Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: EVxglS+oiIRVxmDKp40Dl3oGbmL3YAbhYCq09VveieE=
Subject key identifier: D4:FF:0B:65:34:CA:EA:98:8C:91:A2:FC:92:49:FC:05:80:D2:02:62
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 59A0D3850DAAC807D8763D36A16EEE2CD0C103FD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
Signing time: Mon 20 Apr 2026 16:07:05 +0000
ROA not before: Mon 20 Apr 2026 16:02:05 +0000
ROA not after: Mon 19 Apr 2027 16:07:05 +0000
asID: 8075
IP address blocks: 82.41.194.0/24 maxlen: 24
84.75.18.0/24 maxlen: 24
84.75.19.0/24 maxlen: 24
2a13:9500:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a0:d3:85:0d:aa:c8:07:d8:76:3d:36:a1:6e:ee:2c:d0:c1:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 20 16:02:05 2026 GMT
Not After : Apr 19 16:07:05 2027 GMT
Subject: CN=D4FF0B6534CAEA988C91A2FC9249FC0580D20262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:d3:0b:e9:81:00:2b:9f:f1:51:56:d3:e6:
c3:f8:51:e1:6a:b9:7f:e0:64:5f:e0:83:03:fd:e3:
3a:d0:ee:f1:af:fd:8a:1a:6d:89:1d:49:c6:50:79:
4d:78:6a:dd:d7:72:c2:98:52:aa:8c:b0:40:27:28:
9e:fa:10:97:80:90:25:fa:97:2c:ea:77:0b:a4:43:
bb:91:03:4c:da:0d:b9:46:40:26:b9:5b:a9:5b:7c:
a2:2a:b0:57:fe:9b:85:bb:34:22:1f:b4:0d:71:56:
56:4b:44:71:a8:43:44:d8:f8:0a:cf:55:9e:c4:d6:
2b:1c:76:95:90:9a:8b:1a:d0:48:ec:eb:35:c3:a4:
2a:0f:9e:aa:97:0f:a8:09:06:8e:d1:c6:81:57:35:
28:74:3e:cb:eb:c6:15:ae:04:50:e1:ff:80:ec:7a:
45:c4:af:71:35:9d:40:ca:9d:9c:98:69:a1:b9:9a:
f7:45:cb:f9:22:4a:33:ba:1f:66:df:40:eb:5e:e3:
6a:fb:f6:d3:42:54:76:1e:61:6d:23:ae:93:c9:59:
90:d7:19:84:dc:14:dd:f8:2f:14:90:b4:3f:c8:a5:
c7:a5:55:28:00:04:8e:83:3c:85:dc:69:55:65:4c:
b4:60:b3:7e:8a:16:35:49:a4:4d:bb:c2:e5:0c:a1:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:0B:65:34:CA:EA:98:8C:91:A2:FC:92:49:FC:05:80:D2:02:62
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.194.0/24
84.75.18.0/23
IPv6:
2a13:9500:122::/48
Signature Algorithm: sha256WithRSAEncryption
5e:f7:98:9e:96:f6:2b:3c:68:50:16:b5:d2:aa:f3:62:a2:08:
01:d4:12:bf:2f:35:ff:2b:d2:28:b3:3c:98:cf:95:d0:9f:c2:
3d:ab:ea:5e:5d:1d:a8:10:30:db:14:82:fd:39:b8:dc:4b:de:
7e:ec:1a:3a:0a:97:af:6d:52:a3:9f:43:24:e6:c2:b9:d6:f9:
89:03:a0:8b:e0:f7:f0:98:6a:fa:74:0f:12:d6:ee:ab:d9:8c:
f9:e8:15:12:0c:81:82:df:85:ed:8c:97:80:fa:26:b6:61:0c:
b6:d8:1c:0f:d5:27:5c:aa:59:e3:35:d4:ff:5a:bc:0f:c9:5e:
5b:bb:79:98:5a:03:29:f3:90:87:20:f2:4f:6d:55:8f:80:59:
9d:14:6d:18:27:ce:2f:e8:47:a1:5c:4d:e7:b4:e3:a2:52:1f:
fd:9d:52:23:4f:d6:bd:8f:ba:46:98:84:2b:99:84:82:bd:91:
7c:b8:28:63:da:bd:53:5a:86:b1:c0:59:6c:20:54:f4:a5:bb:
d9:f2:3b:60:28:2c:b2:43:72:93:e2:f7:36:5d:70:76:b1:04:
ea:05:54:90:39:af:c1:b2:4e:d8:55:58:85:51:b3:d7:9e:1b:
97:3f:f1:35:a3:6a:f2:3c:b0:c8:24:9b:a8:b4:e4:d3:1c:b0:
b2:f6:b1:2d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUWaDThQ2qyAfYdj02oW7uLNDBA/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjAxNjAyMDVaFw0yNzA0MTkxNjA3MDVaMDMxMTAvBgNV
BAMTKEQ0RkYwQjY1MzRDQUVBOTg4QzkxQTJGQzkyNDlGQzA1ODBEMjAyNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgtML6YEAK5/xUVbT5sP4UeFq
uX/gZF/ggwP94zrQ7vGv/YoabYkdScZQeU14at3XcsKYUqqMsEAnKJ76EJeAkCX6
lyzqdwukQ7uRA0zaDblGQCa5W6lbfKIqsFf+m4W7NCIftA1xVlZLRHGoQ0TY+ArP
VZ7E1iscdpWQmosa0Ejs6zXDpCoPnqqXD6gJBo7RxoFXNSh0PsvrxhWuBFDh/4Ds
ekXEr3E1nUDKnZyYaaG5mvdFy/kiSjO6H2bfQOte42r79tNCVHYeYW0jrpPJWZDX
GYTcFN34LxSQtD/IpcelVSgABI6DPIXcaVVlTLRgs36KFjVJpE27wuUMoR2HAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQU1P8LZTTK6piMkaL8kkn8BYDSAmIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTODA3NS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAFIpwgME
AVRLEjAPBAIAAjAJAwcAKhOVAAEiMA0GCSqGSIb3DQEBCwUAA4IBAQBe95ielvYr
PGhQFrXSqvNioggB1BK/LzX/K9IoszyYz5XQn8I9q+peXR2oEDDbFIL9ObjcS95+
7Bo6CpevbVKjn0Mk5sK51vmJA6CL4PfwmGr6dA8S1u6r2Yz56BUSDIGC34XtjJeA
+ia2YQy22BwP1SdcqlnjNdT/WrwPyV5bu3mYWgMp85CHIPJPbVWPgFmdFG0YJ84v
6EehXE3ntOOiUh/9nVIjT9a9j7pGmIQrmYSCvZF8uChj2r1TWoaxwFlsIFT0pbvZ
8jtgKCyyQ3KT4vc2XXB2sQTqBVSQOa/Bsk7YVViFUbPXnhuXP/E1o2ryPLDIJJuo
tOTTHLCy9rEt
-----END CERTIFICATE-----
Generated at Tue May 12 22:37:17 2026 by rpki-client