Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: Zmg1wyq7Upn2uoPTpddweh/3CJ6tSpiPcuASxxRcUF4=
Subject key identifier: B2:A7:9E:A2:2F:0E:83:20:5E:86:EF:8C:B5:40:1A:E7:17:15:F7:D7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2C8B2A150CE03C0FED4B6B2E23D2EA892B81270C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS8075.roa
Signing time: Tue 15 Sep 2026 21:09:10 +0000
ROA not before: Tue 15 Sep 2026 21:04:10 +0000
ROA not after: Tue 14 Sep 2027 21:09:10 +0000
asID: 8075
IP address blocks: 2a0f:85c1:d6d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8b:2a:15:0c:e0:3c:0f:ed:4b:6b:2e:23:d2:ea:89:2b:81:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 15 21:04:10 2026 GMT
Not After : Sep 14 21:09:10 2027 GMT
Subject: CN=B2A79EA22F0E83205E86EF8CB5401AE71715F7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:9f:18:f1:b0:e4:e3:0a:8a:d3:99:f8:61:
c3:b5:14:f0:e2:d6:d4:29:7b:b4:3f:ec:d4:7e:ef:
15:ff:77:e1:1c:e7:11:2b:43:db:16:d3:cc:97:37:
36:5d:4b:a9:17:a6:da:e9:c2:3c:ae:33:08:4c:bf:
9d:59:b5:31:57:d0:75:f9:02:12:62:4d:fb:ae:8b:
04:f7:62:af:82:c7:6e:73:22:37:22:00:88:ba:0d:
61:f6:31:c6:c1:14:b1:29:2e:d5:36:ab:8c:04:ef:
9d:55:b7:19:45:0f:92:3e:d5:11:3c:e5:10:5a:b3:
b7:10:74:b8:52:92:9a:b8:3b:ee:8f:89:c0:a6:ff:
35:49:c3:1c:5d:5f:4f:f7:d9:4b:94:6a:b8:57:f2:
f8:6b:9b:9a:27:e1:2a:fe:10:0a:3f:b3:8f:d7:da:
9e:0a:cc:96:af:a7:8f:2c:89:14:95:8b:90:09:53:
47:1f:ff:58:24:41:90:42:15:1f:76:5d:24:06:1b:
f4:13:47:35:ba:95:dc:3d:bd:71:a8:03:45:df:a5:
22:2e:8a:85:1b:98:20:80:5e:39:f1:65:ea:0c:34:
40:b7:b8:11:d3:90:72:8d:55:cb:7a:94:05:f2:e9:
bd:f6:02:72:5b:bc:df:bc:bc:25:6d:35:57:ab:b0:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:9E:A2:2F:0E:83:20:5E:86:EF:8C:B5:40:1A:E7:17:15:F7:D7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6d::/48
Signature Algorithm: sha256WithRSAEncryption
9d:6c:96:09:42:ac:3b:a9:64:04:49:36:9f:35:9a:24:40:76:
04:b2:38:d5:05:0f:21:6b:4c:f9:be:34:8a:d0:11:3b:c1:88:
a4:b4:49:f9:df:f7:31:5d:59:8c:02:7d:6d:14:77:f5:f4:cf:
89:04:c7:4b:53:f2:6c:d9:ca:e2:1c:52:aa:e3:1a:99:f8:d7:
69:c5:dc:de:fc:f2:79:b2:00:96:a9:b8:af:b7:60:35:99:51:
ac:74:48:0f:f7:d5:65:2e:21:20:4f:17:d9:9f:6e:28:1f:c1:
95:b5:46:c1:07:29:1b:c6:44:21:71:3a:4a:b1:04:97:b7:17:
e7:1a:7f:9c:56:8f:89:d8:ff:43:56:27:c2:6c:cc:74:4b:a9:
d4:c0:57:b4:0e:c8:97:bc:76:48:03:eb:7d:b4:27:37:d4:0a:
9a:61:4f:ce:fa:fc:a8:1a:27:7b:d2:31:f2:fc:8b:84:70:d1:
60:0c:89:17:4b:6c:f0:d6:10:e4:12:fc:d9:e5:e7:5d:f9:9d:
ba:a9:be:4c:ed:5f:37:46:18:10:ad:f3:8b:d5:c4:2f:52:7e:
5e:85:b2:d0:38:16:44:5f:3a:37:58:9a:c1:6c:31:18:d9:b8:
2d:2c:7f:b2:25:01:c9:4e:47:b4:03:cf:c1:1d:fc:d1:ff:71:
9f:4c:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:33:15 2026 by rpki-client