Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6282.roa
File:                     AS6282.roa (raw, json)
Hash identifier:          PJqzuwTQt4/jq7+6W2ntCRLCA9ZCJ1tVto2sGl/N4P4=
Subject key identifier:   A1:09:0B:7E:A8:04:E8:47:B2:CC:35:A1:F4:78:8B:12:06:70:7A:4A
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       3CBBECC5D1B8DF27CCD18D712376DB870D530F93
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6282.roa
Signing time:             Fri 09 Oct 2026 12:48:35 +0000
ROA not before:           Fri 09 Oct 2026 12:43:35 +0000
ROA not after:            Fri 08 Oct 2027 12:48:35 +0000
asID:                     6282
IP address blocks:        79.180.184.0/22 maxlen: 22
                          79.180.192.0/22 maxlen: 22
                          79.180.200.0/22 maxlen: 22
                          79.180.208.0/22 maxlen: 22
                          79.180.216.0/22 maxlen: 22
                          79.180.224.0/22 maxlen: 22
                          79.180.232.0/22 maxlen: 22
                          79.180.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bb:ec:c5:d1:b8:df:27:cc:d1:8d:71:23:76:db:87:0d:53:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  9 12:43:35 2026 GMT
            Not After : Oct  8 12:48:35 2027 GMT
        Subject: CN=A1090B7EA804E847B2CC35A1F4788B1206707A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:dc:d3:c4:62:35:55:b2:9c:b7:b2:17:98:
                    d8:51:b3:1d:ed:8d:9f:1a:51:ec:2e:9c:49:7d:79:
                    fa:75:c8:be:dd:0f:8a:2b:ab:c5:5f:cf:20:ca:8c:
                    a6:de:ea:2a:78:da:1e:82:03:06:a8:1a:e1:12:21:
                    84:7a:3d:4e:8c:cb:e2:2d:25:a8:71:1a:01:dd:eb:
                    67:43:e1:67:83:73:45:e0:9f:1b:dc:d9:a6:dc:ee:
                    61:53:17:c5:5c:8c:03:4a:20:93:ef:ce:e7:3e:a3:
                    87:29:7f:d5:f0:7a:00:0e:4f:aa:11:2a:59:22:40:
                    6d:7d:49:ab:5a:1e:0d:ec:38:c0:b2:b3:dc:8b:45:
                    20:74:42:36:52:47:33:1d:39:ef:88:5a:13:7f:87:
                    17:19:69:0a:f8:64:db:3a:27:de:73:74:b1:e7:7c:
                    2b:91:de:8b:8a:c1:53:bf:56:57:8f:24:fb:24:11:
                    cf:0c:27:15:47:d6:f5:91:5b:67:a7:41:77:92:90:
                    39:da:5c:3e:c5:b0:d7:ed:83:da:61:da:e0:ab:7d:
                    4e:ea:e5:9f:36:92:d2:63:ec:3f:73:1d:88:54:7c:
                    11:c5:99:d7:85:28:7d:9d:a7:38:34:34:a0:03:a4:
                    55:4a:86:d8:60:07:44:a3:ef:71:ee:ec:e5:b1:c0:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:09:0B:7E:A8:04:E8:47:B2:CC:35:A1:F4:78:8B:12:06:70:7A:4A
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS6282.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.184.0/22
                  79.180.192.0/22
                  79.180.200.0/22
                  79.180.208.0/22
                  79.180.216.0/22
                  79.180.224.0/22
                  79.180.232.0/22
                  79.180.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:b2:69:c7:04:e4:ca:1e:84:6f:73:58:7a:ad:5d:c9:3e:
         e2:9b:5f:7c:e0:7b:b9:82:a0:4d:2c:74:4b:37:aa:ce:0a:92:
         f3:23:6d:40:0b:ae:88:31:87:d7:36:61:12:e3:59:85:ab:a4:
         00:0f:54:92:a6:4c:47:6e:0d:36:6a:0a:b5:97:41:4b:a8:92:
         2c:3f:79:10:e8:f7:29:22:a9:74:c1:41:15:38:cc:ea:38:5a:
         46:4e:f1:89:db:28:10:7b:f3:5f:dc:6b:8d:55:14:78:24:01:
         52:07:39:82:4f:47:0d:c1:0a:1a:8b:2c:35:97:b7:07:ff:cf:
         a0:15:8e:75:f2:c4:fd:38:ef:f1:90:21:9e:16:09:e5:56:ff:
         00:b5:69:19:e8:0f:ce:4e:4d:e8:2e:12:c1:df:fb:ca:40:e7:
         44:0e:52:b0:83:30:13:9d:38:e3:21:dc:09:50:62:38:96:9f:
         60:ef:5d:0c:6f:ff:81:37:6a:b9:20:4f:26:28:9c:11:6f:64:
         a4:fe:f2:e4:e0:93:1c:f1:4b:3a:8c:85:70:85:6b:1d:27:b2:
         fd:a7:ed:a4:7f:5a:ab:60:cc:80:53:60:8c:41:f6:1f:c6:fc:
         87:82:62:25:ba:b1:3f:42:89:5e:5e:f2:d5:47:4f:4e:cc:1d:
         99:f7:11:45
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgIUPLvsxdG43yfM0Y1xI3bbhw1TD5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMDkxMjQzMzVaFw0yNzEwMDgxMjQ4MzVaMDMxMTAvBgNV
BAMTKEExMDkwQjdFQTgwNEU4NDdCMkNDMzVBMUY0Nzg4QjEyMDY3MDdBNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFNzTxGI1VbKct7IXmNhRsx3t
jZ8aUewunEl9efp1yL7dD4orq8VfzyDKjKbe6ip42h6CAwaoGuESIYR6PU6My+It
JahxGgHd62dD4WeDc0Xgnxvc2abc7mFTF8VcjANKIJPvzuc+o4cpf9XwegAOT6oR
KlkiQG19SataHg3sOMCys9yLRSB0QjZSRzMdOe+IWhN/hxcZaQr4ZNs6J95zdLHn
fCuR3ouKwVO/VlePJPskEc8MJxVH1vWRW2enQXeSkDnaXD7FsNftg9ph2uCrfU7q
5Z82ktJj7D9zHYhUfBHFmdeFKH2dpzg0NKADpFVKhthgB0Sj73Hu7OWxwA87AgMB
AAGjggJtMIICaTAdBgNVHQ4EFgQUoQkLfqgE6EeyzDWh9HiLEgZwekowHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG
XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM2MjgyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIA
ATAwAwQCT7S4AwQCT7TAAwQCT7TIAwQCT7TQAwQCT7TYAwQCT7TgAwQCT7ToAwQC
T7TwMA0GCSqGSIb3DQEBCwUAA4IBAQCS/7JpxwTkyh6Eb3NYeq1dyT7im1984Hu5
gqBNLHRLN6rOCpLzI21AC66IMYfXNmES41mFq6QAD1SSpkxHbg02agq1l0FLqJIs
P3kQ6PcpIql0wUEVOMzqOFpGTvGJ2ygQe/Nf3GuNVRR4JAFSBzmCT0cNwQoaiyw1
l7cH/8+gFY518sT9OO/xkCGeFgnlVv8AtWkZ6A/OTk3oLhLB3/vKQOdEDlKwgzAT
nTjjIdwJUGI4lp9g710Mb/+BN2q5IE8mKJwRb2Sk/vLk4JMc8Us6jIVwhWsdJ7L9
p+2kf1qrYMyAU2CMQfYfxvyHgmIlurE/QoleXvLVR09OzB2Z9xFF
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:45:00 2026 by rpki-client