Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20712.roa
File: AS20712.roa (raw, json)
Hash identifier: Nn8OnOyTYoJ+WQNXeKzA38pRkPPFRPTXkI14AaVob9c=
Subject key identifier: F5:82:A3:7F:E6:50:74:0A:AC:57:4F:B4:C5:23:65:4F:98:D6:EF:B7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7E2DA0614FFD9FB44BFD494936F4B86FB220DD40
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20712.roa
Signing time: Mon 14 Sep 2026 18:30:42 +0000
ROA not before: Mon 14 Sep 2026 18:25:42 +0000
ROA not after: Mon 13 Sep 2027 18:30:42 +0000
asID: 20712
IP address blocks: 51.146.73.0/24 maxlen: 24
51.194.130.0/24 maxlen: 24
94.116.12.0/22 maxlen: 22
94.116.32.0/22 maxlen: 22
94.116.152.0/22 maxlen: 22
94.116.184.0/22 maxlen: 22
94.116.196.0/22 maxlen: 22
94.116.236.0/22 maxlen: 22
94.194.88.0/22 maxlen: 22
188.220.10.0/24 maxlen: 24
188.220.192.0/24 maxlen: 24
188.220.206.0/24 maxlen: 24
188.220.217.0/24 maxlen: 24
188.221.11.0/24 maxlen: 24
188.221.23.0/24 maxlen: 24
188.221.98.0/24 maxlen: 24
188.221.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2d:a0:61:4f:fd:9f:b4:4b:fd:49:49:36:f4:b8:6f:b2:20:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 14 18:25:42 2026 GMT
Not After : Sep 13 18:30:42 2027 GMT
Subject: CN=F582A37FE650740AAC574FB4C523654F98D6EFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:ac:58:e2:f7:77:a9:ff:dc:69:79:63:77:
84:e6:5c:3d:eb:91:41:05:dd:ac:29:92:88:d4:68:
ef:4e:4d:a5:4f:22:d3:da:02:4f:71:81:0d:a2:a7:
c9:87:4d:80:f4:6c:bc:06:53:32:78:58:25:cd:2e:
11:df:69:2f:51:f2:1d:31:86:42:01:b3:cc:35:7f:
c2:58:6a:75:e8:24:42:65:97:e8:1c:96:49:a2:ea:
dd:69:ac:3d:2c:ba:7a:3d:84:56:c8:9e:2a:bc:5d:
cb:e2:3d:98:5d:2d:d1:18:45:37:d6:a6:d4:12:89:
62:6a:7b:39:56:4e:b2:5d:cd:43:7a:4b:67:58:e1:
02:d8:16:2b:0e:bd:a1:53:70:6f:4a:84:7b:b7:04:
e2:93:9e:5a:8a:87:ba:47:d1:97:63:f7:ac:c1:f9:
74:c1:54:31:21:51:ed:ed:9b:ea:5b:8e:7a:71:cd:
2c:15:2f:e7:8d:47:58:67:2a:87:6c:3a:0a:2a:33:
26:ed:de:8a:7d:c1:82:d7:13:08:2a:2f:4b:51:e6:
d8:69:fe:10:74:3e:38:f3:be:16:a6:57:2c:2a:a8:
f4:c9:40:96:19:6a:05:74:5f:b8:90:dc:b6:df:37:
3f:fc:07:29:b5:36:73:ce:c9:a9:3f:56:fc:54:d7:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:82:A3:7F:E6:50:74:0A:AC:57:4F:B4:C5:23:65:4F:98:D6:EF:B7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20712.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.73.0/24
51.194.130.0/24
94.116.12.0/22
94.116.32.0/22
94.116.152.0/22
94.116.184.0/22
94.116.196.0/22
94.116.236.0/22
94.194.88.0/22
188.220.10.0/24
188.220.192.0/24
188.220.206.0/24
188.220.217.0/24
188.221.11.0/24
188.221.23.0/24
188.221.98.0/24
188.221.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0a:8a:1c:e8:5e:4b:af:16:b3:87:b8:d6:c7:c6:87:42:82:
0b:bc:76:76:41:72:b7:5c:fd:63:0c:50:b0:a9:4b:25:0b:15:
e5:6c:f4:18:5f:c4:a9:43:32:08:75:ad:08:2c:fb:a2:0c:8d:
b3:d6:2d:24:be:02:6d:3b:19:78:77:5d:37:e1:79:21:04:54:
ae:91:73:48:cb:2c:3e:08:10:0a:e6:b6:fd:e2:31:47:7c:9b:
a0:c3:b9:d6:cd:36:b5:c1:e1:05:61:42:d7:35:86:d0:cf:ad:
a2:32:5a:e5:78:34:5b:3d:f0:aa:8c:c0:4f:a0:38:51:78:25:
3a:f2:06:7f:c3:ca:0e:e9:4e:0c:b7:eb:97:9b:66:5f:ca:c2:
a2:22:bc:a3:c2:fd:43:5f:22:05:02:f2:f5:6f:08:32:0b:2f:
4d:a3:77:93:4f:40:52:38:8e:fe:9b:8b:da:3a:d2:f2:64:40:
a4:d6:2e:e5:0d:9e:65:fb:42:00:a6:27:ae:3e:e9:55:cb:9b:
d5:02:1f:cb:59:83:63:ee:e5:70:de:17:67:fc:5f:d4:da:5e:
13:96:68:79:62:85:ee:ba:3f:88:e8:fb:8b:01:81:d7:9b:ff:
60:d9:cc:ce:db:6e:01:67:b8:67:3e:ea:15:38:36:f0:0f:5a:
05:82:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:02:55 2026 by rpki-client