Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: Gzk/L1BmlRpTzGHnEwE7hGGH1YfeK/FXboecTfHEGa0=
Subject key identifier: 76:65:64:82:59:56:33:EF:2D:75:54:7E:8B:35:D8:DB:67:D4:21:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4D95CABF213537A2D9B1FC13F032543ED7DD2FFA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
Signing time: Wed 16 Sep 2026 13:23:10 +0000
ROA not before: Wed 16 Sep 2026 13:18:10 +0000
ROA not after: Wed 15 Sep 2027 13:23:10 +0000
asID: 20473
IP address blocks: 148.135.161.0/24 maxlen: 24
150.241.216.0/21 maxlen: 24
162.141.12.0/24 maxlen: 24
168.222.30.0/24 maxlen: 24
168.222.89.0/24 maxlen: 24
168.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:95:ca:bf:21:35:37:a2:d9:b1:fc:13:f0:32:54:3e:d7:dd:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 16 13:18:10 2026 GMT
Not After : Sep 15 13:23:10 2027 GMT
Subject: CN=76656482595633EF2D75547E8B35D8DB67D42110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:c1:01:5f:3e:32:9b:56:6e:9f:f7:92:d1:
b1:95:75:1b:39:1c:82:df:fd:31:9a:96:1d:c9:2c:
c2:6a:bf:43:7d:5b:68:33:68:05:8d:86:99:00:24:
e9:e1:67:98:2f:24:3f:0e:18:02:86:55:bd:d7:75:
76:d8:e1:15:81:4b:2b:65:32:5c:6b:97:c8:ad:d1:
a4:22:1e:53:2c:56:9c:f4:ed:c4:51:8c:b0:2a:40:
27:04:90:11:b3:03:4a:c9:ed:da:af:ea:e0:26:55:
ce:9d:83:58:f5:18:b1:2f:63:1a:5c:be:48:58:e3:
b6:ab:83:07:ef:31:ac:63:0f:6c:67:af:2c:87:30:
67:ef:ec:3d:6e:17:2e:96:8e:90:a6:3a:7d:ea:e4:
83:8e:54:7c:41:75:47:85:78:87:28:48:c5:e4:be:
b8:81:4b:47:a4:88:6d:bd:f8:dc:02:15:fa:f5:9b:
df:65:8a:07:94:0b:06:fd:f3:f0:de:00:01:32:1d:
64:d1:af:fe:17:7d:11:86:a3:46:f5:62:06:b7:38:
05:99:25:e0:db:6c:66:30:da:32:cf:ff:04:58:73:
b8:7e:6b:88:12:8d:9a:4e:2d:d7:8e:f7:9e:71:0d:
b0:1e:24:85:29:eb:e8:64:e1:99:09:60:21:b7:6a:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:65:64:82:59:56:33:EF:2D:75:54:7E:8B:35:D8:DB:67:D4:21:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.161.0/24
150.241.216.0/21
162.141.12.0/24
168.222.30.0/24
168.222.89.0/24
168.222.95.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d7:ee:a2:8f:77:c2:d9:29:04:1a:c3:17:21:6a:72:d9:ee:
c2:0a:5f:53:22:50:d8:b8:b0:af:46:1f:cb:e3:78:73:fb:dc:
33:af:6a:4f:ef:76:a5:e6:a4:4c:b8:39:aa:61:68:3b:d0:f6:
75:64:2a:70:83:82:7b:66:67:2f:cc:f8:38:bd:a4:a8:db:09:
e8:f7:37:6d:72:e1:04:ea:59:29:f9:1b:25:18:bc:0e:26:b0:
66:13:10:d1:63:0f:2a:8b:5a:7a:04:a0:d4:17:17:77:0a:75:
12:47:a6:d1:d0:35:17:20:e1:5b:64:67:71:c2:ab:c5:60:f2:
bb:30:09:27:57:4b:07:00:8e:70:3f:1a:09:48:fe:f3:7c:bc:
07:01:be:8a:d1:2d:22:9a:f6:94:ba:4c:6c:4c:4f:00:9e:3c:
ca:bc:f8:11:a8:28:98:66:09:96:7e:78:22:70:ff:76:43:b0:
4b:05:82:0b:d3:1a:6c:bd:e5:95:c1:ca:3e:ed:bc:65:51:a5:
e8:b5:25:97:7d:b1:ba:98:26:d8:85:29:be:69:5f:6e:f5:0e:
92:11:88:35:6a:76:ce:45:a8:d3:a5:ee:7c:8e:f1:bf:66:58:
86:9a:78:36:84:77:39:71:51:a9:8f:3b:34:d1:ed:82:d1:b8:
df:b8:8e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:19:26 2026 by rpki-client