This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          c8uVv6gCn7b1c0b2yXhT5PrEf1C8ABOl+GS0IdFdxps=
Subject key identifier:   C3:44:2B:1F:18:22:F8:13:0E:3A:F0:9D:BD:51:EB:57:D7:4C:83:D8
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       325F3513FEAC63FCF801ACEDF9576F5E45C0E472
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa
Signing time:             Thu 06 Nov 2025 01:10:09 +0000
ROA not before:           Thu 06 Nov 2025 01:05:09 +0000
ROA not after:            Thu 05 Nov 2026 01:10:09 +0000
asID:                     8075
IP address blocks:        140.150.226.0/24 maxlen: 24
                          140.150.227.0/24 maxlen: 24
                          147.79.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5f:35:13:fe:ac:63:fc:f8:01:ac:ed:f9:57:6f:5e:45:c0:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Nov  6 01:05:09 2025 GMT
            Not After : Nov  5 01:10:09 2026 GMT
        Subject: CN=C3442B1F1822F8130E3AF09DBD51EB57D74C83D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:c2:07:67:8b:83:13:f2:a1:1f:04:44:ae:
                    6e:a2:bf:d6:b6:62:a0:d7:3a:66:0e:b8:71:3c:ba:
                    ed:cd:a8:f2:1f:3b:97:06:16:53:50:8f:d8:8b:0f:
                    e3:f4:15:fd:c2:7d:1e:0b:42:ea:ba:b0:37:75:51:
                    af:66:83:68:35:38:66:48:0b:16:43:c6:82:4b:21:
                    60:d2:fc:7e:5a:86:5c:5e:72:b8:e9:43:61:d0:9d:
                    40:7c:b3:62:b7:30:d4:5c:bb:fd:ac:df:9a:ea:b3:
                    8d:2f:a1:84:cb:e7:74:87:37:ef:7c:7d:79:9b:78:
                    51:0b:b2:31:b7:b2:db:4b:bd:95:73:de:f5:34:35:
                    5f:7a:a1:fc:12:92:bc:bb:01:eb:c5:99:2b:a3:b3:
                    c3:c9:1c:16:f8:67:71:2f:39:77:de:f6:1f:bf:58:
                    8c:03:be:f2:f3:9a:f0:6b:07:05:dc:a8:7e:ea:f8:
                    2a:82:78:36:4d:e5:90:69:68:b8:67:0b:fc:4f:bf:
                    99:1f:41:3e:16:34:81:b3:c1:df:a6:3c:ca:05:1e:
                    c1:0a:a6:cb:5b:a8:ed:d6:83:11:7d:f2:0e:cd:65:
                    b8:f6:45:dd:e3:a0:e2:91:1b:2e:c9:a2:45:83:9e:
                    6c:2c:20:e9:81:3c:e7:45:80:1f:ce:57:1b:a5:d5:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:44:2B:1F:18:22:F8:13:0E:3A:F0:9D:BD:51:EB:57:D7:4C:83:D8
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.150.226.0/23
                  147.79.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:32:a8:71:02:70:dd:ae:2a:8b:ef:b9:42:83:56:d4:1d:a7:
         44:1f:70:6f:d0:8d:95:cc:f8:0b:60:63:eb:92:7c:af:84:9f:
         7a:fb:a1:88:76:8b:40:81:47:08:69:3c:d9:e7:70:0f:2e:02:
         58:52:9c:60:b2:ab:1a:5c:6a:d1:60:5f:ce:d5:48:77:fe:f0:
         36:b3:74:72:47:e7:b5:07:e4:bb:27:c1:d6:73:64:e9:05:8e:
         da:84:88:56:e3:e2:44:0a:8c:d7:75:c7:07:e0:f7:2e:20:e8:
         54:2f:13:f8:66:5c:b8:ae:17:66:3c:fd:44:1a:9a:5b:63:70:
         0f:e7:35:0e:e4:26:63:5e:23:17:72:99:28:34:12:4f:8c:44:
         01:73:80:94:03:6f:be:7e:7e:df:a1:97:53:14:23:91:c5:c8:
         cd:81:b7:e8:8c:f4:ad:7a:45:45:6c:da:08:f7:d0:70:9e:2c:
         b0:fc:1a:e6:87:05:3f:42:64:e6:b0:81:c4:31:71:f8:b8:33:
         cb:01:cc:34:f1:6d:25:af:31:74:cd:4b:21:20:62:cc:e2:98:
         b4:2d:14:ba:f2:67:e0:3f:30:c4:0d:25:82:68:19:a9:1a:ae:
         14:d4:0e:f3:ba:90:21:df:1d:27:54:a6:57:58:08:6f:0d:85:
         23:58:95:2e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUMl81E/6sY/z4Aazt+VdvXkXA5HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTExMDYwMTA1MDlaFw0yNjExMDUwMTEwMDlaMDMxMTAvBgNV
BAMTKEMzNDQyQjFGMTgyMkY4MTMwRTNBRjA5REJENTFFQjU3RDc0QzgzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFMIHZ4uDE/KhHwRErm6iv9a2
YqDXOmYOuHE8uu3NqPIfO5cGFlNQj9iLD+P0Ff3CfR4LQuq6sDd1Ua9mg2g1OGZI
CxZDxoJLIWDS/H5ahlxecrjpQ2HQnUB8s2K3MNRcu/2s35rqs40voYTL53SHN+98
fXmbeFELsjG3sttLvZVz3vU0NV96ofwSkry7AevFmSujs8PJHBb4Z3EvOXfe9h+/
WIwDvvLzmvBrBwXcqH7q+CqCeDZN5ZBpaLhnC/xPv5kfQT4WNIGzwd+mPMoFHsEK
pstbqO3WgxF98g7NZbj2Rd3joOKRGy7JokWDnmwsIOmBPOdFgB/OVxul1TsjAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUw0QrHxgi+BMOOvCdvVHrV9dMg9gwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTODA3NS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAYyW4gME
AJNPGjANBgkqhkiG9w0BAQsFAAOCAQEAAjKocQJw3a4qi++5QoNW1B2nRB9wb9CN
lcz4C2Bj65J8r4SfevuhiHaLQIFHCGk82edwDy4CWFKcYLKrGlxq0WBfztVId/7w
NrN0ckfntQfkuyfB1nNk6QWO2oSIVuPiRAqM13XHB+D3LiDoVC8T+GZcuK4XZjz9
RBqaW2NwD+c1DuQmY14jF3KZKDQST4xEAXOAlANvvn5+36GXUxQjkcXIzYG36Iz0
rXpFRWzaCPfQcJ4ssPwa5ocFP0Jk5rCBxDFx+LgzywHMNPFtJa8xdM1LISBizOKY
tC0UuvJn4D8wxA0lgmgZqRquFNQO87qQId8dJ1SmV1gIbw2FI1iVLg==
-----END CERTIFICATE-----
Generated at Fri Dec 5 05:06:37 2025 by rpki-client