Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8772.roa
File: AS8772.roa (raw, json)
Hash identifier: 52aiObusHl3XO44bf5DJhI9wFL3JNQOxMzUK0h60XT4=
Subject key identifier: 9B:FD:DC:F1:1E:54:14:B1:2D:BB:4E:A6:7B:FB:2F:55:26:DA:05:69
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 67DBA30F6717FF124F73C05D575987B97726CE9A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8772.roa
Signing time: Wed 26 Aug 2026 18:44:34 +0000
ROA not before: Wed 26 Aug 2026 18:39:34 +0000
ROA not after: Wed 25 Aug 2027 18:44:34 +0000
asID: 8772
IP address blocks: 178.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:db:a3:0f:67:17:ff:12:4f:73:c0:5d:57:59:87:b9:77:26:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 18:39:34 2026 GMT
Not After : Aug 25 18:44:34 2027 GMT
Subject: CN=9BFDDCF11E5414B12DBB4EA67BFB2F5526DA0569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:63:c6:a1:27:cd:8a:1c:29:e2:16:5c:27:
2a:90:0d:e9:9a:66:11:50:08:4c:53:3d:8b:f1:15:
65:59:81:f9:d9:49:2b:20:b9:8c:f1:cd:1f:d6:0b:
a9:0d:37:ee:b8:22:14:81:69:b9:e9:a8:10:03:38:
36:43:d7:47:a9:95:1d:6c:e5:1b:de:59:a4:cc:73:
b9:15:75:b8:d8:72:e9:42:ea:2a:65:11:4c:cb:d3:
19:c7:27:54:06:c4:dc:d7:c5:16:0e:bf:1d:e8:03:
4e:dc:8c:20:a0:09:e7:df:ed:1d:53:8f:3c:92:62:
4e:6a:55:b0:f0:24:21:cf:32:3a:db:c4:7a:70:4a:
b8:2b:e0:42:f9:26:9c:f1:4c:ea:19:44:29:0f:12:
80:5d:7b:34:bf:9b:c4:e5:50:61:f6:d9:74:ec:be:
93:36:6d:87:c3:c2:29:5e:5e:14:38:56:00:b1:a4:
58:47:72:3e:34:fa:f7:a5:04:33:ae:8e:f5:83:aa:
81:a3:0c:21:6e:79:44:2b:aa:fc:e9:93:b0:28:48:
4c:bc:c1:de:82:17:10:fb:1e:d3:67:1a:e1:1e:7a:
75:63:e9:ce:de:62:aa:fb:eb:37:09:70:32:2f:25:
1c:47:76:06:59:16:17:3d:e8:1d:64:ea:46:ba:12:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FD:DC:F1:1E:54:14:B1:2D:BB:4E:A6:7B:FB:2F:55:26:DA:05:69
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:aa:5b:70:a3:4d:2e:d6:e8:a4:63:72:95:96:75:2f:d6:75:
ce:e0:1c:ec:59:7f:ab:b1:a2:7f:10:ee:ad:9f:02:87:41:48:
5e:9e:71:08:8c:2d:ae:3f:b9:43:89:f0:0e:94:34:6f:cc:31:
2e:b3:ff:de:90:5d:e8:f4:28:4b:4b:05:1b:88:f5:ec:b5:4c:
12:0b:7d:b3:15:59:50:e1:75:de:20:9f:ef:5d:85:53:ff:cc:
27:c4:76:fa:03:f2:c2:8d:4c:29:d5:8c:38:42:40:41:34:f9:
54:76:85:f0:02:a1:df:54:99:df:cb:9e:6d:b6:8e:e3:ee:d3:
25:7f:ef:61:94:3b:f5:a9:26:da:1b:4c:b3:61:56:dc:47:2d:
82:9c:c9:20:5f:21:5c:df:32:d0:ed:15:a9:6b:ba:f7:c5:1a:
8e:41:06:d3:8a:ba:79:bc:5d:cc:e8:6c:cd:a5:ee:4e:21:37:
12:8e:e6:ed:4e:18:ee:cb:bc:e4:e3:b3:11:97:fb:c1:45:93:
1d:ba:08:3b:b4:ef:8a:83:68:df:02:bf:70:e9:75:dd:f7:e9:
66:af:22:64:09:50:d1:7b:82:a3:7a:be:54:64:68:f6:8a:4a:
cb:c2:de:0a:42:8c:0c:69:c3:e0:32:82:ce:c0:a2:27:bd:c9:
c8:55:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:07:13 2026 by rpki-client