Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: SOFXyNdUiRPytEh3JUbmXyKjEs82fs7C8ekpMpBwQb4=
Subject key identifier: 99:C1:EB:51:52:87:40:E2:AE:FB:B1:AC:F2:D7:8F:39:33:88:63:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 77438E8B1E982520276982C16B493F0BC970F900
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Mon 06 Apr 2026 13:10:38 +0000
ROA not before: Mon 06 Apr 2026 13:05:38 +0000
ROA not after: Mon 05 Apr 2027 13:10:38 +0000
asID: 20473
IP address blocks: 82.38.41.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
178.83.88.0/24 maxlen: 24
178.83.90.0/24 maxlen: 24
178.83.92.0/24 maxlen: 24
178.83.94.0/24 maxlen: 24
178.83.95.0/24 maxlen: 24
178.83.97.0/24 maxlen: 24
178.83.98.0/24 maxlen: 24
178.83.104.0/24 maxlen: 24
178.83.105.0/24 maxlen: 24
178.83.106.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.142.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:43:8e:8b:1e:98:25:20:27:69:82:c1:6b:49:3f:0b:c9:70:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 13:05:38 2026 GMT
Not After : Apr 5 13:10:38 2027 GMT
Subject: CN=99C1EB51528740E2AEFBB1ACF2D78F393388633E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:dd:d6:b8:b9:a6:c4:3f:66:8d:8e:b0:45:
33:e0:78:85:6b:a3:74:b6:1c:33:b4:5f:db:41:f7:
00:22:64:a5:0f:0c:18:b6:8d:d1:fa:c1:30:a1:57:
01:a0:27:ee:57:c4:70:f0:cf:96:ab:71:ef:d5:5b:
bf:94:54:36:76:7b:03:46:53:c7:22:9f:23:03:f9:
b8:79:71:e8:4a:e5:da:c5:41:7d:bf:52:ab:e0:6d:
c6:11:c5:33:04:70:cc:fd:15:07:f9:1a:13:18:cb:
a2:2f:d1:ef:fe:50:64:da:35:5d:b6:22:c0:73:03:
1a:e2:6c:42:21:9a:5f:14:27:6d:aa:58:ac:93:99:
7c:b1:55:74:e5:91:6e:d6:22:ed:1b:84:83:85:06:
cf:47:28:2b:28:f8:a0:eb:65:90:f4:67:ce:d6:3f:
bd:59:68:e6:32:b1:0c:9f:c9:5f:c4:6e:a2:7a:eb:
7d:74:f4:13:5d:8d:58:c3:c4:47:d9:f5:31:2b:fc:
4b:ac:b1:5d:25:58:6a:a2:44:6d:56:70:eb:06:a1:
28:8c:95:7b:3a:0a:63:87:ab:4d:c8:88:3f:ec:2d:
32:0b:d6:06:b6:18:f8:15:48:18:be:bc:07:4f:49:
b5:9b:1b:0f:90:62:b9:da:45:9a:0b:a6:96:be:9d:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:EB:51:52:87:40:E2:AE:FB:B1:AC:F2:D7:8F:39:33:88:63:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.41.0/24
82.41.117.0/24
178.83.88.0/24
178.83.90.0/24
178.83.92.0/24
178.83.94.0/23
178.83.97.0-178.83.98.255
178.83.104.0/22
178.83.142.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
Signature Algorithm: sha256WithRSAEncryption
69:a4:c7:5c:86:98:1d:55:21:43:de:93:c3:bf:a6:4e:51:48:
74:ba:2c:a7:43:2c:fb:e8:cb:e9:df:44:c4:bb:be:7b:ab:9e:
69:c5:75:e7:ec:bc:4f:cf:1a:c2:32:09:97:ed:f5:d7:51:e2:
1f:b9:ed:01:10:67:92:54:a8:36:4d:8b:54:6a:81:87:6a:3a:
03:64:5f:63:a1:58:af:ad:fb:e2:4f:0c:e7:a4:78:36:a0:83:
23:21:90:48:ff:27:e9:e8:f0:36:c2:09:ab:23:86:eb:11:99:
0d:b5:2b:b0:18:7c:8e:24:f5:67:4f:a0:32:2f:34:fa:95:c5:
53:a4:4b:da:34:72:73:99:0e:2d:24:56:1d:ef:6e:7c:6a:39:
d1:38:b8:8a:3f:d0:04:c4:60:47:95:b0:97:0a:11:d6:bb:27:
1e:52:96:e6:f5:b3:78:38:44:a0:c8:4f:27:c5:4c:5d:1e:42:
cc:a4:ad:e9:2d:d6:65:32:23:fd:81:eb:57:9f:e6:ba:f4:74:
2d:82:8e:92:6d:20:2e:61:a0:62:40:dd:54:1d:18:db:9e:b5:
51:69:e5:26:bf:a8:1e:85:ae:fc:5e:32:25:f3:9a:68:f1:0b:
6a:d5:24:ab:c0:9f:e6:f1:18:11:0f:f3:5b:b7:ec:1a:94:ce:
e8:72:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:40 2026 by rpki-client