Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS8888.roa
File: AS8888.roa (raw, json)
Hash identifier: vFzQhzdcXF03Xb0gbb3LcRVtgVPQpt5v1DjzuR+KFCA=
Subject key identifier: 19:67:C7:CD:D5:59:F7:07:49:0A:F1:BE:E7:3C:1D:A7:4B:C8:F5:53
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 64A08BCF116D7847FC4964EA93AF2963948A687F
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS8888.roa
Signing time: Wed 29 Jul 2026 15:25:11 +0000
ROA not before: Wed 29 Jul 2026 15:20:11 +0000
ROA not after: Wed 28 Jul 2027 15:25:11 +0000
asID: 8888
IP address blocks: 201.4.32.0/19 maxlen: 24
201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a0:8b:cf:11:6d:78:47:fc:49:64:ea:93:af:29:63:94:8a:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:11 2026 GMT
Not After : Jul 28 15:25:11 2027 GMT
Subject: CN=1967C7CDD559F707490AF1BEE73C1DA74BC8F553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:19:dd:fb:21:0b:ce:00:d4:23:23:02:32:
e2:3f:fd:c3:3b:74:7f:57:70:ea:83:71:3c:32:88:
28:9d:88:fd:a6:6f:b9:71:5c:85:60:31:22:4d:af:
ef:23:75:d5:7b:63:90:b6:7e:dd:31:a9:29:f7:95:
d8:35:93:0b:7d:ac:44:07:2b:ff:7f:00:bd:dc:75:
f4:73:81:90:96:c5:22:61:af:cb:07:a5:eb:b9:0e:
c6:47:1c:d9:11:75:50:54:1a:21:38:f0:dd:05:d3:
24:c3:73:e4:07:05:a5:c6:71:62:80:a6:af:ff:b3:
db:aa:03:19:63:f8:79:01:93:8c:ee:df:81:f9:63:
f4:1d:68:ab:bf:4b:ff:2a:79:29:bf:c2:fb:b6:87:
01:db:43:81:1a:b3:f7:b5:74:b6:8e:12:f7:09:4e:
04:4b:b7:13:61:44:c6:33:ff:67:27:d5:70:9f:fa:
be:91:78:18:e2:da:8c:4c:f9:8c:b3:a6:db:9a:eb:
73:90:6b:5b:0f:9a:0c:8f:7c:c4:fd:5b:b1:21:8d:
0d:54:ec:f2:2b:e0:cc:4c:57:7e:15:42:2c:ee:bc:
a4:5b:24:e2:90:b7:3e:04:20:a7:ca:c4:c5:d7:29:
37:3d:c9:19:e3:09:f7:c4:60:e3:76:ef:5b:e1:15:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:C7:CD:D5:59:F7:07:49:0A:F1:BE:E7:3C:1D:A7:4B:C8:F5:53
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS8888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
70:47:57:8e:2c:92:40:98:e8:ef:ca:27:17:21:78:6e:4c:ae:
71:6b:27:b2:38:e8:d0:cc:bc:50:b5:2c:5f:09:ad:8e:60:d0:
f9:52:f4:91:0d:c7:35:6a:f5:48:51:d4:3a:76:84:d7:53:4a:
51:51:82:2f:fa:c7:74:dd:5c:8f:9f:d3:9d:20:ae:bd:58:d5:
37:9e:08:85:40:f3:19:83:cf:a4:6a:7c:c5:53:ab:79:e7:1b:
a9:50:74:ec:df:f2:b8:79:d9:1c:f5:ad:33:3b:a0:c9:63:f0:
a7:71:dd:d7:a7:05:47:71:06:68:68:8b:69:7e:71:24:96:ff:
ae:1a:4d:77:a6:92:02:33:0c:b8:88:f5:ce:1d:eb:55:4a:aa:
9b:63:d4:c8:00:19:b0:00:9b:0c:84:08:61:96:de:ba:54:36:
02:b5:53:3a:78:65:ba:15:57:65:22:5d:e0:40:03:60:1d:7f:
35:56:7e:18:19:ee:e8:21:71:23:9b:f5:08:48:0b:85:9f:6c:
dc:5c:bb:08:b7:2f:1a:99:2f:90:60:ce:2f:c0:34:62:cc:04:
28:a4:b4:6e:7d:85:b2:89:fc:ed:2f:43:25:87:3b:d3:dc:fa:
e5:97:32:2a:e1:9d:21:9b:21:3a:d6:8a:60:11:52:bf:d1:e5:
59:94:3e:7d
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUZKCLzxFteEf8SWTqk68pY5SKaH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjkxNTIwMTFaFw0yNzA3MjgxNTI1MTFaMDMxMTAvBgNV
BAMTKDE5NjdDN0NERDU1OUY3MDc0OTBBRjFCRUU3M0MxREE3NEJDOEY1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZxnd+yELzgDUIyMCMuI//cM7
dH9XcOqDcTwyiCidiP2mb7lxXIVgMSJNr+8jddV7Y5C2ft0xqSn3ldg1kwt9rEQH
K/9/AL3cdfRzgZCWxSJhr8sHpeu5DsZHHNkRdVBUGiE48N0F0yTDc+QHBaXGcWKA
pq//s9uqAxlj+HkBk4zu34H5Y/QdaKu/S/8qeSm/wvu2hwHbQ4Eas/e1dLaOEvcJ
TgRLtxNhRMYz/2cn1XCf+r6ReBji2oxM+Yyzptua63OQa1sPmgyPfMT9W7EhjQ1U
7PIr4MxMV34VQizuvKRbJOKQtz4EIKfKxMXXKTc9yRnjCffEYON271vhFXX1AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUGWfHzdVZ9wdJCvG+5zwdp0vI9VMwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTODg4OC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBckEIAME
BckyIDANBgkqhkiG9w0BAQsFAAOCAQEAcEdXjiySQJjo78onFyF4bkyucWsnsjjo
0My8ULUsXwmtjmDQ+VL0kQ3HNWr1SFHUOnaE11NKUVGCL/rHdN1cj5/TnSCuvVjV
N54IhUDzGYPPpGp8xVOreecbqVB07N/yuHnZHPWtMzugyWPwp3Hd16cFR3EGaGiL
aX5xJJb/rhpNd6aSAjMMuIj1zh3rVUqqm2PUyAAZsACbDIQIYZbeulQ2ArVTOnhl
uhVXZSJd4EADYB1/NVZ+GBnu6CFxI5v1CEgLhZ9s3Fy7CLcvGpkvkGDOL8A0YswE
KKS0bn2Fson87S9DJYc709z65ZcyKuGdIZshOtaKYBFSv9HlWZQ+fQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:13 2026 by rpki-client