Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8126.roa
File: AS8126.roa (raw, json)
Hash identifier: Tma2x8hq0OG2tlC72MblALk1vLUeKttI8JeHozauwl0=
Subject key identifier: 58:1D:76:04:CF:FB:99:EA:2E:A6:9A:B3:F4:5B:23:0D:B8:83:95:58
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4BA856D80266C0211C762A0BE647CAFE0D961D07
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8126.roa
Signing time: Thu 15 Oct 2026 07:37:04 +0000
ROA not before: Thu 15 Oct 2026 07:32:04 +0000
ROA not after: Thu 14 Oct 2027 07:37:04 +0000
asID: 8126
IP address blocks: 155.117.87.0/24 maxlen: 24
162.141.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a8:56:d8:02:66:c0:21:1c:76:2a:0b:e6:47:ca:fe:0d:96:1d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 15 07:32:04 2026 GMT
Not After : Oct 14 07:37:04 2027 GMT
Subject: CN=581D7604CFFB99EA2EA69AB3F45B230DB8839558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:dd:41:3f:b2:53:24:ab:47:12:ac:41:b2:
89:30:0d:e8:7a:78:cd:b1:23:08:2f:43:04:a0:56:
66:42:9c:53:fc:ad:1d:55:45:b2:8a:bf:a2:37:89:
70:ab:e7:23:c5:50:09:98:b0:a6:c3:33:d8:7b:1b:
0a:93:16:aa:eb:3e:f3:1c:73:5e:12:0d:ff:03:fe:
0b:8c:1f:4e:c9:00:e1:aa:75:15:de:7a:be:0d:5c:
ca:a8:8d:ac:36:02:94:6c:d8:69:c9:7a:af:50:e9:
32:97:2e:42:ff:c1:f8:54:38:41:72:73:ca:33:cb:
4a:8c:ee:5e:0b:00:c2:2e:af:fd:4f:cb:3d:7c:eb:
f6:df:7a:a8:d9:2e:12:ce:aa:54:2b:8a:f7:5b:5c:
f5:d6:3f:fc:a5:19:68:da:12:5c:b0:16:5e:c9:b5:
10:5d:a8:d6:33:49:b7:fc:51:a9:e4:53:b5:a3:12:
e6:f0:13:c9:cf:16:42:28:0a:ea:6f:8d:b2:8d:51:
0a:ab:1b:c0:73:58:30:a9:e8:c8:52:84:37:67:e8:
f1:15:00:63:83:c0:fb:e7:f0:76:0b:8b:8a:21:4a:
46:8b:c6:49:25:ed:ed:e8:fd:1e:aa:80:fb:c8:aa:
d9:b7:22:ae:ab:26:ad:41:23:60:6f:42:53:78:a7:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:76:04:CF:FB:99:EA:2E:A6:9A:B3:F4:5B:23:0D:B8:83:95:58
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.87.0/24
162.141.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:4c:d1:03:b3:69:56:07:97:0d:bc:77:a4:0d:5e:f2:bd:7b:
64:3e:cd:46:57:1c:52:52:7c:02:e9:63:6e:a1:e9:c1:b3:d1:
f0:50:6c:47:33:2d:4b:72:ea:54:f3:2f:ed:fa:03:11:b0:ad:
55:02:e2:47:04:88:c7:c9:45:58:54:47:0d:ee:b4:05:01:a2:
8f:19:74:61:29:61:48:ad:5a:89:25:b3:18:ca:3e:49:52:a9:
5d:55:6c:d3:9c:ed:53:ca:76:b8:76:8a:53:ca:3d:6d:f1:95:
c8:73:4a:7e:ae:1e:a2:8c:68:a2:9e:51:a9:96:51:1d:5d:bd:
92:5c:47:ea:be:92:ed:69:28:92:4b:fd:ca:25:16:19:1a:d7:
d7:31:0b:0a:20:2e:3f:3a:dd:47:9f:d4:60:4e:8b:5a:89:77:
c3:d5:70:a3:f4:47:2e:51:56:e4:43:ce:a7:f5:fd:1d:3a:18:
21:7c:4d:22:41:f0:80:63:16:71:e7:1a:18:4a:59:d2:e6:02:
c5:23:9e:0d:5a:e7:f2:d9:8b:cf:85:55:ad:03:26:73:15:8b:
c9:d0:8a:7b:6b:ed:00:f6:51:c0:b3:48:ff:f1:3d:78:69:5f:
e1:e3:e4:9e:69:a2:c1:f9:82:18:f0:61:e7:30:fd:33:a2:14:
01:bf:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 07:47:08 2026 by rpki-client