Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8796.roa
File: AS8796.roa (raw, json)
Hash identifier: yZQbcx3fw16F610AAvgRwos18clDxvovNhoWwTo+wLw=
Subject key identifier: C5:40:FB:D9:C0:72:27:80:3C:3B:9F:9C:79:38:0D:9C:7F:51:A4:0E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 602FE6C4CA8EF27BBCC4C4436E20D3AB93790790
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8796.roa
Signing time: Wed 01 Jul 2026 04:26:09 +0000
ROA not before: Wed 01 Jul 2026 04:21:09 +0000
ROA not after: Wed 30 Jun 2027 04:26:09 +0000
asID: 8796
IP address blocks: 82.40.32.0/22 maxlen: 22
178.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2f:e6:c4:ca:8e:f2:7b:bc:c4:c4:43:6e:20:d3:ab:93:79:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 1 04:21:09 2026 GMT
Not After : Jun 30 04:26:09 2027 GMT
Subject: CN=C540FBD9C07227803C3B9F9C79380D9C7F51A40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:af:84:f5:35:c2:c2:70:97:2d:6a:9f:75:
40:8e:94:62:0d:f5:86:a3:1e:bb:8f:e0:a8:5a:3a:
1f:0b:a0:0d:e4:16:cc:ea:d5:03:a1:d2:47:86:54:
94:d0:49:17:27:2a:df:7a:12:26:37:74:e3:1f:2f:
d5:7f:cd:4a:9c:14:24:77:39:73:7e:27:ff:15:53:
58:a7:17:c8:c2:09:be:45:7c:88:08:45:62:5a:8e:
2a:39:50:05:78:e6:aa:20:ff:0c:02:69:9a:42:64:
6f:fe:9b:ce:57:a4:17:94:3c:eb:77:3f:b0:20:3f:
c7:39:d9:24:2f:7f:bf:90:c3:35:54:6c:7c:72:af:
15:44:a4:0f:d6:6c:d4:b5:d1:93:ee:7c:8e:1c:d6:
09:b4:0b:31:31:6b:6e:ef:6a:d9:b4:4f:da:03:e5:
da:f8:f4:a3:72:72:56:d7:6b:e6:42:66:9d:9b:ea:
9a:21:04:a3:0c:10:ca:5f:a7:8b:73:c8:52:32:49:
4d:3a:ec:9a:ba:ca:dd:85:24:49:d1:0f:13:86:fe:
0d:dd:b5:8c:2f:3a:d4:b6:fb:87:41:c6:02:e5:e0:
16:e4:6e:f4:c1:99:cb:86:9f:8d:c6:79:96:64:22:
b7:27:51:a9:23:d5:46:07:ff:3e:34:25:4a:50:39:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:FB:D9:C0:72:27:80:3C:3B:9F:9C:79:38:0D:9C:7F:51:A4:0E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.32.0/22
178.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0d:61:e2:c1:32:d8:d0:cb:a7:ee:89:1d:a9:92:d5:8a:c7:
72:2d:94:81:d2:0c:de:35:81:88:a3:e3:95:92:95:f8:a8:e7:
d6:33:c3:66:fb:7d:9a:c4:42:94:7e:8a:67:10:db:34:9e:f9:
87:22:b8:ba:17:fb:5c:b4:c7:9b:ad:89:1d:6a:81:2f:43:91:
39:22:f5:af:1f:8d:f3:6e:0d:d4:21:b2:7b:70:2e:7a:80:e9:
0f:8b:04:82:63:8c:ad:35:80:d4:64:44:89:0b:3c:4a:5b:66:
a5:18:f5:d8:39:af:db:ba:a1:7e:25:94:99:82:8f:d9:8e:ec:
55:de:fa:b4:88:08:0b:d7:98:66:79:e8:f9:e8:9e:d5:5f:2a:
24:3a:1e:9d:2a:f2:59:b3:00:ad:db:1c:33:04:25:c9:88:f9:
de:86:ce:52:4f:14:f1:79:87:8b:af:01:01:ce:4e:c9:0e:d0:
4a:3e:4b:17:c5:81:b8:55:f0:22:f7:9b:f4:9b:4a:8b:7f:1a:
86:a8:94:10:ba:9e:91:38:d5:c8:09:90:94:c4:57:5d:dd:e2:
20:16:83:de:e2:4f:bb:a9:60:cd:23:87:51:79:bf:7f:08:de:
91:ca:28:cc:87:dd:8e:92:c5:5b:d2:0b:21:48:03:e5:26:e9:
08:c0:a8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client