Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: m2FNUKoDBYd/C28PxBWCyzpsWzvioosDrEoDZqAsCXE=
Subject key identifier: D6:18:EB:A1:86:38:15:66:06:E0:57:1D:7B:27:A7:A6:4C:BB:6A:7A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 577442E3F1A3330C6A565DFECD79991E5D8041F3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
Signing time: Sat 03 Oct 2026 00:01:16 +0000
ROA not before: Fri 02 Oct 2026 23:56:16 +0000
ROA not after: Sat 02 Oct 2027 00:01:16 +0000
asID: 8075
IP address blocks: 2a13:9500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:74:42:e3:f1:a3:33:0c:6a:56:5d:fe:cd:79:99:1e:5d:80:41:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 23:56:16 2026 GMT
Not After : Oct 2 00:01:16 2027 GMT
Subject: CN=D618EBA18638156606E0571D7B27A7A64CBB6A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:6b:b1:d4:69:4e:bc:ba:cd:43:b8:a2:09:
97:ec:43:3d:21:25:c2:01:f4:53:4c:21:85:7a:98:
da:41:42:f7:ec:21:d6:e9:e8:49:b8:7a:a4:34:ce:
89:f3:42:91:d1:4c:ec:20:13:bb:28:cb:60:ea:f3:
cc:88:7c:28:50:63:ec:93:1c:58:d2:3c:1e:45:b7:
33:0c:98:af:7d:db:47:a8:0e:d0:dd:e5:6b:f9:12:
f1:31:96:38:f9:12:24:ba:ba:5d:61:dd:a7:b6:f4:
96:cd:48:d8:d9:f4:a0:6b:f6:e0:5e:9c:08:36:6d:
f1:91:a3:64:b0:97:a2:22:51:03:6f:84:62:b4:27:
76:f9:1e:0f:f6:79:46:ec:ad:d4:be:de:9a:ad:62:
eb:4f:bc:94:b7:9e:32:3c:34:d0:8c:1c:85:f9:50:
f4:c2:77:44:6e:a2:6c:e7:ab:a2:89:0b:94:9f:5c:
15:27:e6:80:aa:ed:1d:9c:f9:bb:61:83:b9:4c:ac:
56:1e:72:62:31:f7:51:b2:06:4a:b0:7a:66:1c:d1:
82:a5:b8:9c:af:5e:7c:dd:3c:f1:a3:61:b5:7a:4e:
e9:e6:46:dd:d4:05:80:0b:b5:fc:4d:11:6d:1e:ff:
b6:ca:3e:08:45:ce:17:f2:ec:6c:de:79:50:c0:c2:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:EB:A1:86:38:15:66:06:E0:57:1D:7B:27:A7:A6:4C:BB:6A:7A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:122::/48
Signature Algorithm: sha256WithRSAEncryption
3a:0d:80:5d:c9:35:19:0c:6a:1c:5d:c5:39:88:4a:2f:d6:b5:
bc:27:98:1f:9b:65:54:75:04:7e:14:6f:69:5a:78:d4:45:c9:
05:7c:b8:53:7f:29:2a:e4:8a:bb:95:bc:cf:e0:da:29:2d:41:
27:f4:4e:92:ff:b8:22:bc:d1:8d:29:5c:2e:89:e4:61:a0:e0:
26:49:cf:26:12:5c:65:26:78:e0:45:b0:f0:e6:3c:22:60:1c:
82:ff:6d:44:bf:2f:91:af:e0:40:b8:a3:88:87:57:48:2f:16:
31:f8:68:91:e8:32:57:60:72:3b:b3:97:5e:54:45:61:b1:94:
c5:67:49:6e:e2:23:76:b4:cb:d8:fc:da:bb:18:c2:27:13:18:
32:fd:72:f7:28:92:2d:72:6b:9b:d9:da:ef:a7:33:7e:ef:04:
1b:1c:06:05:ec:5c:43:1f:29:ab:e0:4e:e2:7e:20:95:12:23:
6c:94:bd:23:a9:63:77:45:4b:02:a6:f6:4e:61:1a:a4:98:64:
aa:81:5c:02:2b:f8:e5:83:68:b0:1e:93:3e:30:1f:bf:62:ae:
df:b0:4c:80:71:8a:e0:65:cb:d3:ce:64:0f:ef:e7:b7:b8:2a:
d5:4f:b4:20:e0:0d:35:6f:ad:3d:b2:0c:7a:05:c7:53:5d:4b:
5d:e1:b9:ab
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUV3RC4/GjMwxqVl3+zXmZHl2AQfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMDIyMzU2MTZaFw0yNzEwMDIwMDAxMTZaMDMxMTAvBgNV
BAMTKEQ2MThFQkExODYzODE1NjYwNkUwNTcxRDdCMjdBN0E2NENCQjZBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutmux1GlOvLrNQ7iiCZfsQz0h
JcIB9FNMIYV6mNpBQvfsIdbp6Em4eqQ0zonzQpHRTOwgE7soy2Dq88yIfChQY+yT
HFjSPB5FtzMMmK9920eoDtDd5Wv5EvExljj5EiS6ul1h3ae29JbNSNjZ9KBr9uBe
nAg2bfGRo2Swl6IiUQNvhGK0J3b5Hg/2eUbsrdS+3pqtYutPvJS3njI8NNCMHIX5
UPTCd0Ruomznq6KJC5SfXBUn5oCq7R2c+bthg7lMrFYecmIx91GyBkqwemYc0YKl
uJyvXnzdPPGjYbV6TunmRt3UBYALtfxNEW0e/7bKPghFzhfy7GzeeVDAwpbNAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU1hjroYY4FWYG4Fcdeyenpky7anowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTODA3NS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoTlQAB
IjANBgkqhkiG9w0BAQsFAAOCAQEAOg2AXck1GQxqHF3FOYhKL9a1vCeYH5tlVHUE
fhRvaVp41EXJBXy4U38pKuSKu5W8z+DaKS1BJ/ROkv+4IrzRjSlcLonkYaDgJknP
JhJcZSZ44EWw8OY8ImAcgv9tRL8vka/gQLijiIdXSC8WMfhokegyV2ByO7OXXlRF
YbGUxWdJbuIjdrTL2PzauxjCJxMYMv1y9yiSLXJrm9na76czfu8EGxwGBexcQx8p
q+BO4n4glRIjbJS9I6ljd0VLAqb2TmEapJhkqoFcAiv45YNosB6TPjAfv2Ku37BM
gHGK4GXL085kD+/nt7gq1U+0IOANNW+tPbIMegXHU11LXeG5qw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 08:49:05 2026 by rpki-client