Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: FiCJ2NwzvfVYla7dOFj/ENRht6KX+Vz1WIJBeqeJEIE=
Subject key identifier: 74:F0:F1:6C:6E:D4:03:45:FB:26:E1:23:23:01:3A:51:70:8C:82:63
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 66760ED1D3D2F2C624C465CA62176129F42F5D2B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20473.roa
Signing time: Wed 11 Nov 2026 10:26:33 +0000
ROA not before: Wed 11 Nov 2026 10:21:33 +0000
ROA not after: Wed 10 Nov 2027 10:26:33 +0000
asID: 20473
IP address blocks: 179.61.130.0/24 maxlen: 24
179.61.226.0/24 maxlen: 24
181.215.70.0/24 maxlen: 24
191.101.66.0/23 maxlen: 23
2a0b:500::/32 maxlen: 48
2a0b:501::/32 maxlen: 48
2a0b:502::/32 maxlen: 48
2a0b:503::/32 maxlen: 48
2a0b:504::/32 maxlen: 48
2a0b:505::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:76:0e:d1:d3:d2:f2:c6:24:c4:65:ca:62:17:61:29:f4:2f:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 11 10:21:33 2026 GMT
Not After : Nov 10 10:26:33 2027 GMT
Subject: CN=74F0F16C6ED40345FB26E12323013A51708C8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:2c:f2:e7:75:9f:f8:55:51:76:7c:00:bb:
df:46:68:aa:72:22:d2:77:6c:b3:5f:28:3d:a0:1f:
dd:36:a4:c9:f4:ba:e5:c8:6a:d9:5f:83:d6:05:0d:
d9:36:ab:7a:24:d4:87:4d:49:30:9e:a9:0f:4b:36:
23:79:95:81:11:ac:be:51:25:8e:ec:c1:d7:3e:f5:
9a:4b:ac:c2:be:6e:de:fa:3d:cc:27:e8:8d:64:e8:
23:74:ad:1e:13:bc:32:34:b1:23:6e:9b:10:89:29:
27:3e:06:0f:7c:ea:7f:29:02:c7:48:97:9f:2b:a2:
6c:9a:6c:65:41:f5:65:7b:a6:2f:ad:f1:f6:28:e0:
8f:84:e5:19:f5:a1:2d:bc:a7:ed:39:e6:08:d3:74:
fe:de:9c:4c:ba:eb:d7:a2:3b:53:99:a2:a8:5f:cc:
68:62:1c:f3:f2:60:42:f9:25:a0:21:80:f7:06:ec:
32:9e:12:3b:b6:da:95:17:e9:bf:1d:e9:c2:1b:83:
cf:f7:da:41:38:c8:41:76:8f:1a:4d:7e:07:06:aa:
ca:c9:e3:52:d7:69:20:13:f0:e4:1f:61:24:87:fa:
26:b8:6e:fc:b0:38:8f:97:d3:3a:10:ce:60:a3:89:
0d:95:2f:12:fe:5b:db:5f:57:79:ce:e0:70:d6:fe:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:F1:6C:6E:D4:03:45:FB:26:E1:23:23:01:3A:51:70:8C:82:63
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.130.0/24
179.61.226.0/24
181.215.70.0/24
191.101.66.0/23
IPv6:
2a0b:500::-2a0b:505:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
85:cc:60:e6:f2:cf:d9:c1:9d:f3:ec:10:19:10:4c:68:99:0f:
a6:6d:eb:03:15:d3:6f:ff:4c:6a:ff:1c:76:86:d5:f4:69:95:
e4:dc:1e:0b:de:3c:ef:c9:24:3e:4c:56:1b:15:ac:f0:ec:03:
b9:6e:a6:d8:f1:2e:56:3b:ec:59:14:31:ad:8d:b8:49:49:d9:
01:98:4b:a4:80:a2:f0:d0:fc:29:e6:b3:48:ef:2e:e9:ee:f2:
31:77:00:bc:6a:71:03:31:64:97:02:bf:c9:86:75:ac:11:50:
6b:b5:33:29:02:a6:42:4a:d0:6a:1b:80:63:37:b7:58:66:56:
de:b7:ac:6d:fb:36:1c:9c:b2:44:c1:0f:4d:17:22:36:b5:09:
e1:29:e8:d6:6e:6f:b6:f1:4a:76:de:89:d4:13:c9:4f:9b:d8:
77:33:23:18:bc:8f:6e:da:f6:b0:2b:f3:f4:07:83:9f:9c:32:
c0:36:a6:2b:61:b1:36:c0:b2:bb:89:74:ae:28:f8:4a:58:f8:
95:e8:c8:c7:38:ca:dc:01:3f:7d:6f:3b:68:c4:0d:2c:db:a2:
13:2a:15:0e:d9:96:ff:20:03:26:c3:67:83:d2:76:aa:7a:dd:
8e:c9:bd:eb:29:94:b6:24:c6:a3:58:66:f4:a0:41:c4:7d:0a:
94:b0:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:19:28 2026 by rpki-client