Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: 9OAlaJp31codM8cE1GxSKn2Pdho+8n5n1donWkzao14=
Subject key identifier: 2D:A0:0A:36:85:22:A4:E1:A7:05:82:9D:65:A4:10:7E:B4:1B:69:8E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0A1C4EB26C9B4B0697B483E840317D2BE710BCB7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8075.roa
Signing time: Fri 31 Oct 2025 06:49:28 +0000
ROA not before: Fri 31 Oct 2025 06:44:28 +0000
ROA not after: Fri 30 Oct 2026 06:49:28 +0000
asID: 8075
IP address blocks: 92.112.9.0/24 maxlen: 24
178.93.137.0/24 maxlen: 24
178.93.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1c:4e:b2:6c:9b:4b:06:97:b4:83:e8:40:31:7d:2b:e7:10:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 31 06:44:28 2025 GMT
Not After : Oct 30 06:49:28 2026 GMT
Subject: CN=2DA00A368522A4E1A705829D65A4107EB41B698E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:e1:48:d4:de:88:c0:c8:5a:0e:13:e5:6f:
92:b7:8e:90:9b:1b:64:c0:84:f4:d4:77:f8:51:fc:
4b:62:ff:2e:3b:f1:ea:20:0c:05:95:e9:28:7f:86:
9e:2c:43:b3:7f:51:a3:f6:b2:69:77:93:1f:53:52:
af:98:6f:c8:5c:7f:3e:e8:ae:c4:4f:9a:7f:de:e8:
42:5c:0d:54:6d:35:9d:3d:3f:8e:bc:2c:b3:4b:a7:
ab:ea:ca:f2:58:6d:93:7d:70:e7:e6:08:d3:32:2b:
bf:55:62:6a:5d:c6:c4:5d:b1:27:11:66:da:19:7d:
c0:40:8e:cc:3f:cd:07:8b:9a:09:69:48:06:ee:9b:
58:3e:81:87:87:b8:0f:a0:78:89:3f:6e:a9:7a:e9:
8e:8d:65:c5:88:cb:dd:e8:38:7d:8e:31:fc:04:e7:
c4:9c:a8:91:04:84:c9:12:02:46:89:11:bf:b7:e3:
e1:5d:1f:2b:1d:dd:1c:9f:cb:a9:91:53:fd:79:49:
4b:b2:22:ed:06:07:e8:b0:96:d7:96:af:f2:2c:54:
77:ca:71:dc:9f:a7:2c:ac:f3:21:e8:de:c7:1b:3b:
97:8f:84:4e:6d:ab:e8:42:be:aa:3f:6f:61:e5:42:
73:5f:31:0e:43:1f:0e:ac:7f:89:94:59:8a:f7:a0:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:0A:36:85:22:A4:E1:A7:05:82:9D:65:A4:10:7E:B4:1B:69:8E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.9.0/24
178.93.137.0-178.93.138.255
Signature Algorithm: sha256WithRSAEncryption
93:bf:06:03:7b:e1:9a:92:75:a8:6e:16:e5:9a:fe:b5:9f:e5:
65:d6:ab:b5:05:31:bc:dd:28:f0:5a:69:73:9f:70:61:92:14:
c7:b2:80:f8:fe:5b:63:62:18:0b:a8:50:b3:f2:f0:b8:4f:88:
35:19:d5:c4:8f:19:49:1d:02:92:28:d8:a3:5d:44:28:d0:ad:
45:ec:75:7c:e6:8b:16:4b:62:11:ef:f6:a6:34:12:ce:f2:43:
4a:d7:ca:05:a5:b0:d8:81:b3:8b:03:88:e3:45:c6:6d:15:34:
eb:66:b5:61:e2:16:3b:13:1a:90:fb:aa:46:72:f0:57:21:f4:
11:f9:3d:17:d3:2d:d9:8a:28:ff:e3:a6:c6:85:ba:e7:f3:24:
a8:92:22:4b:ae:d2:ec:f3:c7:72:32:0a:09:a3:7e:1f:f8:15:
de:b9:f1:b9:44:ee:f4:9f:ca:45:42:3d:d1:64:da:d1:ff:9b:
a8:87:47:50:5e:11:c4:60:06:1e:35:94:4c:2b:b6:f4:27:f7:
a2:0b:ad:e3:84:2a:8d:5d:24:4b:51:05:fb:df:61:74:c2:a3:
f8:b3:ca:81:b4:6f:41:f0:67:32:2f:d1:7e:50:1b:30:23:e9:
4c:a6:b3:44:f1:36:be:c4:fd:27:40:2c:f8:c6:0d:c2:ce:68:
7e:c3:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:24 2025 by rpki-client