Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: bRQ2Utm2cAPWv/7jLCxl2mucp4rBOJZOOyKrMep0ETA=
Subject key identifier: A2:40:4B:6D:A1:CE:3C:3F:3A:D2:5B:99:53:31:4A:C5:68:09:AC:1E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 518B1CDE453B8BC841B110240AC71BAEBAC2C185
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
Signing time: Tue 25 Aug 2026 00:06:51 +0000
ROA not before: Tue 25 Aug 2026 00:01:51 +0000
ROA not after: Tue 24 Aug 2027 00:06:51 +0000
asID: 8075
IP address blocks: 82.41.194.0/24 maxlen: 24
2a13:9500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8b:1c:de:45:3b:8b:c8:41:b1:10:24:0a:c7:1b:ae:ba:c2:c1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 00:01:51 2026 GMT
Not After : Aug 24 00:06:51 2027 GMT
Subject: CN=A2404B6DA1CE3C3F3AD25B9953314AC56809AC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:63:41:50:85:aa:3c:13:87:df:ae:91:86:
0a:51:09:a1:4e:6f:09:93:b0:47:00:d6:d2:36:91:
aa:19:ed:39:7a:0a:3b:c9:bd:c5:bb:16:60:fe:5a:
f4:cb:9a:76:46:5b:b8:23:a6:96:2c:d2:f6:08:15:
6c:28:4c:09:63:a9:4d:76:e6:14:8b:63:6f:69:e4:
cc:b8:2b:3c:2d:01:7b:72:b8:ef:a3:45:0d:75:05:
aa:d8:08:f5:46:3b:29:80:a0:1a:75:c3:19:2f:5d:
dd:15:44:40:1d:1e:0b:f9:ed:a2:b0:46:be:d7:46:
b9:8b:15:82:1f:bc:a3:67:fc:0e:0a:01:9b:39:fa:
2f:03:6f:6f:68:95:89:71:1f:e0:01:09:ab:6f:65:
7a:53:4c:26:90:4d:b6:94:5a:3a:a0:d9:3c:31:44:
c7:22:82:46:40:eb:4b:03:91:89:04:7c:0f:77:1b:
69:dc:27:71:3d:23:ee:b5:6d:2f:94:86:53:b6:a3:
04:3d:73:c2:54:29:59:5f:a8:3b:f6:53:8e:a5:b0:
30:2c:ea:b2:58:40:10:a0:51:4d:5e:02:58:fc:73:
f7:82:fc:1d:2a:a7:81:fb:d5:9b:28:53:a4:73:87:
0e:76:c2:17:9b:5c:10:30:0b:05:0e:14:6a:4f:e4:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:40:4B:6D:A1:CE:3C:3F:3A:D2:5B:99:53:31:4A:C5:68:09:AC:1E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.194.0/24
IPv6:
2a13:9500:122::/48
Signature Algorithm: sha256WithRSAEncryption
9d:19:85:e6:e5:9e:38:35:dc:e6:29:db:19:d2:79:48:29:de:
07:81:1c:d2:b8:e3:39:e8:87:62:af:0e:fb:72:5f:9e:66:4f:
af:6a:9c:11:03:1f:aa:2f:6c:5e:3b:b6:f9:e6:00:31:1d:3a:
fa:de:aa:ac:c3:06:21:b8:55:78:cd:2d:0e:9f:68:e1:a5:2a:
9d:79:92:a3:a3:33:b2:6a:17:51:a8:8f:97:80:0c:9e:c2:cf:
87:25:05:19:e9:8b:a8:95:37:2d:fd:d4:4f:e1:9b:10:93:ef:
64:c9:0d:f7:1f:74:e4:ee:1c:b3:14:22:4b:7c:9f:83:8c:38:
2b:38:82:10:48:17:b7:58:7a:61:f5:82:36:52:37:0a:30:b2:
98:2a:70:59:99:51:c8:08:6c:92:7d:17:18:cf:72:79:65:0f:
8b:03:d9:26:4a:6a:36:e6:f4:37:de:57:70:ea:2c:f7:83:40:
0f:a3:ee:79:3b:42:76:7b:ea:12:a7:7a:e6:65:9e:2b:2a:ff:
d9:70:b8:2b:db:88:7a:f5:b0:35:de:e2:a8:23:74:b4:a5:a6:
29:24:ff:4c:a8:68:ca:bd:f8:a2:cd:e3:ad:b2:b7:d7:8a:a3:
5c:93:8e:10:eb:eb:0b:cf:2e:bf:05:9a:21:e4:3b:fb:3b:5c:
d0:3d:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:30:16 2026 by rpki-client