Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa
File: AS8820.roa (raw, json)
Hash identifier: QrwovIcaJEB2G0op7XzDDiP/g5RHgBPvlH2xjnTllSE=
Subject key identifier: 1F:EA:1A:8D:30:CA:B9:21:0D:5F:E5:3A:06:87:C6:27:B8:D5:21:9B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 16EB9A06D95CA7077CA49AA286C8C52FB900F7BA
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa
Signing time: Fri 31 Oct 2025 09:01:59 +0000
ROA not before: Fri 31 Oct 2025 08:56:59 +0000
ROA not after: Fri 30 Oct 2026 09:01:59 +0000
asID: 8820
IP address blocks: 78.41.48.0/22 maxlen: 24
81.92.0.0/20 maxlen: 24
82.139.196.0/22 maxlen: 24
82.139.200.0/22 maxlen: 24
82.139.222.0/23 maxlen: 24
82.139.252.0/22 maxlen: 24
195.8.224.0/19 maxlen: 24
195.8.253.0/24 maxlen: 24
195.8.254.2/31 maxlen: 32
212.17.224.0/19 maxlen: 24
212.60.128.0/19 maxlen: 24
213.240.128.0/18 maxlen: 24
2a01:170::/29 maxlen: 29
2a01:170::/32 maxlen: 32
2a01:170::/32 maxlen: 64
2a01:170:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:eb:9a:06:d9:5c:a7:07:7c:a4:9a:a2:86:c8:c5:2f:b9:00:f7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 31 08:56:59 2025 GMT
Not After : Oct 30 09:01:59 2026 GMT
Subject: CN=1FEA1A8D30CAB9210D5FE53A0687C627B8D5219B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:d0:c0:79:61:d0:b1:c7:2a:24:75:47:d0:
8b:ed:7e:f1:0a:54:6a:a8:88:b0:cf:8a:a0:30:37:
ad:64:4c:4f:0b:c9:87:4d:30:2e:88:c8:38:b0:4d:
6d:24:b4:9f:cb:4f:71:ec:7a:56:a4:b0:d7:d6:8f:
c9:23:86:29:f3:aa:ed:b8:64:70:f6:c7:35:7c:40:
a4:3a:a8:43:46:5b:a0:9e:75:03:29:6c:35:9e:d4:
98:7e:d7:06:be:03:b4:19:fb:c1:02:2b:cd:63:63:
27:66:9d:f4:eb:7f:95:78:d9:ef:d4:22:0d:d5:4c:
2b:45:a7:31:d4:13:2c:48:8b:b8:db:3d:6d:8d:38:
e0:00:e9:fe:e7:79:0e:e2:3c:7c:c8:b4:42:ef:e2:
6d:27:a3:d4:af:24:4e:9a:13:e0:38:62:11:ab:7d:
78:0d:48:87:b1:3d:77:8a:e7:c2:a9:05:7d:2d:46:
ff:88:aa:4f:33:cc:0a:cb:85:e4:f6:77:77:bd:4a:
6a:7c:54:e5:be:77:e7:19:56:16:a6:be:2d:d0:bb:
16:62:a1:ea:89:57:73:0e:7f:fb:b7:0b:9a:75:19:
4b:7b:00:2a:1d:06:ee:72:fb:00:62:46:de:b4:4d:
76:41:da:ac:ad:fa:0c:f2:ca:af:4b:20:b8:d3:b7:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:1A:8D:30:CA:B9:21:0D:5F:E5:3A:06:87:C6:27:B8:D5:21:9B
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/22
81.92.0.0/20
82.139.196.0-82.139.203.255
82.139.222.0/23
82.139.252.0/22
195.8.224.0/19
212.17.224.0/19
212.60.128.0/19
213.240.128.0/18
IPv6:
2a01:170::/29
Signature Algorithm: sha256WithRSAEncryption
90:03:b4:9c:7b:d7:46:07:63:33:2b:64:c6:0a:44:05:18:0f:
4a:45:f3:fa:9f:3b:ed:9c:31:dc:cb:35:87:58:76:8d:51:5b:
d5:30:63:89:86:39:fa:d6:d0:cc:05:d1:88:ed:29:74:14:c3:
69:a2:31:40:57:0b:db:7a:a7:1f:20:a8:88:09:16:ed:d6:f7:
d3:37:07:78:f9:e3:aa:14:63:3a:39:ee:e8:8a:7c:1e:37:ae:
d7:85:69:47:92:45:7c:c8:e0:07:1c:a3:77:3f:8f:98:8b:0d:
56:75:b3:1e:10:49:4b:c2:99:ad:b1:12:fa:87:9c:a5:05:9c:
9a:3b:7c:9a:8e:1a:99:de:57:35:aa:7e:bc:9c:d9:09:a6:57:
40:0d:a9:6e:38:f9:43:8a:0b:31:dd:f3:6a:c4:56:60:51:1d:
e2:96:50:a3:54:bd:00:11:38:c5:5e:b6:04:98:af:e6:f2:fd:
d7:37:30:b9:2e:d0:97:8b:b9:1e:9b:1d:23:f2:b1:0f:69:bf:
3d:e3:a1:73:7b:d5:ea:b4:63:89:29:c4:87:fa:5a:38:28:9b:
60:26:6d:e5:10:af:18:4b:f4:0f:1c:69:91:30:24:0f:a2:57:
94:65:c9:7e:53:9b:62:2d:d1:61:d3:59:57:20:ad:ba:ef:81:
b3:0a:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:08 2025 by rpki-client