Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: yScKrRB4+fbqtByBmZ5BueD+0yf/hbwU8KJbZ+c5sWw=
Subject key identifier: AB:90:6E:ED:46:26:FF:30:57:39:86:CF:E4:DC:B7:58:E2:C0:09:03
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5D07F19791821D311B918F26293934F2DD4BED1F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20473.roa
Signing time: Thu 05 Nov 2026 11:34:24 +0000
ROA not before: Thu 05 Nov 2026 11:29:24 +0000
ROA not after: Thu 04 Nov 2027 11:34:24 +0000
asID: 20473
IP address blocks: 2.216.4.0/22 maxlen: 24
2.216.8.0/22 maxlen: 24
51.194.65.0/24 maxlen: 24
51.194.135.0/24 maxlen: 24
51.194.141.0/24 maxlen: 24
51.241.167.0/24 maxlen: 24
78.105.216.0/24 maxlen: 24
94.118.54.0/24 maxlen: 24
94.118.67.0/24 maxlen: 24
188.220.69.0/24 maxlen: 24
188.221.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:07:f1:97:91:82:1d:31:1b:91:8f:26:29:39:34:f2:dd:4b:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 5 11:29:24 2026 GMT
Not After : Nov 4 11:34:24 2027 GMT
Subject: CN=AB906EED4626FF30573986CFE4DCB758E2C00903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:c3:4f:70:3b:8f:c8:77:a1:54:9e:f8:b2:
1b:87:db:cc:14:a5:b0:b7:ab:ca:9c:0b:18:b2:e4:
70:c3:d1:22:06:72:dc:6e:61:ad:90:14:90:a5:39:
3c:a0:3f:3f:05:6c:87:11:98:f0:30:bb:12:5f:f2:
e7:da:1c:7a:0f:88:1c:01:fe:f9:19:af:cc:dc:c8:
b7:79:2c:77:24:6e:fd:51:6b:8c:23:ec:20:d1:14:
9f:70:40:4a:66:34:03:ac:f2:e6:4f:90:ef:e8:6e:
10:78:22:0a:f1:66:be:2c:27:b1:c0:06:f7:f1:06:
d4:7b:99:d7:d3:5f:87:8f:20:71:52:02:82:e6:f7:
a8:95:52:13:00:72:d9:11:20:ac:70:b2:93:a8:17:
7b:ec:dd:db:0f:6f:b7:3c:ae:da:d1:94:47:3a:5d:
8a:4c:e5:57:79:93:fc:8b:e6:24:72:28:97:de:b1:
fc:d8:99:0d:09:23:e5:d6:b9:3f:57:f2:79:cb:c1:
24:78:d9:f7:81:a8:9f:65:43:26:6d:a5:9f:53:5f:
8b:75:dc:25:13:f3:68:22:e1:71:25:7f:99:03:1b:
1b:a2:06:0e:2e:ba:87:2b:36:32:be:a3:0d:4b:48:
81:64:cf:f0:e8:5b:16:ee:58:fa:6b:05:1b:ce:4a:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:6E:ED:46:26:FF:30:57:39:86:CF:E4:DC:B7:58:E2:C0:09:03
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.216.4.0-2.216.11.255
51.194.65.0/24
51.194.135.0/24
51.194.141.0/24
51.241.167.0/24
78.105.216.0/24
94.118.54.0/24
94.118.67.0/24
188.220.69.0/24
188.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:ca:f2:47:1f:1d:23:03:dd:17:b6:b3:12:ea:3d:d4:38:
07:51:d0:af:39:19:fa:60:0a:e9:ac:9d:57:b5:40:61:49:42:
9e:09:b2:a0:4f:a7:ce:c2:8c:a3:1f:3e:e1:f3:b7:b1:fa:70:
4a:ae:fc:c8:97:51:41:ab:81:88:61:4b:bb:c1:89:c6:6b:6d:
f8:3a:4c:e0:07:8c:8d:e4:08:30:91:fd:99:59:08:fc:0d:24:
d1:9a:14:8b:88:99:d5:34:b3:6a:fa:a7:6b:b3:03:05:72:73:
ec:35:ef:8f:c9:16:b6:24:1e:4b:70:85:30:d4:87:dc:d1:38:
f9:b4:9d:8f:60:a0:e6:5b:ae:04:e7:73:e0:cb:e3:29:ef:1b:
d5:fb:7d:be:2c:2a:e5:8a:02:27:4d:0d:04:4c:ab:e8:c6:1e:
d9:ed:1f:02:b4:ac:c5:70:47:13:fc:48:c3:66:1c:dd:46:60:
63:b6:f1:1c:44:09:dc:9a:07:21:f7:3d:f9:f5:93:e0:d9:a3:
5e:df:0c:de:c9:67:48:f3:f5:7e:47:d6:06:de:fb:b8:86:75:
0b:f1:fc:18:f2:f2:0f:e2:8b:ee:f2:5c:d6:df:bc:d6:46:c2:
41:26:5d:7a:83:27:26:f8:f1:f7:bb:e1:1a:0f:0d:26:9e:54:
ee:73:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:19:56 2026 by rpki-client