Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8126.roa
File: AS8126.roa (raw, json)
Hash identifier: dBDSXjX92BbfPoudP94Gu0/meeZ/fEA3QhIG5eGIpVo=
Subject key identifier: B0:01:AD:F7:A1:93:12:2F:EF:9F:61:B3:65:82:A2:88:4D:75:8B:98
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 786A5CF4D8100E8DE79375047D7B6A985FDAA155
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8126.roa
Signing time: Tue 30 Jun 2026 02:02:50 +0000
ROA not before: Tue 30 Jun 2026 01:57:50 +0000
ROA not after: Tue 29 Jun 2027 02:02:50 +0000
asID: 8126
IP address blocks: 155.117.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:6a:5c:f4:d8:10:0e:8d:e7:93:75:04:7d:7b:6a:98:5f:da:a1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 30 01:57:50 2026 GMT
Not After : Jun 29 02:02:50 2027 GMT
Subject: CN=B001ADF7A193122FEF9F61B36582A2884D758B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:00:a6:31:aa:23:c5:66:51:39:66:8a:83:
31:a8:16:d3:5c:d3:d9:a8:4e:ad:b6:99:1f:54:cb:
36:ee:49:f2:e8:42:51:01:ac:26:96:8f:d7:5e:a0:
d2:8e:46:dc:a0:b8:ff:92:f0:f4:4a:a8:44:76:d9:
26:b5:73:4d:2e:cd:6e:6c:d6:79:a0:77:88:d2:de:
a3:d7:82:26:df:93:a3:b2:26:39:32:b1:50:94:02:
ae:44:a4:0d:8c:75:9c:e7:fe:de:65:dc:22:8f:df:
45:3e:14:70:11:89:05:cd:41:a8:ef:ef:f7:b5:e5:
0c:e9:73:6a:9f:e0:9f:9f:e7:09:13:ae:8b:b6:79:
54:e0:9e:ec:53:06:a8:f8:78:6c:60:44:19:b5:4c:
28:29:4c:64:2e:ea:bf:40:b7:b7:f4:e9:9b:eb:a3:
35:4a:5e:95:e3:ad:60:17:b2:1f:d0:fa:b4:3b:42:
99:ea:c7:22:5f:20:7d:ae:72:25:ae:23:94:2c:1c:
65:71:0e:40:0a:7b:8d:b0:9e:3b:2e:e5:40:ce:96:
07:cc:2b:ac:b4:b8:b2:82:ab:b5:26:8e:da:65:c7:
2d:cd:5d:f9:0c:7d:ec:57:5f:f8:1b:35:d4:1f:61:
f9:1e:94:18:a6:68:78:33:6d:dd:07:3a:1c:a9:ca:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:AD:F7:A1:93:12:2F:EF:9F:61:B3:65:82:A2:88:4D:75:8B:98
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS8126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.87.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a8:6f:a2:b0:29:37:c3:85:37:38:44:b8:dd:ed:8c:79:d5:
9c:1c:79:0f:8c:e8:b7:16:32:25:4f:d0:af:81:76:17:f6:a8:
74:c0:27:07:ca:e4:b8:59:78:84:5b:45:25:fe:53:f5:b1:86:
96:f1:11:17:5f:0e:28:f8:c8:95:8a:00:ad:79:31:f1:e8:54:
ac:ca:2d:58:b7:ea:cd:f2:1d:81:7d:26:b4:ee:e0:5c:09:ff:
ed:a1:de:19:89:d1:be:08:f1:bb:4e:2d:ff:7f:18:4a:fd:e4:
da:ec:56:af:23:bd:eb:72:36:33:23:01:bb:e9:cf:fc:27:03:
54:90:77:6f:e3:76:7a:0c:39:9a:36:62:f0:3e:05:7e:dd:63:
97:51:88:ed:ff:c9:be:9c:30:c1:90:9c:a4:41:d9:a3:cc:3f:
48:48:c2:b8:d4:04:7c:7d:1e:f2:13:eb:a7:65:34:9c:73:e7:
1e:af:c6:29:1d:35:57:11:28:93:57:fe:5e:ab:7a:ba:d9:5b:
6d:99:22:f9:40:85:eb:87:aa:73:7d:2b:d7:7d:bc:0c:40:c0:
8e:78:c6:40:73:59:26:a4:6d:73:99:73:43:8a:92:1c:45:5c:
19:d5:22:38:86:d2:e8:86:b4:7e:3b:14:52:f8:95:21:d7:75:
87:89:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:09 2026 by rpki-client