Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: W2o1HP8xyqz34yu/39n5TeUpQE2RmCDc5oOoIf7MNBM=
Subject key identifier: B1:77:17:EF:CD:8B:31:D6:30:56:B5:54:CB:F6:54:0E:8E:B2:13:DD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 08D05F992CE9AEDD4B3040D89AA1974059B9185A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Thu 30 Oct 2025 09:40:36 +0000
ROA not before: Thu 30 Oct 2025 09:35:36 +0000
ROA not after: Thu 29 Oct 2026 09:40:36 +0000
asID: 20473
IP address blocks: 82.27.129.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d0:5f:99:2c:e9:ae:dd:4b:30:40:d8:9a:a1:97:40:59:b9:18:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 30 09:35:36 2025 GMT
Not After : Oct 29 09:40:36 2026 GMT
Subject: CN=B17717EFCD8B31D63056B554CBF6540E8EB213DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:59:3a:e0:31:ec:b8:42:c0:2b:9b:9a:09:
3a:9b:51:37:9b:45:67:53:47:3f:7a:2d:84:d5:f6:
8e:15:01:10:2b:6f:f5:3b:31:54:e9:3a:91:4c:50:
07:f7:3d:ca:f2:4b:18:54:dc:83:89:fa:2f:05:d3:
86:ec:04:58:e4:00:f8:4c:12:ff:99:21:d7:bb:29:
bb:a0:8c:85:25:75:d9:66:7d:5e:48:5d:10:b5:1f:
42:6b:e9:15:a2:7a:57:b7:c8:13:d4:eb:53:69:7e:
e6:48:d8:62:66:94:0c:e1:e8:d5:ae:58:aa:c9:94:
3f:6b:48:87:05:6c:29:e3:30:9f:ee:a4:a6:a6:90:
30:eb:ae:de:4b:62:bf:c5:2f:8b:e1:fc:c9:15:ce:
aa:d2:50:e7:0b:81:22:3e:e8:3d:09:61:bd:4f:89:
e1:20:51:79:57:32:92:b2:e4:bb:ba:8b:fe:2c:19:
93:a7:62:9c:a0:8a:67:72:91:f4:33:ea:01:0d:99:
d6:61:ae:6c:37:d0:dd:62:20:9b:84:5c:6d:c6:16:
37:a2:e1:36:8f:46:f0:b2:18:98:47:3e:6c:93:38:
67:01:25:c2:e6:51:39:6c:ed:eb:86:2c:2d:41:9d:
cd:5b:12:fe:dd:ab:93:20:af:7d:51:97:4b:5a:8a:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:17:EF:CD:8B:31:D6:30:56:B5:54:CB:F6:54:0E:8E:B2:13:DD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.129.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
Signature Algorithm: sha256WithRSAEncryption
42:68:b7:0b:bf:b9:80:54:3e:88:3e:40:aa:d6:1f:ec:9b:13:
46:24:0c:61:7e:6d:ef:c8:cb:82:25:09:62:18:f4:23:79:da:
6b:4b:0e:d9:9b:84:62:30:28:87:d3:8e:43:8b:21:d0:04:c0:
ba:6c:f7:e8:64:5e:86:4e:60:52:95:10:dc:21:12:cd:f3:91:
06:63:ad:20:88:df:c2:5e:d3:c8:19:cd:d3:a3:df:1a:27:c2:
dd:aa:d5:38:63:b9:a5:56:aa:66:7e:b9:f2:f5:5e:96:da:70:
f4:1e:f3:bc:de:08:98:c2:38:75:4e:7b:bf:47:b3:fc:cc:fc:
e6:66:05:49:b7:09:2b:d8:cb:5f:77:95:66:20:5e:1a:f4:b5:
af:c2:6f:66:63:92:39:9f:5c:b4:f0:a9:0a:07:bf:28:be:65:
d7:5d:d6:2f:e6:22:7a:91:eb:25:8a:4d:51:0d:8b:1e:0c:be:
c0:2e:2b:76:f8:3f:0d:52:60:e0:ef:a2:ce:ba:61:26:14:3e:
65:56:e0:84:91:e3:cd:3a:df:e9:6e:64:b6:05:53:6a:99:bd:
2b:8d:94:cb:e7:33:87:90:c8:86:d4:00:7c:a1:3f:84:6b:03:
ec:3e:bf:e1:ea:cc:52:fb:3e:59:0c:a9:77:0f:4b:fd:65:42:
93:98:66:15
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUCNBfmSzprt1LMEDYmqGXQFm5GFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEwMzAwOTM1MzZaFw0yNjEwMjkwOTQwMzZaMDMxMTAvBgNV
BAMTKEIxNzcxN0VGQ0Q4QjMxRDYzMDU2QjU1NENCRjY1NDBFOEVCMjEzREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCFk64DHsuELAK5uaCTqbUTeb
RWdTRz96LYTV9o4VARArb/U7MVTpOpFMUAf3PcrySxhU3IOJ+i8F04bsBFjkAPhM
Ev+ZIde7KbugjIUlddlmfV5IXRC1H0Jr6RWiele3yBPU61NpfuZI2GJmlAzh6NWu
WKrJlD9rSIcFbCnjMJ/upKamkDDrrt5LYr/FL4vh/MkVzqrSUOcLgSI+6D0JYb1P
ieEgUXlXMpKy5Lu6i/4sGZOnYpygimdykfQz6gENmdZhrmw30N1iIJuEXG3GFjei
4TaPRvCyGJhHPmyTOGcBJcLmUTls7euGLC1Bnc1bEv7dq5Mgr31Rl0tailC9AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUsXcX782LMdYwVrVUy/ZUDo6yE90wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MAwEAgABMAYDBABSG4Ew
KgQCAAIwJAMHACoTlQAAYQMHACoTlQAArgMHACoTlQAAzwMHACoTlQAA3TANBgkq
hkiG9w0BAQsFAAOCAQEAQmi3C7+5gFQ+iD5AqtYf7JsTRiQMYX5t78jLgiUJYhj0
I3naa0sO2ZuEYjAoh9OOQ4sh0ATAumz36GRehk5gUpUQ3CESzfORBmOtIIjfwl7T
yBnN06PfGifC3arVOGO5pVaqZn658vVeltpw9B7zvN4ImMI4dU57v0ez/Mz85mYF
SbcJK9jLX3eVZiBeGvS1r8JvZmOSOZ9ctPCpCge/KL5l113WL+YiepHrJYpNUQ2L
Hgy+wC4rdvg/DVJg4O+izrphJhQ+ZVbghJHjzTrf6W5ktgVTapm9K42Uy+czh5DI
htQAfKE/hGsD7D6/4erMUvs+WQypdw9L/WVCk5hmFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:26:00 2025 by rpki-client