c:70:f9:79:90:f5:0b:72:ad:08:01:29:38:b1:6b:76:1a:88:
01:98:9b:f0:76:ea:ef:41:9d:a6:19:f9:68:82:bb:6b:4d:57:
02:13:1f:43:e1:79:45:14:e3:32:0d:2c:7c:19:f4:83:b1:6d:
e9:91:0f:22:1e:4c:38:a4:32:05:4f:e6:28:7c:57:28:11:81:
2e:5b:9f:d3:27:57:cd:0d:42:68:84:e8:8d:9d:17:f7:41:97:
a3:76:be:42:4e:0a:dc:54:4b:73:f0:53:f4:39:46:dd:46:58:
78:f8:ce:56:6f:b3:7f:02:8a:3d:04:73:7a:2b:ab:08:1c:38:
83:d4:4c:1d:59:fb:13:2a:6a:5c:c3:1c:f2:c7:a9:84:82:19:
6e:d2:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:30:13 2026 by rpki-client