Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20648.roa
File: AS20648.roa (raw, json)
Hash identifier: pEGUisJueICoM8u8EctiHut6Hbb33jSgBIYgWpp5HZw=
Subject key identifier: 9B:90:8C:06:0B:73:AE:DE:F3:6A:D7:BD:01:C9:A9:E5:0D:09:C2:E1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 767F40766C62212F1C1F26614023A23B463AE922
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20648.roa
Signing time: Sun 06 Sep 2026 07:30:05 +0000
ROA not before: Sun 06 Sep 2026 07:25:05 +0000
ROA not after: Sun 05 Sep 2027 07:30:05 +0000
asID: 20648
IP address blocks: 91.124.60.0/24 maxlen: 24
91.124.116.0/24 maxlen: 24
95.134.54.0/24 maxlen: 24
95.134.60.0/24 maxlen: 24
95.134.232.0/24 maxlen: 24
95.135.249.0/24 maxlen: 24
178.95.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7f:40:76:6c:62:21:2f:1c:1f:26:61:40:23:a2:3b:46:3a:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 6 07:25:05 2026 GMT
Not After : Sep 5 07:30:05 2027 GMT
Subject: CN=9B908C060B73AEDEF36AD7BD01C9A9E50D09C2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:85:39:66:4a:cc:30:32:3e:f9:73:a1:fe:
f0:3c:d2:24:ca:14:e1:4a:d9:63:90:b7:5c:a7:06:
c9:57:a5:fb:04:b6:9e:b7:a4:08:1e:19:fc:1f:53:
dc:13:12:4c:37:c9:b9:b2:f7:a1:2d:bb:32:2c:ee:
ae:1f:34:b9:f2:d7:ab:7f:65:01:45:fd:12:ae:f0:
78:6f:06:4a:91:e9:cc:ed:e2:83:e4:f7:91:ae:fa:
84:21:27:96:6a:6e:bf:b2:ee:fe:90:6c:f6:d3:bc:
2a:f6:0e:af:8d:fc:4b:c3:1a:cf:a7:75:3d:3f:19:
01:78:99:13:8b:28:39:96:a2:a9:12:10:4a:a2:ab:
7d:34:a6:c7:65:a1:4a:c8:03:42:d6:7f:ef:4e:c0:
ec:5c:0b:2f:0b:ae:d1:d9:d0:aa:2e:74:fc:94:ea:
c0:1f:0f:45:52:5a:ee:63:3b:ca:e0:78:d0:8d:2d:
a1:4b:3c:2a:a1:91:8d:26:92:4e:87:d8:02:a2:5e:
f7:3b:00:9c:c6:7c:db:fb:07:f5:9e:17:79:2c:d5:
ae:fa:4d:7d:d5:63:fc:49:d0:95:f6:b1:8e:50:a9:
94:97:38:1d:6f:b0:7d:63:3b:c7:65:ad:ca:b5:ce:
0b:70:3d:88:8f:82:50:8d:65:d6:56:1b:ce:8c:bd:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:8C:06:0B:73:AE:DE:F3:6A:D7:BD:01:C9:A9:E5:0D:09:C2:E1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.60.0/24
91.124.116.0/24
95.134.54.0/24
95.134.60.0/24
95.134.232.0/24
95.135.249.0/24
178.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
95:dd:87:f6:9b:d8:22:ee:97:93:f3:bc:49:4f:b6:19:e0:0c:
df:bd:1f:28:5b:13:b9:68:c7:85:ca:ef:50:b0:64:f9:3f:a9:
c2:f9:cf:3f:7b:70:28:c1:f4:86:f9:07:a9:48:71:e0:df:9e:
3c:30:c6:7c:b2:cb:ed:40:bb:d4:2b:12:d2:86:ea:d0:7e:f6:
bc:63:38:82:5e:01:5d:53:5e:9d:0f:ee:6b:3d:e9:6d:79:7d:
b3:35:eb:76:87:b0:7f:55:50:68:1f:d0:3c:11:a0:c9:ed:70:
df:e3:8b:70:fb:9e:b5:09:d8:91:7f:c3:ec:5b:c1:63:27:66:
ca:9b:04:7c:3b:80:b7:0a:2c:97:5a:c4:9b:5d:58:3f:8c:50:
e1:92:9e:3e:18:40:c3:9a:b4:48:b8:94:dc:32:3e:9d:10:7f:
06:4f:22:4f:1b:e7:97:6e:47:b5:44:5c:86:db:3f:f9:7c:3f:
40:11:06:d1:b9:04:a8:bd:14:d0:99:ee:5e:6b:34:33:36:f8:
05:b3:e2:f3:27:56:70:3b:fc:e9:e1:f7:85:85:59:cf:d5:7b:
f6:01:48:9c:18:e8:f0:67:f8:33:3b:8f:1c:33:65:e3:41:dd:
be:db:eb:a3:ca:64:d4:c8:d9:6d:bb:cb:f6:86:fe:b9:ad:7b:
1c:d2:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:59:18 2026 by rpki-client