Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 5Y9g+fQcDWaqKEWpo1xXZmzbVnnpEpv7aZiEzm7SH3s=
Subject key identifier: 8C:78:45:9F:2F:3F:E9:CA:D7:F2:E2:13:A4:D0:CC:13:36:86:46:0D
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 3441EAACC75DF52B20C184BEBDCA7CD5215F901F
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS20473.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 20473
IP address blocks: 5.199.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:41:ea:ac:c7:5d:f5:2b:20:c1:84:be:bd:ca:7c:d5:21:5f:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=8C78459F2F3FE9CAD7F2E213A4D0CC133686460D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:02:e8:3b:61:38:d6:d3:ed:5a:2e:a4:eb:
f9:58:95:9e:96:f9:2b:d8:3e:ab:70:2e:5c:da:a9:
b8:dc:f9:fb:3d:af:62:c5:37:18:08:f4:31:a1:c6:
7f:a1:3e:13:cf:c5:c4:a1:22:71:51:e7:fc:fa:a0:
73:00:0d:72:38:4c:5d:83:73:36:f4:41:be:10:f7:
45:14:c7:75:db:c1:68:ed:e6:68:df:ba:73:19:b9:
8f:0f:ae:1e:c2:1e:a7:7d:6e:94:0d:48:69:88:32:
f3:1c:66:ae:86:0b:8b:89:c0:f6:67:11:6f:da:47:
5a:62:71:5f:fb:b4:06:6d:b1:be:df:f2:c1:90:e1:
f2:b5:e3:6f:d8:3d:78:4c:cb:35:0e:03:b7:8c:8e:
23:b0:86:35:45:4b:43:51:d8:b6:c1:be:fe:23:65:
0a:80:cc:e2:be:10:c7:69:59:1d:4f:bf:16:d1:b9:
7e:a8:28:ca:2f:37:9d:3f:ce:4c:ec:87:c9:3c:c1:
c6:5f:11:aa:af:93:ef:c6:e9:96:49:31:e5:8c:d5:
4a:b2:c7:8d:88:44:3f:cb:74:89:c8:3a:96:b8:1c:
b4:4a:7c:a4:1a:e1:1d:aa:9f:22:59:50:04:52:df:
d1:a8:ed:14:36:1c:a7:40:8e:6a:cc:05:0a:28:ac:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:78:45:9F:2F:3F:E9:CA:D7:F2:E2:13:A4:D0:CC:13:36:86:46:0D
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.15.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5f:6a:d2:b9:a6:1c:f6:fd:a7:0a:45:53:3b:9f:7a:22:6a:
c1:b0:50:9d:56:91:ec:ac:b2:85:08:ed:1d:87:b1:f8:10:89:
4c:a5:36:8c:61:5e:cf:ea:fe:24:7a:14:85:92:df:19:78:21:
17:9b:18:83:d3:6a:99:95:07:d1:c6:32:6f:bf:1d:ec:5a:d7:
f6:11:22:14:f8:0c:54:d6:58:1d:23:2d:b1:1d:4e:bc:4f:cc:
03:c6:61:cc:9d:3f:7e:c6:d5:5b:e6:d6:9c:5e:d8:64:5e:0b:
49:3b:4f:2a:28:64:a4:27:ad:59:aa:c4:07:5b:f7:6c:f0:93:
2d:73:f0:58:3b:99:e0:1f:1a:77:b6:20:14:88:eb:7a:3d:9f:
60:a0:b8:58:88:3d:71:e0:39:95:b8:f6:68:46:67:53:fb:64:
66:87:36:2a:f6:92:f4:6a:f9:5c:31:9d:0f:44:0b:fd:ab:6d:
dd:e4:5f:bc:f9:49:11:a2:e2:34:f5:60:35:a7:f1:76:c4:69:
92:53:7d:f6:79:a5:67:96:c8:c2:ce:3d:fc:07:4c:2b:36:04:
b6:01:cf:ec:fa:da:fc:1e:79:5f:22:61:b4:2f:2b:3f:73:38:
bf:3f:43:56:1d:01:bf:d3:4e:dd:ae:23:3c:93:15:eb:06:cb:
ae:fc:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:31 2026 by rpki-client