Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20771.roa
File: AS20771.roa (raw, json)
Hash identifier: +W7NeyLDDAT0cnDmdxoEcqQ7TcZBmqUUr5nfOap7l6U=
Subject key identifier: FF:AA:BC:38:CB:C6:34:05:6E:0F:FA:9F:62:C4:4F:FD:3E:2A:EB:A3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2ABAB4C5790C955608F66A1DE1121168AD138D69
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20771.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 20771
IP address blocks: 109.106.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ba:b4:c5:79:0c:95:56:08:f6:6a:1d:e1:12:11:68:ad:13:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=FFAABC38CBC634056E0FFA9F62C44FFD3E2AEBA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:30:51:f4:5d:b0:7b:ca:0a:f8:68:5c:a6:
e7:02:04:f4:27:06:35:b7:03:5b:46:b6:96:c7:c8:
f7:7c:26:60:47:a1:56:a8:80:cb:4a:96:b0:f9:ef:
54:8f:e0:ab:50:53:57:cd:5f:35:79:c6:31:0d:58:
88:4b:20:e1:ac:42:d9:6f:9a:75:9e:62:37:7a:0c:
19:1b:dd:23:68:f5:0b:46:a4:3f:ef:d4:a1:47:6a:
e6:e8:59:30:06:39:a4:cd:88:98:5e:aa:1f:3b:88:
89:ea:ed:e2:ba:9e:73:72:15:9b:07:e4:f2:1f:92:
53:17:41:b4:53:ed:be:38:c3:87:8c:a4:53:d1:a7:
68:18:ab:35:cf:0b:f2:7a:1e:66:26:a6:a4:75:dd:
55:2c:d0:ad:42:05:f7:67:a8:8a:0b:82:ab:91:0d:
a5:fa:0d:ef:f0:09:bb:22:c4:52:14:12:23:0b:34:
dd:fc:d9:3f:a2:a9:b7:b3:1c:99:ca:b9:c6:46:d1:
4b:81:09:52:6f:5f:c3:87:28:fa:cb:db:c8:52:51:
70:44:c2:29:8e:a5:01:3c:f7:c8:77:fa:55:27:af:
e2:c6:c9:6b:47:9e:1e:eb:56:b4:97:00:d6:7c:50:
f6:bc:59:bf:bd:21:32:5e:30:ec:35:4c:1f:1d:1f:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:BC:38:CB:C6:34:05:6E:0F:FA:9F:62:C4:4F:FD:3E:2A:EB:A3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.0.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:50:db:35:5e:af:46:94:05:de:bb:ab:4a:b3:b5:ea:ed:
1e:5c:62:71:48:8a:4e:c5:10:31:21:11:9c:32:fb:72:22:2c:
64:a0:93:c8:c4:1e:2c:73:98:dd:96:99:91:92:36:a2:5f:3c:
51:df:f3:17:66:a5:56:ae:07:cd:9a:0d:c4:7a:3a:78:7a:56:
d1:e2:be:f4:f0:c5:e1:41:34:5b:4c:55:51:d2:3d:09:d0:5c:
41:95:2f:a1:42:a0:0a:82:28:53:81:f0:7e:99:03:49:5d:bc:
75:13:80:3f:bc:9d:b6:0f:80:f6:5f:cf:40:28:e1:06:7a:50:
c7:15:df:d4:9b:0b:9f:41:19:37:dd:bc:57:9b:0f:80:0c:62:
3a:48:7d:2a:c5:fe:86:70:17:be:3c:77:c7:b9:9a:8a:2a:fc:
e6:7d:d2:e3:e1:29:d6:b3:bf:d7:a7:65:e8:09:41:b0:e8:b7:
c5:8e:c6:61:f8:5e:27:97:21:a0:81:50:7a:a3:90:df:97:e5:
18:63:5a:f3:2f:a2:0d:22:21:5b:76:36:63:86:dd:2a:db:b7:
88:e8:cd:e0:19:ae:fe:de:be:27:9f:06:f6:a7:f2:cb:e3:1e:
ee:4f:be:51:c6:f3:ef:f5:cd:ee:b6:10:8b:4b:f6:46:c2:2a:
97:78:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:57:30 2026 by rpki-client