Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: qx+fjBoksnH/Af57IZx5vBd6iv48rPPC0EAhFLWa9cQ=
Subject key identifier: 4B:A1:5E:69:D8:06:0C:B9:6B:87:BB:6B:D1:CF:A4:2F:58:CD:C6:24
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1B7DBD54EAB0C4D67AAB761A83735EA4A1485D79
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Mon 27 Jul 2026 12:44:00 +0000
ROA not before: Mon 27 Jul 2026 12:39:00 +0000
ROA not after: Mon 26 Jul 2027 12:44:00 +0000
asID: 20473
IP address blocks: 82.22.45.0/24 maxlen: 24
82.29.28.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.38.41.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
178.83.88.0/24 maxlen: 24
178.83.90.0/24 maxlen: 24
178.83.92.0/24 maxlen: 24
178.83.94.0/24 maxlen: 24
178.83.95.0/24 maxlen: 24
178.83.97.0/24 maxlen: 24
178.83.98.0/24 maxlen: 24
178.83.104.0/24 maxlen: 24
178.83.105.0/24 maxlen: 24
178.83.106.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.142.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
2a13:9500:170::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7d:bd:54:ea:b0:c4:d6:7a:ab:76:1a:83:73:5e:a4:a1:48:5d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 27 12:39:00 2026 GMT
Not After : Jul 26 12:44:00 2027 GMT
Subject: CN=4BA15E69D8060CB96B87BB6BD1CFA42F58CDC624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:2c:da:6b:6a:8e:b6:c5:f6:f8:3b:1c:6b:
0e:37:c4:14:5f:47:b3:17:d5:b4:f1:f9:75:0e:84:
ef:6a:f6:12:2f:39:26:00:c6:e4:d0:d1:27:d7:9d:
b6:33:83:4f:ea:3e:36:fe:07:0d:00:8a:5b:d4:98:
34:2e:f0:e2:89:e8:ed:23:c7:1b:83:a0:8e:ee:d3:
89:61:4b:bb:5e:8b:14:9b:ed:fa:1f:80:8f:de:da:
3d:15:23:66:e8:e0:2f:41:43:45:ac:a4:52:06:47:
5a:ed:b2:65:64:a2:46:e6:02:cf:8e:72:d3:c6:ee:
d6:0e:a4:bb:16:5a:46:34:ec:7d:6d:84:6c:aa:d3:
63:fa:0f:6c:d7:75:b6:49:35:1b:70:8f:b2:3b:95:
e0:50:b7:fd:62:f4:2a:2d:fc:3a:77:2f:15:84:75:
f6:af:5a:8e:9e:67:99:be:75:71:fa:a1:60:8b:cd:
e5:fc:f9:c1:bd:c9:9a:01:8a:75:8b:03:20:74:c5:
83:a1:8e:56:61:9b:1d:d5:3d:fe:f4:69:41:db:44:
3c:df:32:46:12:3d:6c:00:c3:ff:e2:eb:07:54:d8:
64:e7:b6:8a:b8:dd:99:3f:f5:1a:00:d9:3c:08:9b:
b6:b9:e5:97:9a:17:84:82:75:47:ae:0b:d9:71:3c:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:5E:69:D8:06:0C:B9:6B:87:BB:6B:D1:CF:A4:2F:58:CD:C6:24
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.45.0/24
82.29.28.0/24
82.29.44.0/24
82.38.41.0/24
82.41.117.0/24
178.83.88.0/24
178.83.90.0/24
178.83.92.0/24
178.83.94.0/23
178.83.97.0-178.83.98.255
178.83.104.0/22
178.83.142.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
2a13:9500:170::/48
Signature Algorithm: sha256WithRSAEncryption
49:f5:58:ea:5e:76:6b:6f:75:1c:83:b6:66:b6:63:86:be:a4:
77:e9:0e:c2:43:f2:78:84:b6:35:fb:9a:07:b9:db:1f:9a:3e:
5f:dc:30:23:9b:b6:8d:48:46:cb:6e:d6:ce:94:3d:fc:c9:a5:
78:d7:64:e5:04:39:97:c2:e6:9a:a0:26:a0:08:a5:68:c3:2e:
89:47:f1:5a:fb:a0:49:d6:8b:a2:29:2c:36:3f:fa:9b:0e:1e:
10:d4:a0:db:a3:df:9a:3f:b4:f5:8b:0c:90:37:15:71:e7:92:
f1:07:f2:e9:8a:8f:76:bb:f9:fb:9d:8d:27:21:dd:af:d9:40:
f1:ba:b6:b1:c0:db:88:6a:5c:7f:db:13:71:48:45:07:9a:5c:
95:13:3f:3d:cd:82:1c:d2:37:b0:69:42:66:e6:fe:bd:d4:e2:
1d:21:58:e6:bd:d3:47:0e:d3:70:9b:3e:cb:e7:b0:a4:14:df:
b7:4d:4f:bd:b7:29:1b:03:83:db:36:28:98:47:5b:0b:cb:3a:
07:73:0d:41:4a:d8:12:e8:0d:40:0d:87:8d:a6:8c:b9:48:1e:
75:ba:3d:3d:d1:e1:cf:59:ee:ba:00:a3:71:f2:e5:c3:7f:d0:
67:38:e0:d6:38:ef:d8:e4:08:e0:c5:9a:f5:8c:69:14:e0:2a:
01:0d:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:03 2026 by rpki-client