Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8708.roa
File: AS8708.roa (raw, json)
Hash identifier: pAy9cK3Pvuj5YjhmiG32MKVeb9m8D9ILvLcw4509pjc=
Subject key identifier: C8:94:84:8B:80:B1:FC:8C:9F:AA:5F:E5:90:76:DF:87:C9:14:C5:F1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 28F38DC88D335B95C1FAA52B485766061D4E5667
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8708.roa
Signing time: Fri 13 Feb 2026 07:17:56 +0000
ROA not before: Fri 13 Feb 2026 07:12:56 +0000
ROA not after: Fri 12 Feb 2027 07:17:56 +0000
asID: 8708
IP address blocks: 150.241.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f3:8d:c8:8d:33:5b:95:c1:fa:a5:2b:48:57:66:06:1d:4e:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 13 07:12:56 2026 GMT
Not After : Feb 12 07:17:56 2027 GMT
Subject: CN=C894848B80B1FC8C9FAA5FE59076DF87C914C5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:98:8a:57:09:a0:ad:86:7e:27:3f:d4:e0:
ba:22:e5:c1:1d:f0:5f:8d:c4:9f:b5:c7:61:7e:24:
bd:d4:99:a0:ef:8d:ce:d8:60:79:89:2d:ca:5d:51:
69:e2:19:af:d5:98:02:cc:16:18:76:68:5e:2f:4e:
45:7b:93:32:07:6a:c6:60:9e:78:ae:e1:c5:ac:50:
08:cf:c1:ed:39:95:e9:27:0b:30:ae:6c:9b:24:f1:
e2:fb:33:49:03:61:cf:0e:72:86:c6:73:38:bb:a3:
3f:31:aa:e9:15:60:30:ed:fe:81:13:7e:1f:0f:83:
b5:57:d0:a1:5e:76:7e:78:97:e3:3e:04:5b:99:2b:
52:3d:1e:d0:0c:2f:05:14:05:9a:cb:45:a4:2b:65:
e1:c2:b8:8f:a1:31:69:19:e8:00:70:bb:ec:78:04:
a0:aa:3c:dc:5a:d1:0a:31:a4:f8:a2:b0:21:a5:3a:
57:ed:2f:fb:ad:19:87:e5:94:69:3d:d4:db:d6:17:
f2:60:7e:d2:e5:8f:e7:0f:7c:69:16:39:53:50:5a:
17:33:31:66:5a:c6:53:c9:ad:5f:75:83:3d:9e:33:
3a:f0:de:8e:8b:e5:17:78:7f:e4:ba:e3:33:0b:a6:
52:68:f0:d5:3d:23:f7:5d:35:5f:bd:3b:93:48:9b:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:84:8B:80:B1:FC:8C:9F:AA:5F:E5:90:76:DF:87:C9:14:C5:F1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8708.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:85:63:68:79:72:02:eb:8e:97:93:41:32:aa:f4:08:78:8d:
d4:fc:54:c3:9a:e7:78:63:f1:72:3c:93:50:1c:49:6d:04:73:
7c:40:0d:f8:07:1c:c4:67:fd:fe:ef:28:49:25:f0:95:cc:aa:
9a:a0:2a:98:5e:5f:df:a5:8e:2e:a9:be:e7:8a:b1:0d:17:50:
f1:f0:be:c2:bc:ce:df:29:32:11:81:ec:03:54:1a:46:06:e7:
37:d7:df:6f:a1:bd:1d:c6:5c:7b:e2:c7:11:ae:b5:7b:fd:bb:
cc:1f:18:4b:7a:4b:6d:14:53:36:7a:41:09:46:df:23:8f:f9:
07:5f:61:61:50:20:c7:08:43:5a:82:33:6e:1f:7b:cd:64:28:
a0:d7:8a:23:2f:94:96:a4:b3:ea:30:4b:2a:c2:38:6e:a6:b2:
fb:b1:0f:53:f6:fb:60:e3:17:97:b8:4b:cb:cd:23:ec:84:5e:
04:26:66:16:02:00:26:8f:b3:5b:b1:45:4f:db:31:55:ad:6c:
93:95:5f:af:15:89:42:4c:ec:57:fa:17:be:dc:c0:17:58:a2:
80:3d:30:c4:1f:c3:0b:05:1e:0e:37:1c:e5:47:b1:74:72:19:
2b:e4:63:5c:38:52:a8:8a:36:af:e3:a1:c7:37:5e:f6:ae:59:
25:57:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:14 2026 by rpki-client