Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: QvEPhThTGQX3kj16mFRGusWjnJz5UP+0Ydi9JpNhOjo=
Subject key identifier: B3:D0:28:48:7D:09:6A:AB:F7:88:9A:35:6F:F0:61:DA:1C:EE:4A:28
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 48BEC2D45662B04543F44AFA70B9D810442D4277
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Thu 10 Sep 2026 07:37:29 +0000
ROA not before: Thu 10 Sep 2026 07:32:29 +0000
ROA not after: Thu 09 Sep 2027 07:37:29 +0000
asID: 20473
IP address blocks: 82.22.45.0/24 maxlen: 24
82.29.28.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.38.41.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
178.83.88.0/24 maxlen: 24
178.83.90.0/24 maxlen: 24
178.83.92.0/24 maxlen: 24
178.83.94.0/24 maxlen: 24
178.83.95.0/24 maxlen: 24
178.83.97.0/24 maxlen: 24
178.83.98.0/24 maxlen: 24
178.83.104.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.142.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
2a13:9500:170::/48 maxlen: 48
2a13:9500:1ac::/48 maxlen: 48
2a13:9500:1b3::/48 maxlen: 48
2a13:9500:1d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:be:c2:d4:56:62:b0:45:43:f4:4a:fa:70:b9:d8:10:44:2d:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 07:32:29 2026 GMT
Not After : Sep 9 07:37:29 2027 GMT
Subject: CN=B3D028487D096AABF7889A356FF061DA1CEE4A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6d:60:dc:d3:52:25:a7:22:fd:b5:4a:47:b8:
18:be:43:d1:78:90:ea:c4:4e:87:29:5c:53:13:70:
f4:3b:b1:91:07:31:2a:92:42:14:1e:c2:bf:3e:9a:
e9:36:f0:cd:8b:35:0a:21:25:fc:f9:a5:f9:ea:b3:
7c:80:ac:90:8e:d1:f4:d4:d3:44:d9:b6:af:c5:e4:
61:45:db:c6:cb:b3:0d:6b:d2:c9:2a:29:d4:ff:2d:
53:24:77:58:09:da:29:6c:3f:13:e0:16:eb:a6:d5:
8c:ea:0b:71:38:42:5d:fb:a5:93:de:ed:cc:38:2a:
57:a4:5e:38:f8:96:5d:66:a0:9e:1d:8c:b5:4b:1e:
b4:38:dd:82:27:e9:a4:f8:7f:f0:e5:63:92:7b:f0:
4b:e5:0a:a3:38:17:7f:c7:12:e4:ec:f4:d9:a2:f2:
29:10:9f:05:a5:f3:ee:0a:99:96:39:06:b5:0c:3c:
8b:2a:90:a3:3d:24:1f:b9:78:65:0b:df:aa:da:49:
9c:2c:0a:c5:f0:c7:54:e5:58:fd:03:cd:0c:85:58:
f7:65:58:b5:1f:d9:3f:0e:7b:35:2e:ab:bd:f0:8f:
9f:b6:60:71:58:8e:7b:37:07:e8:4a:7d:8c:3c:db:
72:0c:08:93:f5:3b:fd:ca:33:12:97:d5:e4:33:51:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:28:48:7D:09:6A:AB:F7:88:9A:35:6F:F0:61:DA:1C:EE:4A:28
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.45.0/24
82.29.28.0/24
82.29.44.0/24
82.38.41.0/24
82.41.117.0/24
178.83.88.0/24
178.83.90.0/24
178.83.92.0/24
178.83.94.0/23
178.83.97.0-178.83.98.255
178.83.104.0/24
178.83.107.0/24
178.83.142.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
2a13:9500:170::/48
2a13:9500:1ac::/48
2a13:9500:1b3::/48
2a13:9500:1d8::/48
Signature Algorithm: sha256WithRSAEncryption
03:dc:c3:2c:c8:69:df:9d:da:46:14:69:f0:e2:60:c9:07:bf:
3c:f5:d0:d5:3c:21:a2:b4:f5:79:7d:f3:62:4f:2c:71:48:2d:
0a:69:c5:f4:23:e0:77:98:54:50:1f:59:8f:3e:22:aa:cc:92:
c6:99:ce:b0:43:fa:19:3d:cf:f4:f6:40:28:e3:50:64:ba:b8:
30:f4:5e:e9:38:18:1f:d8:6e:4e:8a:66:8e:76:f0:d9:fe:33:
5d:41:ef:ed:b7:c4:4f:d2:ec:2e:53:1e:21:7b:a0:e9:2a:31:
18:2e:8e:3d:91:8e:01:65:e1:29:60:74:7d:aa:14:38:4d:30:
4d:27:c2:d3:04:9f:40:f0:71:c4:fb:a9:2d:12:4d:29:d8:c4:
b9:ef:01:df:40:43:da:2d:79:5e:55:3b:24:11:ff:f7:2d:12:
88:15:17:9c:3f:07:2d:c5:8d:b2:63:f9:37:f2:0e:36:28:d1:
d3:cb:70:72:67:e9:51:f2:f0:d1:d3:35:ce:86:d4:20:c3:7e:
60:a3:db:a6:70:44:06:54:c5:46:27:c9:a9:42:d7:de:8d:db:
02:6f:7c:32:71:d6:3c:91:a3:72:94:6c:2d:3e:31:2c:e0:19:
14:d3:9b:0d:d6:c7:80:6e:81:39:ad:45:df:b4:5d:b1:cd:8d:
7f:f7:1e:00
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgIUSL7C1FZisEVD9Er6cLnYEEQtQncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTAwNzMyMjlaFw0yNzA5MDkwNzM3MjlaMDMxMTAvBgNV
BAMTKEIzRDAyODQ4N0QwOTZBQUJGNzg4OUEzNTZGRjA2MURBMUNFRTRBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnbWDc01IlpyL9tUpHuBi+Q9F4
kOrETocpXFMTcPQ7sZEHMSqSQhQewr8+muk28M2LNQohJfz5pfnqs3yArJCO0fTU
00TZtq/F5GFF28bLsw1r0skqKdT/LVMkd1gJ2ilsPxPgFuum1YzqC3E4Ql37pZPe
7cw4KlekXjj4ll1moJ4djLVLHrQ43YIn6aT4f/DlY5J78EvlCqM4F3/HEuTs9Nmi
8ikQnwWl8+4KmZY5BrUMPIsqkKM9JB+5eGUL36raSZwsCsXwx1TlWP0DzQyFWPdl
WLUf2T8OezUuq73wj5+2YHFYjns3B+hKfYw823IMCJP1O/3KMxKX1eQzURKXAgMB
AAGjggLlMIIC4TAdBgNVHQ4EFgQUs9AoSH0Jaqv3iJo1b/Bh2hzuSigwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgfoGCCsGAQUFBwEHAQH/BIHqMIHnMGgEAgABMGIDBABS
Fi0DBABSHRwDBABSHSwDBABSJikDBABSKXUDBACyU1gDBACyU1oDBACyU1wDBAGy
U14wDAMEALJTYQMEALJTYgMEALJTaAMEALJTawMEALJTjgMEALJTlAMEALJTnDB7
BAIAAjB1AwcAKhOVAABhAwcAKhOVAACuAwcAKhOVAADPAwcAKhOVAADdAwcAKhOV
AAEMAwcAKhOVAAEgAwcAKhOVAAFJAwcAKhOVAAFNAwcAKhOVAAFeAwcAKhOVAAFw
AwcAKhOVAAGsAwcAKhOVAAGzAwcAKhOVAAHYMA0GCSqGSIb3DQEBCwUAA4IBAQAD
3MMsyGnfndpGFGnw4mDJB7889dDVPCGitPV5ffNiTyxxSC0KacX0I+B3mFRQH1mP
PiKqzJLGmc6wQ/oZPc/09kAo41Bkurgw9F7pOBgf2G5OimaOdvDZ/jNdQe/tt8RP
0uwuUx4he6DpKjEYLo49kY4BZeEpYHR9qhQ4TTBNJ8LTBJ9A8HHE+6ktEk0p2MS5
7wHfQEPaLXleVTskEf/3LRKIFRecPwctxY2yY/k38g42KNHTy3ByZ+lR8vDR0zXO
htQgw35go9umcEQGVMVGJ8mpQtfejdsCb3wycdY8kaNylGwtPjEs4BkU05sN1seA
boE5rUXftF2xzY1/9x4A
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:28:01 2026 by rpki-client