Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa
File: AS8820.roa (raw, json)
Hash identifier: DzCHT9hefZEbLyVKRengSck6pje5aRTj8oUekfaWSLI=
Subject key identifier: 52:F4:D6:EC:69:1D:77:08:D2:F0:B6:77:0A:9F:58:C9:3C:31:C6:CC
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 52F617D5757D2C4D373B08F29DD7EF384588C7CB
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa
Signing time: Mon 13 Jul 2026 10:59:22 +0000
ROA not before: Mon 13 Jul 2026 10:54:22 +0000
ROA not after: Mon 12 Jul 2027 10:59:22 +0000
asID: 8820
IP address blocks: 81.92.0.0/20 maxlen: 24
82.139.196.0/22 maxlen: 24
82.139.200.0/22 maxlen: 24
82.139.222.0/23 maxlen: 24
82.139.252.0/22 maxlen: 24
195.8.224.0/19 maxlen: 24
195.8.253.0/24 maxlen: 24
195.8.254.2/31 maxlen: 32
212.17.240.0/20 maxlen: 24
212.60.128.0/20 maxlen: 24
213.240.128.0/18 maxlen: 24
2a01:170::/29 maxlen: 29
2a01:170::/32 maxlen: 32
2a01:170::/32 maxlen: 64
2a01:170:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f6:17:d5:75:7d:2c:4d:37:3b:08:f2:9d:d7:ef:38:45:88:c7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 13 10:54:22 2026 GMT
Not After : Jul 12 10:59:22 2027 GMT
Subject: CN=52F4D6EC691D7708D2F0B6770A9F58C93C31C6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:55:9b:28:7d:54:d8:e4:cf:8b:2c:8b:bc:
34:74:0d:3f:34:c8:4e:44:4c:d2:17:b8:09:7b:75:
3f:00:9d:8e:0e:11:75:79:df:e1:1e:fa:7f:92:a2:
48:e4:bb:e2:be:af:28:30:66:cb:7e:e6:a5:0e:5f:
0f:30:61:86:11:99:92:12:84:97:72:06:c9:9d:b4:
91:ed:5f:e9:c9:8e:01:c1:34:57:cb:3e:2c:52:1f:
c4:8e:8b:6b:04:7d:ac:85:6d:a5:e5:02:18:0d:0e:
99:5c:c9:a8:2c:8d:d1:8f:4c:16:ec:c8:64:68:80:
85:96:bd:05:57:27:40:f1:11:06:79:c5:37:44:48:
d3:6d:3d:c2:79:c0:d4:dc:1b:c6:cf:a4:5c:69:8b:
3a:a0:58:aa:6c:ed:bf:83:30:fc:e4:d1:e3:33:8e:
f5:13:31:a8:78:6a:ec:5b:62:5c:61:f6:54:8b:b4:
ad:34:17:99:77:0f:be:6c:07:ab:25:1a:ce:83:42:
87:ab:9d:15:33:8d:02:e7:6f:cd:9c:a2:22:5e:01:
6c:bb:f7:8c:c6:33:80:8d:3c:92:56:43:00:ed:f4:
8a:65:b9:36:0d:e9:b1:ac:b8:62:47:ab:f9:e9:eb:
95:c2:ac:ad:8d:44:d8:48:7e:7a:22:4d:fd:db:40:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F4:D6:EC:69:1D:77:08:D2:F0:B6:77:0A:9F:58:C9:3C:31:C6:CC
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.0.0/20
82.139.196.0-82.139.203.255
82.139.222.0/23
82.139.252.0/22
195.8.224.0/19
212.17.240.0/20
212.60.128.0/20
213.240.128.0/18
IPv6:
2a01:170::/29
Signature Algorithm: sha256WithRSAEncryption
23:fb:0b:f3:88:18:1a:ba:f3:e1:08:20:84:3e:69:5d:e1:4a:
d0:14:cb:72:14:33:82:80:24:40:dd:9a:ba:81:4e:a5:1e:bd:
a9:09:0e:c3:91:ba:3d:a3:d6:e9:fc:0c:ac:ef:bf:80:7c:07:
b2:c1:5a:40:e3:21:dc:37:ee:bd:cd:b5:dc:bb:5d:77:6a:a1:
2d:b8:35:a8:e8:e5:88:a0:b0:f1:66:aa:c3:c5:2b:ed:30:0e:
59:25:83:cb:b5:5b:56:48:14:fd:be:af:92:72:57:d1:09:38:
4a:a4:45:56:d6:02:64:3d:5f:bb:d5:dc:93:3b:7c:88:79:48:
fb:c3:b6:bf:9e:14:d6:71:6b:89:a4:86:7c:0e:a7:51:cd:2e:
75:3c:e5:ba:34:a6:59:0b:4c:89:f4:e2:e0:fb:6c:68:c6:ea:
53:73:cc:93:d0:c7:59:e7:2c:ec:76:09:0b:eb:47:e0:72:7e:
70:dc:a1:9e:99:7f:9b:c8:a1:01:c7:78:2f:7d:62:c6:fd:20:
87:f6:f8:df:1f:25:ff:24:f6:71:fa:fc:1c:5e:4f:f5:1a:25:
af:24:2b:c0:a0:5d:cc:f3:ed:b2:23:5b:6a:2b:33:e1:fd:5e:
e3:2c:a4:a1:e6:1d:9c:62:d3:06:ae:ba:57:a1:37:73:37:fb:
13:99:f5:28
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUUvYX1XV9LE03OwjyndfvOEWIx8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA3MTMxMDU0MjJaFw0yNzA3MTIxMDU5MjJaMDMxMTAvBgNV
BAMTKDUyRjRENkVDNjkxRDc3MDhEMkYwQjY3NzBBOUY1OEM5M0MzMUM2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmolWbKH1U2OTPiyyLvDR0DT80
yE5ETNIXuAl7dT8AnY4OEXV53+Ee+n+Sokjku+K+rygwZst+5qUOXw8wYYYRmZIS
hJdyBsmdtJHtX+nJjgHBNFfLPixSH8SOi2sEfayFbaXlAhgNDplcyagsjdGPTBbs
yGRogIWWvQVXJ0DxEQZ5xTdESNNtPcJ5wNTcG8bPpFxpizqgWKps7b+DMPzk0eMz
jvUTMah4auxbYlxh9lSLtK00F5l3D75sB6slGs6DQoernRUzjQLnb82coiJeAWy7
94zGM4CNPJJWQwDt9IpluTYN6bGsuGJHq/np65XCrK2NRNhIfnoiTf3bQPjDAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUUvTW7GkddwjS8LZ3Cp9YyTwxxswwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTODgyMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBgBggrBgEFBQcBBwEB/wRRME8wPgQCAAEwOAMEBFFcADAM
AwQCUovEAwQCUovIAwQBUoveAwQCUov8AwQFwwjgAwQE1BHwAwQE1DyAAwQG1fCA
MA0EAgACMAcDBQMqAQFwMA0GCSqGSIb3DQEBCwUAA4IBAQAj+wvziBgauvPhCCCE
Pmld4UrQFMtyFDOCgCRA3Zq6gU6lHr2pCQ7Dkbo9o9bp/Ays77+AfAeywVpA4yHc
N+69zbXcu113aqEtuDWo6OWIoLDxZqrDxSvtMA5ZJYPLtVtWSBT9vq+SclfRCThK
pEVW1gJkPV+71dyTO3yIeUj7w7a/nhTWcWuJpIZ8DqdRzS51POW6NKZZC0yJ9OLg
+2xoxupTc8yT0MdZ5yzsdgkL60fgcn5w3KGemX+byKEBx3gvfWLG/SCH9vjfHyX/
JPZx+vwcXk/1GiWvJCvAoF3M8+2yI1tqKzPh/V7jLKSh5h2cYtMGrrpXoTdzN/sT
mfUo
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:07 2026 by rpki-client