Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20001.roa
File: AS20001.roa (raw, json)
Hash identifier: s+DwbONF0MYJMj7FXjq459+sgtgjYsESv8GlIeE3hjo=
Subject key identifier: 4F:19:3C:88:AD:D9:CF:94:25:49:51:0B:E9:A4:16:AF:83:AE:F5:E7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2C1979DD4D806006CABB6AB4F27C12383EEDAB35
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20001.roa
Signing time: Thu 29 Oct 2026 21:01:36 +0000
ROA not before: Thu 29 Oct 2026 20:56:36 +0000
ROA not after: Thu 28 Oct 2027 21:01:36 +0000
asID: 20001
IP address blocks: 94.116.180.0/22 maxlen: 24
94.116.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:19:79:dd:4d:80:60:06:ca:bb:6a:b4:f2:7c:12:38:3e:ed:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 20:56:36 2026 GMT
Not After : Oct 28 21:01:36 2027 GMT
Subject: CN=4F193C88ADD9CF942549510BE9A416AF83AEF5E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:69:34:96:ff:20:6f:5f:0a:b2:5b:ee:a6:
f2:7e:3e:d4:d4:69:b0:01:1d:41:14:2f:af:c6:8f:
87:27:08:a3:98:1f:f1:ba:7e:32:f3:bc:43:e2:b1:
76:4f:57:62:fb:96:9e:e7:08:ae:b7:06:69:34:87:
63:1b:e9:8f:bd:91:62:a4:f1:f0:1e:f3:2e:45:42:
01:f0:0a:68:88:49:f0:48:aa:6d:70:c2:05:ba:9b:
91:ea:34:3c:c6:9b:e2:3a:67:b8:61:2a:84:5d:f8:
7b:09:6e:85:b0:82:fd:63:e0:6b:57:ae:b1:fe:16:
36:5f:23:1b:36:cb:69:52:11:45:b5:ab:df:8f:d5:
cb:0d:65:e9:e3:0a:fa:25:2a:28:ad:0d:a8:7b:20:
b2:6e:18:47:ed:64:95:54:a5:97:28:ee:6f:e7:1b:
29:b1:0d:53:da:fb:0f:04:1f:d5:af:22:6b:97:2f:
de:22:a0:84:bb:a1:03:8a:27:8b:ee:35:7a:44:2c:
e6:d9:78:55:f8:de:c9:37:58:52:59:e8:8f:eb:ff:
e7:68:5f:8a:b4:f8:80:2b:27:8e:5a:e2:c2:c8:8e:
7c:91:66:13:21:ee:5d:bf:89:2a:84:3e:7a:98:9c:
09:86:b3:94:a6:69:8b:df:7d:2c:65:79:1b:04:21:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:19:3C:88:AD:D9:CF:94:25:49:51:0B:E9:A4:16:AF:83:AE:F5:E7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.180.0/22
94.116.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:05:49:f7:25:18:46:73:b4:e3:99:c4:42:b9:f4:55:50:81:
0f:ce:43:47:e2:4d:ea:e7:c4:9f:da:19:9c:de:86:30:d5:d6:
9c:91:e3:d9:d4:35:e8:92:46:98:5d:1f:72:43:67:73:9c:fb:
43:5c:bb:92:72:a4:28:0a:3e:14:8f:32:e6:f4:60:b7:d7:7f:
dd:29:f0:e4:74:17:1d:81:22:c0:9a:79:0e:0a:07:d9:b3:1b:
50:15:31:41:80:40:f5:94:8c:0a:1c:13:bf:46:03:3e:d2:78:
9d:db:64:91:0b:26:41:86:23:c8:60:d9:6f:b6:cc:e2:37:3d:
92:1e:9a:07:22:61:e7:1e:05:c7:e2:c2:9a:78:e0:a5:bc:03:
b1:e5:8e:0c:b5:47:80:b6:3b:54:df:e0:68:df:1e:42:41:b6:
7c:e9:ea:29:2f:9b:a4:57:3e:ba:db:fb:57:2c:e1:cb:ae:40:
dd:81:7c:a7:26:a4:b4:ac:74:16:0f:d5:6a:33:f9:4c:54:c9:
45:53:8d:b2:da:92:16:24:e2:57:45:ac:b5:23:01:b4:db:a7:
e2:6e:5b:21:19:62:25:47:31:14:4b:ef:43:38:d8:7a:50:97:
b3:37:00:c9:1e:a2:23:6b:ca:2a:f0:d4:77:60:65:49:68:78:
27:64:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:54:09 2026 by rpki-client