Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8708.roa
File: AS8708.roa (raw, json)
Hash identifier: AISmi8TDtARHXKtOuhPudgf2hE2AUXnVZpdNwnLwdLQ=
Subject key identifier: 46:DA:71:48:84:9F:DD:6F:22:8A:F6:53:E8:72:4B:B3:C7:5A:62:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 799CB68D2DC2C77C08BE1F6EE357F6B3DD2AC0AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8708.roa
Signing time: Mon 03 Aug 2026 07:04:54 +0000
ROA not before: Mon 03 Aug 2026 06:59:54 +0000
ROA not after: Mon 02 Aug 2027 07:04:54 +0000
asID: 8708
IP address blocks: 2a13:9500:1b2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9c:b6:8d:2d:c2:c7:7c:08:be:1f:6e:e3:57:f6:b3:dd:2a:c0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 3 06:59:54 2026 GMT
Not After : Aug 2 07:04:54 2027 GMT
Subject: CN=46DA7148849FDD6F228AF653E8724BB3C75A6255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:c4:b7:80:d8:94:06:b8:5a:f2:ad:00:75:
7b:ab:aa:2b:4f:3f:9b:96:4d:95:55:a3:27:3b:c8:
09:5e:28:70:8f:f0:d5:7c:78:28:84:c3:cd:65:e0:
27:e3:88:7a:d1:0d:0f:3a:5f:7a:01:00:26:d1:e3:
46:2c:38:f9:fc:e5:8f:f1:83:ad:3a:9c:3c:71:48:
cf:e0:45:fd:ef:ae:60:c7:61:b8:da:17:02:39:1a:
65:40:90:0b:76:cb:90:6c:8c:1a:f1:c5:28:21:93:
ea:a8:c1:0b:b9:42:6d:bc:2d:f4:8f:48:d5:f1:81:
8a:b8:82:04:8a:02:f1:3e:d2:ca:a3:3e:28:fb:b9:
d4:64:77:f4:67:6c:05:c4:27:ac:2f:bc:47:5c:89:
3f:44:23:e0:09:b3:f3:c0:88:35:7e:cf:03:0e:6c:
a1:f8:50:d9:42:6f:f1:47:bb:cd:ca:e1:58:c6:63:
02:20:a5:91:ed:8c:c5:ab:45:c0:80:d9:e1:75:d1:
5c:7f:98:c7:87:03:e1:13:92:27:1c:3b:ee:30:ae:
99:e4:c6:48:af:0d:d9:45:c8:44:5f:f9:8e:2f:b8:
83:fd:21:59:2c:66:ed:0f:d5:68:00:2e:2a:3e:e7:
78:d1:28:a5:42:92:84:22:83:55:05:ad:49:be:4b:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:71:48:84:9F:DD:6F:22:8A:F6:53:E8:72:4B:B3:C7:5A:62:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8708.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1b2::/48
Signature Algorithm: sha256WithRSAEncryption
1e:39:ae:5b:88:aa:f4:50:b4:a9:63:1d:a2:e7:23:f3:c9:6c:
43:ca:ef:f7:7a:6c:b4:f4:d4:86:0f:a0:fa:85:49:b4:ec:0a:
c9:50:64:00:8a:48:99:84:62:82:a2:65:7d:1c:65:91:e6:4c:
3c:5f:96:e5:f3:43:c3:9d:51:47:7d:8a:4c:a1:df:3c:43:c2:
25:88:7c:82:c3:8d:a2:66:f2:0c:b9:75:f3:7e:d1:a5:93:bd:
cc:99:e5:ba:9b:15:a8:87:bc:3f:9b:b1:b8:53:de:86:80:73:
18:46:7b:54:2a:6e:f2:be:91:8d:a0:ea:d9:04:36:9e:35:ad:
5b:f1:28:07:75:85:72:55:61:38:e9:55:d1:bd:37:bf:ac:1a:
c0:c1:71:d5:6b:b0:92:8c:86:44:08:2b:52:95:8e:c1:9c:4b:
db:7c:93:86:20:ad:90:5f:73:31:d7:05:7e:4f:2c:28:95:ff:
35:58:b5:c5:36:76:72:1a:26:c3:fb:8f:45:90:99:51:dd:6b:
e1:6c:b0:5a:ff:50:29:74:6b:93:49:c6:aa:79:36:0d:27:d7:
40:92:75:78:81:55:1a:ca:0f:8b:ac:07:0b:97:17:e9:68:a6:
1d:3d:82:59:81:98:06:2a:5d:b0:12:2f:ee:b8:f2:f1:c0:69:
8d:1c:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:15:59 2026 by rpki-client