Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: Ly1sgG5y4r1z4K3RGlQD7xcnIhRiQAnxAXlE0lPQHLk=
Subject key identifier: 9D:94:30:0C:C3:D7:AD:DB:0A:ED:45:A5:C4:61:FE:0E:4F:8C:D8:23
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 62393CF8E15B70488EA597025D58C413A87DB544
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS20473.roa
Signing time: Fri 30 Oct 2026 04:09:20 +0000
ROA not before: Fri 30 Oct 2026 04:04:20 +0000
ROA not after: Fri 29 Oct 2027 04:09:20 +0000
asID: 20473
IP address blocks: 2a0f:85c1:393::/48 maxlen: 48
2a0f:85c1:c18::/48 maxlen: 48
2a0f:85c1:c46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:39:3c:f8:e1:5b:70:48:8e:a5:97:02:5d:58:c4:13:a8:7d:b5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 30 04:04:20 2026 GMT
Not After : Oct 29 04:09:20 2027 GMT
Subject: CN=9D94300CC3D7ADDB0AED45A5C461FE0E4F8CD823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:c1:82:e1:b8:64:ef:ab:f4:68:21:8a:7d:
14:a7:3c:98:b3:a9:43:0d:0f:b3:cd:fc:3b:86:1c:
8b:e5:f2:e8:78:06:7f:7b:d2:b5:e4:1c:f0:ab:9a:
3a:51:6b:26:70:46:c6:f1:7c:f3:3b:5f:8c:fc:7b:
6a:3f:38:5c:58:a2:89:14:4e:a5:69:57:6b:73:2b:
60:34:0f:c7:61:b2:65:c4:fd:55:53:0d:d1:5d:34:
25:0f:23:8f:e5:80:5a:4a:76:02:d9:76:3a:07:e1:
1f:02:3c:e1:6d:01:fe:57:7d:8c:1c:ef:1d:73:83:
8a:07:ad:5d:0e:47:17:8b:de:d0:cf:f0:6d:cb:cd:
b6:32:a2:29:0d:f3:35:72:da:a5:8e:79:ef:15:46:
3b:39:a5:63:08:db:a2:41:54:f9:b0:fb:bc:1e:3b:
61:72:f7:a2:e9:81:92:63:25:59:f3:25:db:2e:35:
12:a4:fd:27:8f:05:e9:2a:0b:24:b3:ff:03:3c:0a:
59:43:83:0f:fa:d1:ec:5d:7e:5f:d9:fd:4a:c3:dd:
ad:f9:b1:a0:27:86:d8:5e:2a:88:56:22:2f:63:6a:
84:70:45:52:54:5d:d5:32:e8:a7:f2:3b:e4:53:2b:
cd:00:31:16:54:7c:72:8d:7a:21:00:87:2e:ff:44:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:30:0C:C3:D7:AD:DB:0A:ED:45:A5:C4:61:FE:0E:4F:8C:D8:23
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:393::/48
2a0f:85c1:c18::/48
2a0f:85c1:c46::/48
Signature Algorithm: sha256WithRSAEncryption
e4:2c:8d:fb:f7:6c:b6:5f:38:5c:f7:98:84:4a:b1:9e:c8:ee:
7f:c8:ee:c9:03:3a:80:e0:96:ff:46:00:c9:7c:92:92:6f:e7:
e5:d9:a5:b6:17:f9:1a:6c:05:ec:a8:9c:be:c9:9e:ae:d5:01:
df:b3:19:de:da:b7:9f:a7:99:8e:0c:3b:26:25:bb:04:c6:d2:
c8:8a:8b:72:9d:6f:17:80:33:12:22:81:eb:f4:b9:2c:86:33:
51:48:d3:f9:e5:7c:e0:1e:96:96:cc:ab:ff:d2:e0:69:82:54:
00:1a:a1:7f:35:5c:9c:74:54:5d:3e:3c:74:45:a4:83:1f:c7:
c8:b6:20:18:a4:44:d0:20:aa:be:8c:e9:c2:81:f3:b8:73:a9:
52:50:ab:1e:d4:cb:f3:78:88:eb:4f:f6:d2:52:f5:7d:9c:d1:
a1:a8:40:ea:fe:dd:09:7e:4a:25:0c:a7:76:69:b6:10:fe:5b:
03:0e:d7:b3:06:e4:bc:83:a9:40:d5:12:e8:f3:3b:4e:30:d0:
2e:bf:81:86:39:12:c5:3c:dc:df:95:b1:27:6b:68:0a:98:30:
88:d9:d5:5f:ba:fe:fe:88:05:b5:15:56:63:7b:c6:a9:01:2c:
99:55:c7:c1:66:89:5e:c0:67:cb:9b:cd:16:af:30:43:8d:1e:
41:c0:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:56:12 2026 by rpki-client