Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: c8l87p5pef3FUjxfA5oUJ5Rl5XaV+td5e2QyQeDnnvc=
Subject key identifier: DA:DB:F4:EC:CF:4A:B4:14:AB:7B:CE:A8:56:52:F5:5B:44:27:F0:2B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 465345659FECF5C6E25456097297F9590DABB107
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Mon 02 Feb 2026 15:27:37 +0000
ROA not before: Mon 02 Feb 2026 15:22:37 +0000
ROA not after: Mon 01 Feb 2027 15:27:37 +0000
asID: 20473
IP address blocks: 82.38.41.0/24 maxlen: 24
178.83.88.0/24 maxlen: 24
178.83.90.0/24 maxlen: 24
178.83.92.0/24 maxlen: 24
178.83.94.0/24 maxlen: 24
178.83.95.0/24 maxlen: 24
178.83.97.0/24 maxlen: 24
178.83.98.0/24 maxlen: 24
178.83.104.0/24 maxlen: 24
178.83.105.0/24 maxlen: 24
178.83.106.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.124.0/24 maxlen: 24
178.83.142.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:53:45:65:9f:ec:f5:c6:e2:54:56:09:72:97:f9:59:0d:ab:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 2 15:22:37 2026 GMT
Not After : Feb 1 15:27:37 2027 GMT
Subject: CN=DADBF4ECCF4AB414AB7BCEA85652F55B4427F02B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:40:80:8b:a0:f4:51:ca:b8:22:8b:ec:e8:
68:cc:c3:be:0c:51:01:7d:1e:4a:fd:e8:ea:55:eb:
4b:78:58:9b:37:73:77:7a:01:96:e7:30:49:08:c1:
cf:05:fd:92:99:03:ff:78:f8:d9:05:8b:46:52:ed:
8a:b9:ac:c8:09:55:7a:ad:d2:0b:5f:1f:d9:8b:65:
a1:bf:ed:68:04:4c:7d:87:d2:07:9e:2f:db:e1:72:
b0:57:a5:1a:fd:42:91:5f:4d:a8:c2:25:7f:20:46:
00:34:0b:ad:f4:9b:80:42:b8:d0:6a:84:eb:aa:35:
6d:3c:19:4c:41:8c:2f:e1:83:d8:b0:65:e6:72:c2:
61:5e:20:28:a7:6a:8f:d4:3e:be:e9:7d:0a:51:79:
66:27:50:0a:4a:d8:17:64:09:3c:d6:92:87:d5:77:
7f:ca:79:35:a7:c6:86:21:02:34:a9:39:36:25:06:
7c:94:54:80:6a:17:d1:41:29:d1:3f:6e:36:6b:59:
e2:14:fd:f3:11:81:6c:35:a9:dd:79:e1:23:88:53:
f0:ad:3f:0c:38:9e:74:f6:d3:0a:3a:1b:90:99:32:
8a:30:4f:63:34:69:56:fc:2d:bd:f6:5a:5a:b1:53:
7a:fe:c2:91:52:79:3f:10:d0:7f:a3:ec:b5:de:a7:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:F4:EC:CF:4A:B4:14:AB:7B:CE:A8:56:52:F5:5B:44:27:F0:2B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.41.0/24
178.83.88.0/24
178.83.90.0/24
178.83.92.0/24
178.83.94.0/23
178.83.97.0-178.83.98.255
178.83.104.0/22
178.83.124.0/24
178.83.142.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
Signature Algorithm: sha256WithRSAEncryption
a3:4c:6f:37:f6:4b:e5:28:69:01:c3:af:19:e1:b2:42:4f:7d:
e0:90:36:bf:e7:d7:96:9c:e1:3c:94:f7:4d:a7:6b:6f:d8:3e:
da:23:13:bc:92:60:bb:14:45:59:1b:37:23:93:40:6e:da:da:
48:31:b7:51:75:ab:84:b3:7b:48:de:23:ec:a3:ee:7f:07:df:
2a:54:c7:b8:4b:78:d4:96:ba:12:f9:bf:92:02:d7:b6:5f:24:
c8:47:b7:91:18:f5:76:1e:7c:be:b5:bd:b9:09:63:d3:e6:6d:
c6:63:91:de:26:18:86:f9:9e:95:e1:51:a0:84:95:e1:2d:ff:
94:96:fb:3c:b9:28:11:39:0e:5d:a8:b7:d3:ae:72:0d:f5:f8:
28:65:f0:92:8b:f8:e9:2f:fd:fa:6c:a6:a4:da:53:a7:b4:8e:
2f:f7:b0:28:88:4c:94:55:16:87:76:7d:2f:d5:09:7c:04:88:
8c:0a:ad:e2:a4:87:9d:07:1d:91:39:d7:6b:21:80:de:a7:e7:
ba:40:40:84:2a:55:1c:b0:a4:37:60:f6:c1:81:ff:3b:8a:1c:
35:c7:cf:92:49:27:c1:3d:06:ed:6e:c6:b0:59:60:0d:99:d9:
de:8d:3e:ef:33:1e:ad:a4:4f:e5:d0:8d:89:5e:77:b6:35:78:
53:a0:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:12 2026 by rpki-client