Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20648.roa
File: AS20648.roa (raw, json)
Hash identifier: 4joAybqaOUmiHznBH+dUIbdQaO0LXwI3iyCwdyTW/Rw=
Subject key identifier: 35:B2:65:74:EE:3D:9F:92:08:61:A9:8F:8A:E4:17:97:63:7D:0B:67
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 38B4BA698886F8C90E53AF1AE68F04C96363D2F1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20648.roa
Signing time: Mon 31 Aug 2026 07:49:30 +0000
ROA not before: Mon 31 Aug 2026 07:44:30 +0000
ROA not after: Mon 30 Aug 2027 07:49:30 +0000
asID: 20648
IP address blocks: 191.96.181.0/24 maxlen: 24
191.101.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b4:ba:69:88:86:f8:c9:0e:53:af:1a:e6:8f:04:c9:63:63:d2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 31 07:44:30 2026 GMT
Not After : Aug 30 07:49:30 2027 GMT
Subject: CN=35B26574EE3D9F920861A98F8AE41797637D0B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:90:d7:48:e5:82:52:e1:c1:f8:f3:0d:a0:
f0:09:9e:9d:49:51:a7:52:47:34:46:04:45:77:9b:
5e:37:f5:f0:0c:dd:1f:87:82:27:8a:43:f1:91:89:
32:bd:bb:6d:89:0e:0c:a9:6e:3d:98:03:5d:84:06:
53:4f:ac:68:d2:bd:fa:9a:0e:ab:bf:74:d6:4b:f3:
04:0d:b2:40:6b:18:75:28:29:52:a1:36:e6:d3:96:
01:41:56:06:d7:0b:49:34:f9:62:df:ca:85:f5:bb:
07:e1:8c:07:60:d4:a0:fe:b8:f6:8b:28:44:60:a8:
eb:5e:3f:4f:ed:fd:c5:c9:d0:06:fd:e4:43:56:0f:
4f:1b:0c:a2:ca:40:47:5e:2b:ab:4e:23:3d:11:37:
7f:ee:5f:d2:17:e6:4b:89:11:cf:54:67:17:da:45:
90:81:74:2c:f8:cb:99:b7:88:6a:7d:e8:52:4b:98:
aa:91:8c:fd:84:fb:d3:55:ee:e9:c4:2b:bf:2a:87:
26:65:dc:bf:fb:81:99:15:1d:f1:56:f5:c1:31:4f:
6d:57:af:a8:74:3d:2e:59:6e:36:ce:de:b7:5d:4e:
18:2c:12:08:91:d1:ce:99:38:91:9a:52:44:0d:09:
e6:64:53:60:35:e0:c3:91:5d:82:90:e1:88:7c:d3:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B2:65:74:EE:3D:9F:92:08:61:A9:8F:8A:E4:17:97:63:7D:0B:67
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.181.0/24
191.101.244.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d4:b0:46:51:65:71:56:85:c5:d4:b8:07:b2:34:7a:24:42:
2b:49:d7:2b:11:30:32:9d:c0:62:e4:72:e7:85:90:fe:3f:f2:
d2:1e:41:89:57:38:ac:31:88:2a:a4:17:37:0c:1d:7b:f4:53:
a2:7c:84:d8:0e:a2:12:e7:ba:fa:a3:27:0f:2b:9e:64:a7:85:
0a:1e:b1:e2:f3:32:f2:0e:80:94:10:ee:89:8c:b7:22:78:44:
48:a5:73:61:b2:92:a1:c3:3a:7e:99:c4:58:ca:06:64:5d:c4:
e7:d8:f3:06:de:4b:a3:3a:c3:3a:04:aa:fb:9b:4e:79:49:ec:
11:61:56:4b:d4:69:73:aa:6e:0d:6f:53:4a:b6:67:64:5a:40:
a7:88:dc:f7:8f:64:93:e9:8b:11:e8:c9:3f:aa:37:a4:db:29:
2c:57:92:c2:66:0b:23:c5:19:31:21:1c:a5:22:b1:90:d3:48:
fd:a4:ad:af:99:af:6d:f8:79:d0:33:72:32:c2:c1:7c:13:0f:
4b:17:02:40:42:f2:97:ce:d3:a4:cc:04:9e:9e:15:d0:6e:51:
8f:38:0e:b1:4d:f5:52:21:23:a6:c8:06:6a:b8:36:47:c7:67:
46:3e:73:51:ea:e8:32:0d:4f:36:ad:7f:10:dd:6a:0a:be:a7:
89:8c:7c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:05:24 2026 by rpki-client