Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: uaqkG7t4I4QsKKhvhz57jZqzrVPwI2+/7aqOIOS4Q1o=
Subject key identifier: 5F:69:49:0F:D7:AF:0F:8D:4B:E3:34:67:90:88:87:39:B3:EF:7B:53
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 575FA732FE886EA71464CAC5E9C4C9305289008F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
Signing time: Fri 31 Oct 2025 06:49:20 +0000
ROA not before: Fri 31 Oct 2025 06:44:20 +0000
ROA not after: Fri 30 Oct 2026 06:49:20 +0000
asID: 8075
IP address blocks: 140.150.226.0/24 maxlen: 24
140.150.227.0/24 maxlen: 24
147.79.26.0/24 maxlen: 24
155.117.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5f:a7:32:fe:88:6e:a7:14:64:ca:c5:e9:c4:c9:30:52:89:00:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 31 06:44:20 2025 GMT
Not After : Oct 30 06:49:20 2026 GMT
Subject: CN=5F69490FD7AF0F8D4BE3346790888739B3EF7B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:9e:ba:ec:b7:ae:d3:81:fa:c2:07:94:b8:
9e:70:bd:d7:a2:07:33:3f:82:40:33:9e:de:34:95:
c5:46:80:86:dc:69:3d:f2:96:51:3f:02:0b:f5:8d:
6d:fc:23:8f:96:35:d3:1f:28:59:71:4a:95:6a:0c:
f1:e6:d0:40:3a:a7:88:b2:03:92:da:83:d4:63:74:
3d:be:40:ed:54:12:fe:a7:9a:3b:59:8d:df:27:75:
f1:34:86:f7:2f:e0:f7:45:e0:21:1d:68:0d:d2:13:
04:c5:3a:d1:5d:9e:de:09:b0:e1:ca:76:5f:9a:26:
10:bf:b7:c8:47:38:94:cf:05:20:43:7a:07:3e:6b:
a6:7d:a6:28:91:b9:36:50:cc:68:9b:db:5c:00:2c:
8d:2f:ac:7a:ab:ca:51:1a:08:22:a9:a4:4f:72:c6:
9e:ff:6b:53:41:c7:6f:78:78:3b:87:63:20:6e:a2:
4f:8c:55:d8:b2:0d:9e:bd:4c:e9:9a:04:f5:08:64:
7c:2a:12:63:6b:7a:6a:fd:b1:5d:c0:c7:3a:65:1f:
18:98:1a:52:f1:e3:94:40:37:31:06:f7:0d:b4:6c:
8a:ba:d0:3d:00:8f:68:38:65:b3:37:c6:d3:aa:1d:
fc:18:f0:80:68:a3:a3:29:98:bb:e2:32:e5:d6:ed:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:69:49:0F:D7:AF:0F:8D:4B:E3:34:67:90:88:87:39:B3:EF:7B:53
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.226.0/23
147.79.26.0/24
155.117.144.0/22
Signature Algorithm: sha256WithRSAEncryption
95:db:0c:f1:36:5e:f6:04:5c:4d:82:71:81:30:7a:41:5e:ee:
7d:da:37:eb:2f:68:1c:d6:48:ef:5c:20:86:4b:d2:fd:20:3e:
8b:24:dd:99:41:4f:15:f6:f8:30:09:94:bd:4f:51:1b:3a:96:
4c:9f:23:d8:f0:2e:78:ba:5a:ba:a9:e4:77:b4:67:85:41:85:
a5:39:a4:8a:c8:f6:49:39:6c:69:fe:dd:30:10:3b:0e:4b:b8:
4a:4e:57:0b:64:3c:cf:ad:1c:ea:50:02:1d:94:be:d8:1c:6c:
0b:91:03:01:14:fa:7e:c3:43:5e:8c:7f:af:bf:ef:ff:6b:b9:
86:53:77:c8:33:77:35:0c:49:f3:03:93:97:d7:47:ed:50:72:
bf:b6:a4:c1:41:f2:0a:90:53:05:76:53:b7:fc:dd:0a:2c:03:
cd:41:a7:78:5a:52:08:14:15:e4:5e:68:a8:21:2d:10:73:3e:
cc:e6:f2:31:6e:02:47:e7:32:01:de:63:df:cb:88:48:f5:bf:
2a:28:18:14:6b:ef:dd:c9:69:7a:46:4e:ce:63:4f:96:1f:71:
56:1a:86:b2:18:0d:16:4b:38:47:d5:79:a2:f2:19:4f:eb:7c:
76:1c:a6:a9:a6:20:40:20:a6:48:28:46:e7:35:97:21:b4:0a:
70:91:23:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:08:28 2025 by rpki-client