Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: iOWgnYvllUPhgiUvn5tCmqjVK/lMNYOf/YAmETpccfk=
Subject key identifier: 5C:2B:FB:5D:28:E6:A9:9A:5B:1D:DE:18:E4:D0:69:B0:2A:95:1B:35
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 16805CBE06FA979C0903E54EF00BB3BD4D2C7014
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
Signing time: Thu 30 Apr 2026 07:30:52 +0000
ROA not before: Thu 30 Apr 2026 07:25:52 +0000
ROA not after: Thu 29 Apr 2027 07:30:52 +0000
asID: 20473
IP address blocks: 148.135.161.0/24 maxlen: 24
150.241.216.0/21 maxlen: 24
162.141.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:80:5c:be:06:fa:97:9c:09:03:e5:4e:f0:0b:b3:bd:4d:2c:70:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 30 07:25:52 2026 GMT
Not After : Apr 29 07:30:52 2027 GMT
Subject: CN=5C2BFB5D28E6A99A5B1DDE18E4D069B02A951B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:c3:14:6f:7a:b7:36:1f:2a:3a:eb:63:08:
c8:fb:2b:c1:90:ed:e8:df:5a:a7:18:09:1e:25:e1:
73:d5:a4:2c:cf:67:f7:83:a9:21:e3:8c:6c:2d:1b:
0c:c4:15:70:28:b9:8d:1e:8b:fa:c9:d0:83:c3:ca:
24:b4:a5:73:a7:6d:7a:0f:be:c2:0b:42:b7:9d:37:
80:f4:e3:1a:0b:88:3e:42:08:0b:30:26:e7:7d:30:
8a:3d:b7:13:6b:f2:da:4e:23:79:55:b9:c6:6e:de:
d8:de:62:71:06:04:f5:41:65:ad:6a:6e:80:e2:4c:
11:f6:6a:67:27:29:06:c9:e2:b5:81:fa:b2:57:6f:
69:2e:57:71:ba:d4:6b:39:bd:a2:42:de:53:70:9a:
56:8d:1a:36:7d:63:a5:82:cb:d9:ad:88:9a:f4:9b:
4f:14:92:38:83:e9:ae:93:86:e6:65:fc:1c:77:7f:
b3:45:c6:21:43:92:b3:50:64:eb:c1:16:d9:7e:52:
b2:ff:09:5a:d2:79:f5:c2:1b:8c:bc:51:95:75:4d:
f0:19:e1:79:69:7c:5a:4c:25:a8:53:80:dc:e7:c9:
38:27:81:e2:ec:06:16:be:c3:a4:c7:05:d5:80:08:
ac:6e:f6:63:4a:78:9e:a6:80:5a:67:63:0e:32:fd:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2B:FB:5D:28:E6:A9:9A:5B:1D:DE:18:E4:D0:69:B0:2A:95:1B:35
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.161.0/24
150.241.216.0/21
162.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
63:dd:f7:de:1e:e3:2b:b0:05:69:2d:5b:dc:b4:00:d0:89:48:
31:c8:40:dc:4a:ac:d2:cc:e4:d7:83:17:be:8d:15:5a:f1:fd:
76:b1:69:f7:75:d3:ba:f2:80:be:d1:09:99:0f:ce:db:f0:45:
51:75:e0:d3:23:3f:71:f8:2a:41:57:05:bc:16:0a:a6:12:e2:
57:6c:35:75:e7:47:36:df:b0:6e:94:de:56:25:5a:0b:ef:32:
3b:05:f0:7d:e2:83:0c:cd:d8:97:0b:0b:bb:08:6d:ec:ee:c7:
37:4d:bb:7b:8f:73:03:f5:f8:65:00:f6:f5:01:71:f1:0f:d5:
cc:4a:d4:f7:d9:ba:db:62:65:09:e1:0f:f8:03:58:71:ff:44:
a5:74:15:86:f0:2c:04:cf:71:14:4e:8d:48:b6:60:24:ea:bb:
33:e8:cb:0f:6e:29:d1:82:3c:39:e5:8b:e8:d1:48:1d:dd:28:
52:ed:3e:fc:96:d9:3c:89:07:63:14:31:45:d6:08:ff:70:92:
9b:2d:65:6f:63:cc:51:01:96:f3:d3:21:d5:a9:54:aa:e3:aa:
7a:cc:db:c7:f1:69:35:59:b0:c4:49:cd:36:b7:39:29:31:c1:
dc:a9:de:fc:14:12:3c:70:c2:42:ce:94:24:ef:a5:8c:54:57:
26:dd:4a:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:24:45 2026 by rpki-client