Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: jYozwnTUsRS0+jJHDPxezP8hOunVePXuNFqJr5OqpeI=
Subject key identifier: 3A:28:A6:F5:86:03:5E:42:13:A8:13:D4:2A:37:84:07:41:B0:D1:31
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 78701316763A25166811F3CE46BD2CB341206EBB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
Signing time: Tue 15 Sep 2026 15:00:05 +0000
ROA not before: Tue 15 Sep 2026 14:55:05 +0000
ROA not after: Tue 14 Sep 2027 15:00:05 +0000
asID: 20473
IP address blocks: 2a14:7580:fff3::/48 maxlen: 48
2a14:7581:f30::/44 maxlen: 48
2a14:7581:fa0::/44 maxlen: 48
2a14:7581:3600::/40 maxlen: 48
2a14:7583:5d10::/48 maxlen: 48
2a14:7583:e500::/40 maxlen: 48
2a14:7583:ef30::/44 maxlen: 48
2a14:7583:f000::/40 maxlen: 48
2a14:7583:f100::/40 maxlen: 48
2a14:7584:8000::/36 maxlen: 48
2a14:7584:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:70:13:16:76:3a:25:16:68:11:f3:ce:46:bd:2c:b3:41:20:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 15 14:55:05 2026 GMT
Not After : Sep 14 15:00:05 2027 GMT
Subject: CN=3A28A6F586035E4213A813D42A37840741B0D131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:cb:83:29:3b:fd:a1:3b:53:46:3f:67:ba:
c8:39:37:af:2c:66:c6:2e:c6:59:42:59:f3:90:82:
f9:66:13:d8:82:d1:e3:90:cc:79:6d:10:4e:53:35:
6d:55:30:d4:ae:d9:4c:51:b9:65:98:6c:7d:f8:33:
4f:aa:d3:43:67:50:14:f3:e8:05:4f:17:bd:78:20:
06:49:07:1c:09:15:ab:09:a9:fb:79:3f:2e:05:61:
9f:75:c2:72:a0:a1:86:aa:c4:48:a7:72:78:fe:03:
ec:fa:1a:87:7d:3c:9f:a0:e1:79:22:b5:69:99:14:
df:65:3f:29:27:3e:c2:bd:ff:3a:8f:28:77:61:08:
ac:9c:15:84:21:6e:4f:b8:94:d7:e2:12:70:8a:ec:
22:b7:b6:08:62:b8:47:ee:27:1a:44:c4:bc:de:ca:
30:ce:52:35:dd:5f:03:50:69:1b:18:27:0a:be:3e:
de:65:76:9d:27:c6:5d:7f:d1:68:a5:92:1e:24:21:
df:ac:50:28:d5:ae:af:9f:0c:1a:94:33:9f:7b:7b:
98:66:e7:3e:c6:43:30:e3:38:7a:41:13:68:d5:13:
6e:00:00:4e:78:9e:ac:0c:75:0f:7e:f5:c3:80:ee:
51:d0:52:ae:9b:6c:c5:5b:b1:84:8c:04:bc:8d:fc:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:A6:F5:86:03:5E:42:13:A8:13:D4:2A:37:84:07:41:B0:D1:31
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff3::/48
2a14:7581:f30::/44
2a14:7581:fa0::/44
2a14:7581:3600::/40
2a14:7583:5d10::/48
2a14:7583:e500::/40
2a14:7583:ef30::/44
2a14:7583:f000::/39
2a14:7584:8000::/35
Signature Algorithm: sha256WithRSAEncryption
53:f1:a3:d8:e0:97:2b:eb:ab:cd:ef:40:3d:2b:4a:a9:b5:32:
38:86:31:61:ff:bf:2b:08:ce:75:ea:da:1a:32:1b:67:3f:3b:
33:71:2a:96:82:4f:cf:27:44:bf:2b:32:43:4a:0a:a5:2c:ba:
5d:76:27:28:aa:67:ee:b2:e4:0d:04:0d:43:34:e2:65:a5:c4:
75:2f:b0:21:3b:09:af:e7:ba:98:fc:3e:5b:cd:4a:34:88:68:
9b:9b:65:28:ac:97:d3:13:9e:44:40:9c:5f:0e:7a:a7:b0:1f:
2d:bd:d3:8f:7f:47:7c:cd:3c:79:a4:e3:22:fb:5c:95:ff:c6:
0d:24:fe:6a:64:4e:12:c7:0e:6a:b5:aa:a0:d1:3e:cb:23:dc:
cb:31:2f:f9:bc:8a:bb:0a:f7:0b:49:c6:73:16:2b:aa:82:dc:
38:66:2c:ea:00:fb:c3:f2:23:01:a4:ae:87:85:97:e2:44:bb:
d2:5a:32:9f:03:33:4a:f9:e7:08:cf:4f:68:c0:27:39:f7:0e:
d1:f6:d0:b2:f3:f9:5f:d0:ab:8c:01:b0:2e:9b:9a:5b:41:b2:
a8:28:3c:7a:d0:07:7f:a5:4d:1b:5a:d4:0a:fa:aa:a4:69:bd:
08:16:88:f2:e3:d6:bb:27:05:64:1c:3d:f5:6f:d6:57:31:ba:
da:39:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:29:07 2026 by rpki-client