Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: dpi9ilQseJnrduGcrvOpLoWKwwi27yiTNYKIf1ucgro=
Subject key identifier: 20:25:64:BC:B0:C0:8A:82:C0:F8:9F:BE:8C:4C:E4:C1:6D:B8:71:99
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 39C2F1F5FD3733F02A101774B99CFF3CF3D82E40
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa
Signing time: Fri 30 Oct 2026 20:03:58 +0000
ROA not before: Fri 30 Oct 2026 19:58:58 +0000
ROA not after: Fri 29 Oct 2027 20:03:58 +0000
asID: 20473
IP address blocks: 141.11.70.0/24 maxlen: 24
141.11.116.0/24 maxlen: 24
141.11.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c2:f1:f5:fd:37:33:f0:2a:10:17:74:b9:9c:ff:3c:f3:d8:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 30 19:58:58 2026 GMT
Not After : Oct 29 20:03:58 2027 GMT
Subject: CN=202564BCB0C08A82C0F89FBE8C4CE4C16DB87199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:4d:4e:b7:9b:85:86:bd:2d:09:4d:e3:97:
d3:4a:6f:87:96:21:7c:b0:7f:27:89:c3:fa:bf:1b:
72:10:11:35:5d:5b:ce:30:28:59:03:7e:9f:b2:67:
51:6f:41:c2:e2:1f:1e:ac:55:f8:62:50:76:29:17:
fb:55:49:5a:e4:e6:f8:e2:f3:54:da:61:8f:09:3b:
33:e0:a5:5c:93:4f:be:ae:8b:fa:27:3f:72:7c:1a:
d3:6d:9b:74:d7:1d:f8:d3:3f:e2:a4:3c:a5:0f:c6:
a4:8b:9f:19:53:c0:35:af:dd:b5:1a:e1:e7:78:05:
77:3e:6d:d8:b0:d9:7e:1e:a9:88:3f:ff:5b:64:01:
97:21:24:bf:8a:49:54:60:3e:de:28:54:71:66:c1:
db:44:61:38:b5:fe:d1:50:41:35:20:8a:dc:84:de:
b5:0e:bc:22:be:b8:db:bd:93:79:ff:20:eb:83:e2:
43:fd:60:0f:4a:86:ea:67:ed:24:3f:94:05:85:1d:
69:b8:fb:0c:27:a6:a9:2d:1c:58:55:7d:d3:8d:42:
bd:3e:71:af:4d:40:ee:66:d8:02:f1:21:76:a2:fe:
22:b7:64:e9:d4:5c:0a:42:19:97:e0:de:3a:ce:de:
0e:b3:fd:77:18:5f:af:cc:11:5b:27:5c:22:71:a3:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:64:BC:B0:C0:8A:82:C0:F8:9F:BE:8C:4C:E4:C1:6D:B8:71:99
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.70.0/24
141.11.116.0/24
141.11.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:db:6b:ad:37:c5:bc:b4:d4:a8:7c:82:cd:ec:61:07:96:5c:
5b:9c:8b:fa:e3:37:54:54:7d:27:b7:ee:e1:15:e0:23:de:b3:
c0:e3:cb:ba:76:7c:af:5e:8b:9b:1e:dd:93:5b:90:a5:df:4d:
1f:b9:6a:11:26:5f:3a:50:a6:10:01:cb:c8:d7:94:ed:8e:0e:
34:1f:ce:73:38:9e:e2:fc:93:9d:6c:e7:d6:1a:2f:f7:44:70:
43:61:15:7d:17:1c:e7:d0:27:38:3b:2a:8c:a3:c0:03:df:12:
20:31:45:5c:87:cf:d2:10:c2:6c:b8:49:44:db:c9:8e:db:e8:
aa:18:3e:31:0f:97:fc:f5:d2:b9:09:52:db:e7:71:09:2d:9b:
dd:86:6d:e8:03:9a:11:e3:bb:85:7a:5a:ff:9b:2c:19:aa:8b:
2f:61:74:ba:af:90:2e:81:ac:a2:5f:05:0d:dd:eb:b1:24:9f:
6e:49:18:2f:31:22:cc:b3:b1:5b:aa:ed:89:49:57:35:dc:6a:
92:cb:e2:56:c8:94:b4:18:85:14:d3:3f:d3:d8:8d:14:7c:c6:
db:e1:5f:9f:02:7f:2c:63:ba:bb:b7:eb:d8:62:c6:c4:87:62:
df:08:e4:ad:5d:b9:c5:88:33:83:34:cf:31:07:0a:ab:da:78:
41:94:93:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:59:30 2026 by rpki-client