Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 6HhOGrV6sONbxkxzTnEitRwtfwEmmQA/duAENddVhc8=
Subject key identifier: 0E:9E:E5:81:83:7E:E8:6D:5A:AC:23:CD:94:E2:49:8E:78:3E:75:FB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 236F9DD5E58391DD325463A137327D33F1664702
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
Signing time: Mon 20 Jul 2026 13:14:30 +0000
ROA not before: Mon 20 Jul 2026 13:09:30 +0000
ROA not after: Mon 19 Jul 2027 13:14:30 +0000
asID: 20473
IP address blocks: 96.62.111.0/24 maxlen: 24
148.135.161.0/24 maxlen: 24
150.241.216.0/21 maxlen: 24
162.141.12.0/24 maxlen: 24
168.222.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6f:9d:d5:e5:83:91:dd:32:54:63:a1:37:32:7d:33:f1:66:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 20 13:09:30 2026 GMT
Not After : Jul 19 13:14:30 2027 GMT
Subject: CN=0E9EE581837EE86D5AAC23CD94E2498E783E75FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:f8:99:15:63:52:43:2e:a1:74:19:e1:27:
5b:6f:09:a0:a3:41:c0:8d:12:e8:7c:80:4a:36:cc:
b9:8a:88:fa:84:7d:b7:59:d9:bd:e9:c5:cc:56:35:
13:2e:8c:93:1c:72:58:2e:fc:91:f8:f1:64:71:60:
b4:70:93:32:07:60:c2:a7:44:d5:f3:67:a4:2b:3a:
3e:6c:25:b8:81:07:be:0c:50:11:c5:3b:5f:e3:19:
c9:d6:af:20:02:ef:12:29:75:1e:59:ab:ae:55:ea:
60:db:0d:95:73:95:fb:c3:fa:2b:67:dc:f8:06:46:
b3:11:2a:0f:3c:20:1f:49:df:79:38:ac:28:78:96:
b5:e8:bb:26:ab:a0:39:64:3d:3d:f1:4c:52:8f:51:
32:c3:f9:53:65:05:2c:85:8e:1d:84:3a:01:7f:42:
de:c9:fa:88:7a:08:45:27:7a:8e:95:ed:b9:f0:fe:
28:f3:8e:47:2a:40:b8:4e:fa:69:e5:8d:cf:20:4e:
8f:18:d5:0c:73:b7:7a:c2:67:94:88:a6:97:6e:91:
89:4b:90:99:c7:42:16:0d:c0:c6:c4:b6:fb:d2:f0:
9e:f4:16:90:a3:40:9e:31:dc:69:bc:79:f6:b5:46:
86:cd:f3:02:2d:94:93:d9:fd:2b:06:fc:0e:b3:48:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9E:E5:81:83:7E:E8:6D:5A:AC:23:CD:94:E2:49:8E:78:3E:75:FB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.111.0/24
148.135.161.0/24
150.241.216.0/21
162.141.12.0/24
168.222.89.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c3:52:91:ee:36:f5:79:d9:39:8a:c5:70:6d:98:77:fa:fd:
91:aa:00:8b:e5:fd:f5:c2:e8:61:9e:fa:2a:e5:c8:27:e2:97:
65:ea:c5:f9:13:31:5c:40:22:6a:d5:b2:88:a5:06:b5:b0:51:
f1:35:5b:b1:03:55:f9:79:5d:c9:cb:32:17:ba:bd:ee:20:71:
11:79:99:d6:14:29:77:72:f3:f7:de:c7:18:10:b2:70:89:86:
d8:87:2f:98:7d:d6:36:80:78:00:0a:0a:ac:84:0b:4f:e5:73:
e1:22:6e:c2:e8:a8:0e:86:cb:2e:6c:6f:b8:09:1c:bc:e1:4e:
5d:96:96:03:42:1a:22:6f:19:a6:85:6f:1e:31:fe:c2:6e:8d:
fb:7c:66:8c:d1:7c:8b:ed:ce:5b:1f:2c:00:71:05:96:98:da:
58:03:31:91:d7:2e:56:2c:41:4d:db:ca:9e:61:a1:fc:9d:58:
1c:67:c4:c4:13:3f:f2:a2:78:78:61:eb:f5:f7:f9:31:19:61:
cf:b9:0e:b1:85:60:5a:6f:5d:54:5f:45:db:7a:18:2d:39:c7:
84:4b:c6:d4:2b:8d:84:88:ec:74:3b:74:f0:b8:fa:89:6a:54:
d4:69:cf:f1:dc:7d:22:5e:58:55:14:4e:e3:d8:33:46:75:93:
b6:88:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:00 2026 by rpki-client