Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: jlRddKpEjf3oOc/6TYRhRSzAFOltjbUGfgVEHaynxj8=
Subject key identifier: 20:A5:EC:97:34:A5:86:1C:85:05:01:9C:36:A7:8B:AB:77:A8:46:03
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 759152D7AECF1B386BB1FBB0AFE0965F45BAEB50
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20473.roa
Signing time: Sun 20 Sep 2026 00:08:27 +0000
ROA not before: Sun 20 Sep 2026 00:03:27 +0000
ROA not after: Sun 19 Sep 2027 00:08:27 +0000
asID: 20473
IP address blocks: 46.202.61.0/24 maxlen: 24
46.202.98.0/23 maxlen: 24
46.203.248.0/23 maxlen: 24
91.124.14.0/23 maxlen: 23
91.124.18.0/23 maxlen: 23
91.124.40.0/23 maxlen: 23
91.124.42.0/23 maxlen: 23
91.124.80.0/23 maxlen: 24
91.124.87.0/24 maxlen: 24
91.124.145.0/24 maxlen: 24
91.124.172.0/23 maxlen: 24
91.124.174.0/24 maxlen: 24
91.124.178.0/23 maxlen: 24
91.124.186.0/24 maxlen: 24
91.124.236.0/23 maxlen: 23
92.112.147.0/24 maxlen: 24
95.134.52.0/23 maxlen: 24
95.134.104.0/21 maxlen: 24
95.134.118.0/23 maxlen: 24
95.134.156.0/23 maxlen: 24
95.134.162.0/23 maxlen: 24
95.134.165.0/24 maxlen: 24
95.135.12.0/23 maxlen: 23
95.135.18.0/23 maxlen: 23
95.135.24.0/23 maxlen: 23
95.135.30.0/23 maxlen: 23
95.135.36.0/23 maxlen: 23
95.135.48.0/23 maxlen: 23
95.135.54.0/23 maxlen: 23
95.135.68.0/23 maxlen: 23
95.135.124.0/23 maxlen: 23
95.135.160.0/23 maxlen: 23
95.135.166.0/23 maxlen: 24
95.135.178.0/24 maxlen: 24
95.135.202.0/23 maxlen: 23
95.135.240.0/23 maxlen: 23
95.135.244.0/23 maxlen: 23
95.135.254.0/23 maxlen: 23
178.92.40.0/22 maxlen: 22
178.92.40.0/24 maxlen: 24
178.92.48.0/24 maxlen: 24
178.92.72.0/23 maxlen: 23
178.92.96.0/23 maxlen: 23
178.92.110.0/23 maxlen: 23
178.92.120.0/22 maxlen: 22
178.92.126.0/23 maxlen: 23
178.92.128.0/23 maxlen: 23
178.92.136.0/23 maxlen: 23
178.92.138.0/23 maxlen: 24
178.92.142.0/23 maxlen: 23
178.92.146.0/23 maxlen: 23
178.92.158.0/23 maxlen: 23
178.92.192.0/23 maxlen: 23
178.92.194.0/23 maxlen: 23
178.92.204.0/23 maxlen: 23
178.92.208.0/23 maxlen: 23
178.92.216.0/23 maxlen: 23
178.92.218.0/23 maxlen: 23
178.92.254.0/23 maxlen: 24
178.93.78.0/23 maxlen: 23
178.93.80.0/22 maxlen: 22
178.93.118.0/23 maxlen: 23
178.93.160.0/23 maxlen: 23
178.93.170.0/23 maxlen: 23
178.93.176.0/23 maxlen: 23
178.93.178.0/23 maxlen: 23
178.93.182.0/23 maxlen: 23
178.93.184.0/23 maxlen: 23
178.93.200.0/23 maxlen: 23
178.93.212.0/23 maxlen: 23
178.93.216.0/23 maxlen: 23
178.93.230.0/23 maxlen: 24
178.93.238.0/23 maxlen: 23
178.93.246.0/23 maxlen: 23
178.93.248.0/23 maxlen: 23
178.93.250.0/23 maxlen: 23
178.93.252.0/23 maxlen: 23
178.94.10.0/23 maxlen: 23
178.94.22.0/23 maxlen: 23
178.94.24.0/23 maxlen: 23
178.94.28.0/23 maxlen: 23
178.94.30.0/23 maxlen: 23
178.94.36.0/23 maxlen: 23
178.94.42.0/23 maxlen: 23
178.94.160.0/23 maxlen: 23
178.94.176.0/23 maxlen: 23
178.94.178.0/23 maxlen: 24
178.94.182.0/23 maxlen: 23
178.94.235.0/24 maxlen: 24
178.94.250.0/23 maxlen: 23
178.94.250.0/24 maxlen: 24
178.94.252.0/23 maxlen: 23
178.95.16.0/22 maxlen: 24
178.95.32.0/22 maxlen: 24
178.95.36.0/22 maxlen: 24
178.95.40.0/22 maxlen: 24
178.95.44.0/23 maxlen: 24
178.95.46.0/24 maxlen: 24
178.95.52.0/23 maxlen: 24
178.95.56.0/22 maxlen: 24
178.95.58.0/23 maxlen: 24
178.95.74.0/23 maxlen: 24
178.95.78.0/23 maxlen: 24
178.95.132.0/23 maxlen: 24
178.95.150.0/23 maxlen: 24
178.95.152.0/22 maxlen: 24
178.95.154.0/24 maxlen: 24
178.95.156.0/23 maxlen: 24
178.95.160.0/23 maxlen: 24
178.95.163.0/24 maxlen: 24
178.95.164.0/24 maxlen: 24
178.95.166.0/24 maxlen: 24
178.95.170.0/23 maxlen: 24
178.95.174.0/23 maxlen: 24
178.95.176.0/23 maxlen: 24
178.95.179.0/24 maxlen: 24
178.95.184.0/22 maxlen: 24
178.95.192.0/22 maxlen: 24
178.95.196.0/24 maxlen: 24
178.95.197.0/24 maxlen: 24
178.95.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:91:52:d7:ae:cf:1b:38:6b:b1:fb:b0:af:e0:96:5f:45:ba:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 00:03:27 2026 GMT
Not After : Sep 19 00:08:27 2027 GMT
Subject: CN=20A5EC9734A5861C8505019C36A78BAB77A84603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:9f:48:ea:6d:1b:26:de:81:56:5e:e8:96:
71:33:47:86:7a:09:5b:79:c0:6f:6e:04:96:cf:df:
16:28:b6:db:57:cf:a0:9e:32:3e:9d:0b:cc:6c:dd:
66:86:2e:83:5b:2d:50:ff:39:43:f3:89:b2:bc:e2:
20:93:66:19:5d:16:1a:5e:a9:19:98:a7:07:2e:e0:
ca:bd:2a:ac:59:5c:84:d2:c4:8a:bf:54:60:dd:da:
90:af:eb:2f:5f:89:c2:c8:93:19:87:15:0c:9e:cf:
ee:b0:9e:ca:e2:76:9b:fa:65:c7:bf:df:c3:12:c2:
79:fd:e6:1b:71:d6:04:b6:78:cd:a3:f3:f7:29:da:
73:84:31:29:e2:23:e8:67:64:b8:ef:62:a0:d2:48:
79:33:ba:dc:cf:63:de:a1:1c:69:82:6b:3b:de:47:
a3:0d:0c:8f:7b:e8:a0:a8:b7:f2:c5:16:90:4b:7f:
26:68:ea:da:a3:5b:3a:d0:84:ae:3c:84:33:8b:55:
5e:65:20:6c:fc:50:cb:f8:74:ed:25:0c:74:46:f8:
05:ba:66:19:81:1b:4d:06:62:49:be:f5:f5:cc:7f:
54:65:2c:d4:29:04:50:bf:a1:02:96:44:17:0a:1b:
c8:83:0d:ae:aa:3b:a0:62:37:79:94:b8:df:ef:c1:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:EC:97:34:A5:86:1C:85:05:01:9C:36:A7:8B:AB:77:A8:46:03
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.61.0/24
46.202.98.0/23
46.203.248.0/23
91.124.14.0/23
91.124.18.0/23
91.124.40.0/22
91.124.80.0/23
91.124.87.0/24
91.124.145.0/24
91.124.172.0-91.124.174.255
91.124.178.0/23
91.124.186.0/24
91.124.236.0/23
92.112.147.0/24
95.134.52.0/23
95.134.104.0/21
95.134.118.0/23
95.134.156.0/23
95.134.162.0/23
95.134.165.0/24
95.135.12.0/23
95.135.18.0/23
95.135.24.0/23
95.135.30.0/23
95.135.36.0/23
95.135.48.0/23
95.135.54.0/23
95.135.68.0/23
95.135.124.0/23
95.135.160.0/23
95.135.166.0/23
95.135.178.0/24
95.135.202.0/23
95.135.240.0/23
95.135.244.0/23
95.135.254.0/23
178.92.40.0/22
178.92.48.0/24
178.92.72.0/23
178.92.96.0/23
178.92.110.0/23
178.92.120.0/22
178.92.126.0-178.92.129.255
178.92.136.0/22
178.92.142.0/23
178.92.146.0/23
178.92.158.0/23
178.92.192.0/22
178.92.204.0/23
178.92.208.0/23
178.92.216.0/22
178.92.254.0/23
178.93.78.0-178.93.83.255
178.93.118.0/23
178.93.160.0/23
178.93.170.0/23
178.93.176.0/22
178.93.182.0-178.93.185.255
178.93.200.0/23
178.93.212.0/23
178.93.216.0/23
178.93.230.0/23
178.93.238.0/23
178.93.246.0-178.93.253.255
178.94.10.0/23
178.94.22.0-178.94.25.255
178.94.28.0/22
178.94.36.0/23
178.94.42.0/23
178.94.160.0/23
178.94.176.0/22
178.94.182.0/23
178.94.235.0/24
178.94.250.0-178.94.253.255
178.95.16.0/22
178.95.32.0-178.95.46.255
178.95.52.0/23
178.95.56.0/22
178.95.74.0/23
178.95.78.0/23
178.95.132.0/23
178.95.150.0-178.95.157.255
178.95.160.0/23
178.95.163.0-178.95.164.255
178.95.166.0/24
178.95.170.0/23
178.95.174.0-178.95.177.255
178.95.179.0/24
178.95.184.0/22
178.95.192.0-178.95.197.255
178.95.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:e1:3f:49:38:77:67:60:dd:10:76:80:21:40:10:d1:41:b6:
14:d3:b0:ce:3c:7e:d8:63:ab:ca:ac:71:37:8c:d8:8a:0a:fc:
45:dd:b4:78:be:94:2e:8a:3b:25:c3:f1:01:4a:9e:ba:73:bb:
35:06:3b:ef:36:cf:05:57:ff:95:24:f2:be:b7:5d:29:67:9c:
9c:4c:07:06:d5:10:74:57:57:91:e0:bc:5b:93:54:12:23:c7:
1f:d8:bf:18:a2:2d:b6:6f:e9:0e:de:df:84:2a:a2:c6:22:4f:
ca:20:77:01:d2:ad:33:ac:b7:87:31:3e:ac:07:d1:6f:e1:15:
94:12:b0:b0:45:a6:0f:c5:e5:69:b2:18:cd:55:3d:29:44:74:
c6:3c:fa:c9:b3:c0:60:03:68:51:de:65:e5:10:ff:da:18:88:
a2:7c:9e:ab:fe:c9:e1:f0:d7:0d:48:fb:59:42:15:16:e4:71:
f4:72:4a:68:25:64:a6:5c:7e:bf:69:92:12:ca:b7:b2:c1:67:
0d:e6:88:9e:71:8d:48:c0:11:f9:29:19:d5:e2:80:45:49:1a:
bb:8f:89:9f:f5:d7:61:d7:07:48:76:12:07:68:12:b7:52:59:
ee:f1:fe:8a:6a:e8:6d:51:ed:78:ef:26:28:6a:01:79:8d:b1:
ce:59:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:19:26 2026 by rpki-client