Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: WXPdSELJfO0DvcxbnahjG9tOrbYMcBD480lOO0JebAQ=
Subject key identifier: EF:43:91:5D:AC:22:9B:3A:15:2E:E4:E3:97:46:61:1C:CC:30:00:59
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3F42436313C3C76DBCC878F6DCA054918229792C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
Signing time: Mon 21 Sep 2026 12:58:05 +0000
ROA not before: Mon 21 Sep 2026 12:53:05 +0000
ROA not after: Mon 20 Sep 2027 12:58:05 +0000
asID: 20473
IP address blocks: 66.132.250.0/24 maxlen: 24
148.135.161.0/24 maxlen: 24
150.241.216.0/21 maxlen: 24
162.141.12.0/24 maxlen: 24
168.222.30.0/24 maxlen: 24
168.222.89.0/24 maxlen: 24
168.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:42:43:63:13:c3:c7:6d:bc:c8:78:f6:dc:a0:54:91:82:29:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 12:53:05 2026 GMT
Not After : Sep 20 12:58:05 2027 GMT
Subject: CN=EF43915DAC229B3A152EE4E39746611CCC300059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:90:09:01:18:f2:9b:9a:86:4f:17:51:21:
a7:d2:ec:4d:05:bc:7b:0d:c9:8c:c6:19:df:df:67:
87:bc:aa:8d:c1:30:ac:88:71:4e:db:e6:8f:b4:92:
f5:93:77:ae:2a:09:73:5b:91:15:ca:57:62:28:10:
31:92:c8:5e:30:d4:3d:2b:58:15:27:e1:1d:91:69:
5f:a2:4b:c4:64:ab:7e:a7:44:98:01:d2:08:82:b5:
0a:7a:2f:ac:e0:3a:38:f4:f7:9e:5a:a9:73:63:49:
2a:19:51:ad:41:c9:da:73:ae:56:69:50:89:37:e2:
ea:b1:09:70:42:98:b9:64:1e:cf:dd:ca:15:d4:8b:
7f:74:7c:ae:db:91:30:33:ee:74:7f:02:89:3f:c6:
44:39:12:01:4c:fe:3d:a2:75:62:01:e1:1a:bd:e3:
27:aa:31:30:8a:d0:96:27:95:8d:49:ed:e8:9c:f6:
b7:d2:37:f0:58:b8:32:c1:e5:ed:3a:c9:18:cc:f9:
65:d6:98:36:4b:b8:5c:44:bd:44:fd:e2:ae:4e:30:
8f:97:95:a2:c8:a2:36:41:d7:db:7e:d6:4c:28:24:
27:97:11:d3:41:07:0c:68:58:69:cc:b5:a0:bd:b7:
51:7c:40:ae:0e:a4:e6:23:ab:4a:ce:83:f1:38:a6:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:91:5D:AC:22:9B:3A:15:2E:E4:E3:97:46:61:1C:CC:30:00:59
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.250.0/24
148.135.161.0/24
150.241.216.0/21
162.141.12.0/24
168.222.30.0/24
168.222.89.0/24
168.222.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:10:65:1e:7a:ce:0c:c9:60:31:76:c0:c8:c0:6f:9a:41:66:
a4:10:81:ff:65:8c:41:f9:aa:e8:86:8c:dd:5b:a2:ef:70:a6:
b0:c4:36:5f:13:e7:be:c9:8b:97:d8:cd:96:c0:0b:f2:cb:f9:
fd:fd:e2:1f:6a:7e:f0:01:f6:e9:d2:76:5a:d3:bb:c6:8d:7d:
6f:b1:3a:0b:56:43:be:52:e8:07:e1:ff:b5:61:77:ec:aa:58:
98:5c:ce:4c:e4:cb:c4:f6:d6:ef:c0:78:1c:81:66:19:06:b3:
8b:80:1e:1f:ae:3e:a7:99:54:b2:6a:28:51:c4:a1:8b:08:e3:
94:ed:4e:be:3f:dd:3c:a9:ce:1a:8c:47:94:38:aa:3d:06:c7:
dd:ad:5a:af:c1:25:f5:76:a0:b7:65:a0:5f:b8:53:23:60:c1:
5c:d0:f7:b9:f2:b8:08:33:fb:d6:4b:95:9e:d3:1e:47:b3:ad:
ad:92:66:69:62:ac:53:e3:01:26:4c:1d:e8:32:fe:2f:92:a5:
3b:28:68:5f:e7:bd:8e:59:cc:7c:55:59:e2:e2:4e:5b:66:ce:
24:a2:e8:c5:68:b4:23:96:0b:19:f1:8f:ca:dd:e1:79:fa:61:
7d:4f:f4:aa:ed:d0:18:a6:55:00:0f:e2:cd:a8:bc:0a:d6:fd:
e0:5c:a4:cc
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUP0JDYxPDx228yHj23KBUkYIpeSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjExMjUzMDVaFw0yNzA5MjAxMjU4MDVaMDMxMTAvBgNV
BAMTKEVGNDM5MTVEQUMyMjlCM0ExNTJFRTRFMzk3NDY2MTFDQ0MzMDAwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg75AJARjym5qGTxdRIafS7E0F
vHsNyYzGGd/fZ4e8qo3BMKyIcU7b5o+0kvWTd64qCXNbkRXKV2IoEDGSyF4w1D0r
WBUn4R2RaV+iS8Rkq36nRJgB0giCtQp6L6zgOjj0955aqXNjSSoZUa1BydpzrlZp
UIk34uqxCXBCmLlkHs/dyhXUi390fK7bkTAz7nR/Aok/xkQ5EgFM/j2idWIB4Rq9
4yeqMTCK0JYnlY1J7eic9rfSN/BYuDLB5e06yRjM+WXWmDZLuFxEvUT94q5OMI+X
laLIojZB19t+1kwoJCeXEdNBBwxoWGnMtaC9t1F8QK4OpOYjq0rOg/E4pnVBAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU70ORXawimzoVLuTjl0ZhHMwwAFkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBABChPoD
BACUh6EDBAOW8dgDBACijQwDBACo3h4DBACo3lkDBACo3l8wDQYJKoZIhvcNAQEL
BQADggEBAFoQZR56zgzJYDF2wMjAb5pBZqQQgf9ljEH5quiGjN1bou9wprDENl8T
577Ji5fYzZbAC/LL+f394h9qfvAB9unSdlrTu8aNfW+xOgtWQ75S6Afh/7Vhd+yq
WJhczkzky8T21u/AeByBZhkGs4uAHh+uPqeZVLJqKFHEoYsI45TtTr4/3TypzhqM
R5Q4qj0Gx92tWq/BJfV2oLdloF+4UyNgwVzQ97nyuAgz+9ZLlZ7THkezra2SZmli
rFPjASZMHegy/i+SpTsoaF/nvY5ZzHxVWeLiTltmziSi6MVotCOWCxnxj8rd4Xn6
YX1P9Krt0BimVQAP4s2ovArW/eBcpMw=
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:18:17 2026 by rpki-client