Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: 3EhgJ6/6a9SgnwY8FYN2Vio1uGydhSHEpV0Oxhpwqis=
Subject key identifier: 4A:52:6F:A9:9F:1D:4B:1C:18:49:81:CA:5C:67:FD:B2:22:6E:36:49
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0E9A2E25F7A42AD51BDCBF7CAC048FDBFA53E319
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8075.roa
Signing time: Fri 06 Nov 2026 14:49:40 +0000
ROA not before: Fri 06 Nov 2026 14:44:40 +0000
ROA not after: Fri 05 Nov 2027 14:49:40 +0000
asID: 8075
IP address blocks: 141.11.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 00:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9a:2e:25:f7:a4:2a:d5:1b:dc:bf:7c:ac:04:8f:db:fa:53:e3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 6 14:44:40 2026 GMT
Not After : Nov 5 14:49:40 2027 GMT
Subject: CN=4A526FA99F1D4B1C184981CA5C67FDB2226E3649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:99:73:76:06:c1:25:08:b1:f1:3b:2a:84:
69:db:68:7c:59:af:39:bf:9b:c3:79:d1:ad:e4:f1:
50:10:92:11:ed:45:e0:2a:e7:61:84:41:26:c5:03:
7a:cc:62:e4:90:43:f3:9d:b5:23:8e:8a:56:58:31:
13:fb:d0:b3:9c:5b:bf:40:48:c2:84:f1:62:09:40:
6a:0e:b2:86:74:92:e3:98:d7:72:88:4c:35:3d:e4:
62:96:ab:2a:c0:59:74:90:69:f3:db:50:fe:0b:46:
68:e3:54:11:57:af:8c:ca:b6:03:83:d8:98:d5:07:
33:2a:c8:39:5a:9e:05:21:03:00:18:ce:78:34:02:
93:e1:7c:ac:7f:6c:26:5b:61:14:4f:31:76:f6:25:
22:db:08:91:76:df:94:59:00:49:b7:76:af:7b:97:
75:e0:b5:a6:21:df:5a:65:0f:a0:ba:6a:af:12:6e:
2c:db:fa:52:72:7b:c5:0d:ee:4e:3c:da:5e:6c:aa:
d7:cd:08:fe:0d:38:99:17:80:e5:41:c9:4d:c0:43:
92:d3:1d:f3:bc:0a:7c:26:ed:a8:2c:36:73:09:b8:
73:8d:e3:b6:ae:c3:d1:ca:5b:68:fb:5d:0d:3d:57:
ec:3d:2c:d3:02:b1:b0:85:76:d8:bd:b5:60:cc:a5:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:6F:A9:9F:1D:4B:1C:18:49:81:CA:5C:67:FD:B2:22:6E:36:49
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.196.0/24
Signature Algorithm: sha256WithRSAEncryption
36:09:b5:90:2d:be:18:b1:be:ac:91:3f:ea:d0:ad:9b:4e:d9:
8c:8f:c7:5e:cf:ff:49:52:4a:e6:75:6f:2d:8a:7a:c5:a2:9d:
6c:ff:1a:3d:01:94:be:48:c7:bb:12:ec:b0:e3:ff:c6:59:2d:
3f:17:d7:0f:ae:98:61:c1:51:51:18:ff:ff:42:5b:dd:44:c9:
d2:d3:af:34:8d:39:70:43:c9:7a:f7:3f:b8:26:f0:d2:7e:86:
99:9d:3a:df:c1:5b:2f:46:c0:b6:54:36:05:b2:d3:46:f8:75:
5a:7b:92:3f:83:d6:9f:26:75:3b:a6:00:91:5d:63:c9:bf:a0:
08:17:1b:94:24:82:f2:c7:13:8c:2b:0b:be:35:d9:2d:a8:ac:
e6:80:67:e8:b8:b1:36:74:ed:12:2a:2c:17:b9:ea:9c:ed:a3:
12:52:59:d1:36:5c:f2:a0:3d:34:7d:a1:21:e6:7e:a9:2f:60:
bb:cf:b9:1b:02:5c:9e:81:9f:e9:03:a9:08:ef:df:fe:5f:6e:
6c:87:7f:f5:59:1b:dc:73:d4:63:42:5f:e9:5a:df:da:09:90:
b8:c5:c1:27:37:ef:3c:9f:5c:3a:20:70:c8:25:ca:59:2a:c3:
72:e4:24:da:a6:98:c1:d3:a5:7e:e0:bb:7f:a4:ba:55:1c:f3:
95:83:2e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 17:41:50 2026 by rpki-client