Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: e/ENCC+cRXGBCBg2Gj27u0JZINNfGYzoV8sgtfnghzE=
Subject key identifier: 24:B0:FE:FC:01:A0:82:3A:67:59:6C:7C:F8:E6:A5:A6:78:DA:0A:C2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 705122DFDD6BCF1596FF5835A0A592DFAE5AC5A1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS8075.roa
Signing time: Tue 14 Oct 2025 20:27:37 +0000
ROA not before: Tue 14 Oct 2025 20:22:37 +0000
ROA not after: Tue 13 Oct 2026 20:27:37 +0000
asID: 8075
IP address blocks: 2a0f:85c1:d6d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:51:22:df:dd:6b:cf:15:96:ff:58:35:a0:a5:92:df:ae:5a:c5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:22:37 2025 GMT
Not After : Oct 13 20:27:37 2026 GMT
Subject: CN=24B0FEFC01A0823A67596C7CF8E6A5A678DA0AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:fe:1c:93:e8:c0:a1:7b:0a:98:cf:c2:6b:
3d:02:d4:5f:ad:ff:2f:43:58:69:5a:d4:c8:78:9a:
8f:26:f0:44:a9:60:31:7e:38:90:64:bc:73:6f:20:
2a:de:c8:22:6f:75:66:a6:8e:83:61:a5:3f:a1:6e:
2e:f1:fc:a4:b4:78:50:97:4f:fb:21:f7:1b:81:d4:
e8:4a:1c:cd:d5:5e:b9:f8:c2:37:30:ed:cb:fd:a2:
5f:23:65:a4:31:c4:95:0a:54:4f:19:25:fd:dc:25:
26:0f:13:b5:41:2f:23:d1:dd:34:38:10:8f:5c:03:
10:e6:d4:e5:3e:38:dc:09:2f:24:1b:7c:c6:78:7a:
80:50:c2:8f:2e:02:6d:14:a3:bd:76:ea:6a:3f:65:
3c:16:5d:ab:62:d8:00:93:95:e8:1c:61:d8:f4:98:
bd:44:c7:34:77:48:80:a9:51:c0:55:30:e0:fd:39:
37:26:5b:10:d4:41:8c:93:2e:e8:32:49:f6:70:e6:
2e:4f:cb:81:70:80:4d:91:a5:4c:4b:b6:36:e9:b9:
9d:96:4f:e7:c3:15:bc:cf:d5:57:16:6b:a1:05:40:
47:a6:16:24:f7:b4:66:8d:de:27:f9:41:97:97:1c:
e8:4c:1f:9a:8e:21:80:11:e4:ed:fb:60:89:24:83:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:FE:FC:01:A0:82:3A:67:59:6C:7C:F8:E6:A5:A6:78:DA:0A:C2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d6d::/48
Signature Algorithm: sha256WithRSAEncryption
9f:99:f0:bc:2e:77:26:e1:f3:ef:27:59:c2:16:b3:4c:48:cd:
cc:cc:57:3c:a7:d7:ee:9d:3a:b2:17:33:dc:f5:8b:ac:fc:d6:
7d:3f:67:17:88:4f:ce:0c:2a:88:bb:c0:55:b5:24:a3:33:56:
35:c9:0d:bc:8d:29:5a:2c:58:3c:5f:d2:33:3d:08:72:94:a0:
23:52:16:d4:c6:f1:00:e2:35:16:03:86:56:f3:89:cc:33:82:
95:ae:aa:01:24:dd:e1:32:f4:d2:26:26:1e:f7:26:1f:72:5a:
27:86:b8:41:b4:a5:85:25:91:4d:fa:80:c4:92:0d:73:0c:e8:
16:2c:fb:60:05:16:fe:45:ed:6e:1c:33:8f:60:01:40:84:76:
69:66:da:29:21:af:52:cb:79:e1:98:30:49:0d:e6:a3:1a:98:
f6:02:54:9e:87:9b:f0:c4:ad:91:a8:87:1b:87:57:87:24:98:
53:2c:da:a7:40:41:52:26:3a:85:e2:1f:e2:e6:e3:6f:8d:d8:
f2:ea:a5:39:db:d7:46:95:87:05:2e:2d:26:60:22:1b:63:c4:
2e:9a:bc:7f:69:01:11:d7:63:32:8d:95:79:da:d4:93:14:fc:
08:db:d7:c7:fb:bd:c0:7f:07:9f:8e:f7:65:50:f8:f0:27:9a:
8a:db:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:07:57 2025 by rpki-client