Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS8220.roa
File: AS8220.roa (raw, json)
Hash identifier: wKHa8QdDFXhkAYMCHJK3xCI65iPl9j9qSrlVu5rFlIU=
Subject key identifier: 75:9F:D4:CC:35:94:A0:0B:CA:64:20:15:D7:14:8B:95:42:E0:6A:72
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7C54F0112C927B8D0396382F8CECD70A03297069
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS8220.roa
Signing time: Fri 03 Jul 2026 06:08:01 +0000
ROA not before: Fri 03 Jul 2026 06:03:01 +0000
ROA not after: Fri 02 Jul 2027 06:08:01 +0000
asID: 8220
IP address blocks: 181.41.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:54:f0:11:2c:92:7b:8d:03:96:38:2f:8c:ec:d7:0a:03:29:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 3 06:03:01 2026 GMT
Not After : Jul 2 06:08:01 2027 GMT
Subject: CN=759FD4CC3594A00BCA642015D7148B9542E06A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:62:ab:c1:82:af:e0:56:0f:cf:a0:f8:91:
51:88:b2:ee:19:b9:c9:a4:27:8c:01:55:ae:95:11:
70:86:08:8d:fa:4d:44:32:bd:d9:1d:47:fa:2a:4e:
09:0d:a4:b2:8d:76:dd:95:64:07:aa:ea:da:e6:66:
4f:5d:9c:78:01:bc:72:eb:0d:d9:52:24:fa:c7:90:
87:0c:04:56:18:a0:9c:fd:95:c8:4c:cf:1f:56:d6:
78:dd:d8:58:10:91:aa:bc:8e:27:0d:59:e2:e7:06:
26:3d:7a:b6:76:30:90:0e:4f:54:b0:1d:ad:71:28:
37:51:ed:0e:c7:af:48:e8:7b:30:51:43:d1:fa:9d:
58:24:62:98:83:a8:a7:e3:e4:dd:40:85:70:6f:f7:
22:00:62:00:6e:78:5b:a6:6d:60:84:eb:8d:05:4e:
ce:4a:93:79:38:1f:7e:1b:cc:94:11:0a:7a:42:5e:
b5:ca:0c:f6:35:00:ec:ba:2e:4d:24:a3:da:4e:6a:
51:92:ae:37:a1:a6:89:0a:19:90:c7:83:73:b8:78:
e1:4c:0b:18:73:43:ce:d1:cf:35:04:01:6d:ca:ba:
fe:d3:fa:08:7d:31:0f:a8:a3:5e:0e:ff:98:a0:d1:
a4:98:74:9b:62:6c:dc:b0:b3:98:ba:b8:f8:60:41:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:D4:CC:35:94:A0:0B:CA:64:20:15:D7:14:8B:95:42:E0:6A:72
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS8220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8d:a1:f8:1f:af:b8:16:29:08:73:3e:94:3b:9e:67:63:03:
ed:80:37:b5:9d:76:9a:17:48:09:e7:4d:91:e8:67:44:92:07:
e3:f7:a8:1c:a2:9d:0b:32:22:00:07:46:c3:a3:3a:17:63:2c:
bd:49:11:26:87:32:6d:6b:42:dd:f1:bd:ca:4f:95:dd:12:89:
cc:ef:db:9f:9e:16:a0:37:d6:3f:0b:ec:fa:3f:03:e2:8b:3d:
8f:82:b4:f0:20:cf:94:3b:dc:15:a8:a3:ff:c2:f0:c1:d4:84:
fd:74:ee:5c:fa:4d:19:3a:71:b6:52:e7:2e:c2:b4:52:3c:e7:
9d:47:dc:bb:64:57:81:cb:06:47:ed:9a:29:8b:93:c9:30:b6:
82:d4:5f:7a:a2:60:09:d1:97:d1:2d:24:8d:00:f8:83:18:80:
f9:d2:13:13:ad:59:45:01:25:0a:20:a4:29:3d:18:2e:d0:fa:
93:16:1e:59:bc:68:28:f0:26:2f:9b:cd:7e:b9:47:fc:ff:16:
18:bf:97:5d:f6:7b:d6:02:e4:27:04:a6:d0:9a:4e:57:e7:fc:
bb:93:46:5a:2f:a9:21:a5:ae:aa:39:a1:b8:9b:a3:35:09:4c:
5b:66:13:53:33:eb:06:27:0b:03:51:4f:32:7c:fa:17:3b:b3:
cb:df:41:7a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUfFTwESySe40DljgvjOzXCgMpcGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA3MDMwNjAzMDFaFw0yNzA3MDIwNjA4MDFaMDMxMTAvBgNV
BAMTKDc1OUZENENDMzU5NEEwMEJDQTY0MjAxNUQ3MTQ4Qjk1NDJFMDZBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQg2KrwYKv4FYPz6D4kVGIsu4Z
ucmkJ4wBVa6VEXCGCI36TUQyvdkdR/oqTgkNpLKNdt2VZAeq6trmZk9dnHgBvHLr
DdlSJPrHkIcMBFYYoJz9lchMzx9W1njd2FgQkaq8jicNWeLnBiY9erZ2MJAOT1Sw
Ha1xKDdR7Q7Hr0joezBRQ9H6nVgkYpiDqKfj5N1AhXBv9yIAYgBueFumbWCE640F
Ts5Kk3k4H34bzJQRCnpCXrXKDPY1AOy6Lk0ko9pOalGSrjehpokKGZDHg3O4eOFM
CxhzQ87RzzUEAW3Kuv7T+gh9MQ+oo14O/5ig0aSYdJtibNyws5i6uPhgQZABAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUdZ/UzDWUoAvKZCAV1xSLlULganIwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTODIyMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALUpwTAN
BgkqhkiG9w0BAQsFAAOCAQEAcY2h+B+vuBYpCHM+lDueZ2MD7YA3tZ12mhdICedN
kehnRJIH4/eoHKKdCzIiAAdGw6M6F2MsvUkRJocybWtC3fG9yk+V3RKJzO/bn54W
oDfWPwvs+j8D4os9j4K08CDPlDvcFaij/8LwwdSE/XTuXPpNGTpxtlLnLsK0Ujzn
nUfcu2RXgcsGR+2aKYuTyTC2gtRfeqJgCdGX0S0kjQD4gxiA+dITE61ZRQElCiCk
KT0YLtD6kxYeWbxoKPAmL5vNfrlH/P8WGL+XXfZ71gLkJwSm0JpOV+f8u5NGWi+p
IaWuqjmhuJujNQlMW2YTUzPrBicLA1FPMnz6Fzuzy99Beg==
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:37:59 2026 by rpki-client