Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20648.roa
File: AS20648.roa (raw, json)
Hash identifier: tkNEld+qWnncgTb1xJKAeXJ1hslymCMzE9v8mxuBSf8=
Subject key identifier: 45:7F:1A:A8:07:3E:6E:75:6B:6F:28:94:8E:FF:2F:40:39:B6:AE:72
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 171F8F72647B196F5E40D6D65CD89FC5570C21C9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20648.roa
Signing time: Tue 25 Aug 2026 08:49:30 +0000
ROA not before: Tue 25 Aug 2026 08:44:30 +0000
ROA not after: Tue 24 Aug 2027 08:49:30 +0000
asID: 20648
IP address blocks: 96.62.242.0/24 maxlen: 24
96.62.244.0/24 maxlen: 24
150.241.252.0/24 maxlen: 24
155.117.225.0/24 maxlen: 24
167.148.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1f:8f:72:64:7b:19:6f:5e:40:d6:d6:5c:d8:9f:c5:57:0c:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 25 08:44:30 2026 GMT
Not After : Aug 24 08:49:30 2027 GMT
Subject: CN=457F1AA8073E6E756B6F28948EFF2F4039B6AE72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:97:9d:bf:94:74:f1:a5:78:a0:e0:54:e2:
9a:a5:be:24:4e:65:10:c8:2d:b6:64:d0:84:d8:90:
32:4a:0a:40:3d:e0:3d:57:11:b6:cf:3b:2b:a1:e5:
37:cf:c1:14:bc:69:ce:4a:ed:29:2c:b2:06:7c:50:
57:cc:53:a5:8d:07:f6:d4:8a:de:ea:4a:51:35:d1:
ef:96:b5:42:6e:7c:17:3c:da:58:cc:3a:7e:5c:34:
9b:c3:43:3d:59:6b:d6:38:f1:89:77:cf:29:5f:94:
71:ec:b0:f4:08:38:51:f2:fe:f2:62:bd:56:05:c6:
5a:a0:4b:5f:c5:38:1f:23:c7:ee:28:c0:5d:b2:a0:
f7:85:b3:f2:0b:37:16:bf:27:0d:63:8b:40:a4:bb:
96:48:b2:06:8c:3c:bb:f8:06:23:74:6c:ac:3a:cc:
7a:69:6b:98:8a:cd:73:d3:6b:9e:77:90:e4:c5:8d:
66:94:1d:42:af:5a:0e:6c:cc:2c:3b:c4:53:99:94:
6e:f1:80:6c:f7:33:5a:e4:e1:08:92:3b:c6:16:33:
2a:e9:00:61:61:31:82:9c:52:1f:1f:09:0f:c9:e8:
93:91:13:dd:11:21:39:cb:9c:8a:19:be:2b:53:c1:
40:5f:55:3a:e3:fe:47:ac:88:f8:ca:05:0d:ea:9a:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:1A:A8:07:3E:6E:75:6B:6F:28:94:8E:FF:2F:40:39:B6:AE:72
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.242.0/24
96.62.244.0/24
150.241.252.0/24
155.117.225.0/24
167.148.115.0/24
Signature Algorithm: sha256WithRSAEncryption
61:87:d9:67:dd:9b:5e:79:14:69:c8:9e:b6:26:02:de:96:6a:
d8:02:f5:6d:47:5c:4e:2c:ad:cd:a6:0b:5a:81:a4:a9:e2:d5:
ec:6f:ea:68:ed:8b:98:01:e5:5b:57:76:35:d4:6c:08:4a:97:
a6:ea:79:c0:41:c9:9a:b8:5f:72:c5:6a:64:ee:20:2b:4d:c8:
dd:99:b1:88:e9:0d:bc:05:ca:51:76:9f:dc:48:75:12:b7:94:
e2:45:6b:ff:5e:a6:66:61:2e:ae:77:84:52:86:c9:9f:9a:89:
fb:a3:21:7d:37:20:26:63:e6:22:31:c6:32:30:57:73:df:a6:
24:1c:e4:9b:18:58:0c:58:9f:86:c9:44:c3:7b:0b:ca:d5:8d:
33:22:96:59:ec:fc:6d:28:3a:a6:f9:81:cb:c0:5a:a2:0d:e7:
72:32:19:99:66:f0:26:58:7b:86:37:aa:6b:53:20:78:6e:0e:
43:d8:66:d0:94:6b:fa:f1:c2:de:14:0f:1d:05:9d:2b:9e:67:
6f:55:fa:db:98:15:b1:31:22:19:73:33:e1:3e:cb:d2:e2:47:
9a:df:4e:dc:13:99:21:2a:14:1a:ef:90:de:6e:30:9d:52:f5:
8e:9d:f0:5b:f7:63:77:7f:81:fb:17:3e:53:8d:41:bd:dd:a0:
3a:2d:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:01:50 2026 by rpki-client