Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: EUXf0vR5tqgD9+5BhE3oqawkfROhBYVt2rrV2w30VDo=
Subject key identifier: A6:DC:97:9B:01:7A:08:D2:A5:F3:D6:54:CE:54:5F:DD:C5:81:64:1F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6B603CDBA469F5BB129D05218BF2E2A8A47F02E8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Fri 23 Oct 2026 12:07:31 +0000
ROA not before: Fri 23 Oct 2026 12:02:31 +0000
ROA not after: Fri 22 Oct 2027 12:07:31 +0000
asID: 20473
IP address blocks: 82.22.45.0/24 maxlen: 24
82.38.41.0/24 maxlen: 24
82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
82.47.157.0/24 maxlen: 24
84.75.252.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
2a13:9500:170::/48 maxlen: 48
2a13:9500:1ac::/48 maxlen: 48
2a13:9500:1b3::/48 maxlen: 48
2a13:9500:1d8::/48 maxlen: 48
2a13:9500:1ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:60:3c:db:a4:69:f5:bb:12:9d:05:21:8b:f2:e2:a8:a4:7f:02:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 23 12:02:31 2026 GMT
Not After : Oct 22 12:07:31 2027 GMT
Subject: CN=A6DC979B017A08D2A5F3D654CE545FDDC581641F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:85:ba:8c:8c:d0:61:af:a4:ad:ef:f6:a9:
ee:05:b5:83:8d:bb:5c:38:a4:ac:fc:15:d0:48:78:
ae:24:e2:47:7e:e4:31:55:e0:b9:84:16:37:28:e6:
e1:6c:c9:0d:2c:8b:be:7f:ef:58:ed:b6:bc:56:44:
d7:11:38:a9:f2:7f:e6:84:ec:c9:72:45:cd:50:ef:
70:93:7a:fb:5c:17:98:43:e9:b1:cf:0a:91:46:c4:
c7:74:36:8f:49:95:30:b2:5b:7d:87:18:55:de:ab:
83:fe:a9:13:d0:2d:1e:bc:13:96:6b:93:bf:1d:90:
20:22:fe:ca:4b:d6:71:5a:1c:c6:a4:e4:a5:5a:87:
6c:2d:ba:5f:6f:d3:9c:2b:ee:81:fb:d5:9b:3f:ef:
fa:84:10:38:75:3b:88:0a:f4:f6:2a:59:63:e8:e4:
f7:10:58:a9:b6:1b:f5:70:be:8f:83:b6:15:c2:14:
ad:76:96:4e:27:86:39:13:5e:a1:d5:97:cb:00:57:
cb:88:2b:4e:8f:51:2f:91:18:51:0c:82:e7:3e:f8:
6c:17:e5:b2:4f:d3:05:d2:87:68:34:5b:41:1c:bf:
53:b2:db:cc:87:e2:dd:3c:ed:5f:ed:aa:0e:80:c4:
70:59:a9:c0:79:a6:d3:e2:a5:b7:e3:20:a9:6e:7f:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DC:97:9B:01:7A:08:D2:A5:F3:D6:54:CE:54:5F:DD:C5:81:64:1F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.45.0/24
82.38.41.0/24
82.39.162.0/23
82.41.117.0/24
82.47.157.0/24
84.75.252.0/24
178.83.107.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
2a13:9500:170::/48
2a13:9500:1ac::/48
2a13:9500:1b3::/48
2a13:9500:1d8::/48
2a13:9500:1ec::/48
Signature Algorithm: sha256WithRSAEncryption
9f:fb:44:0e:1e:4b:b3:7f:de:0b:4c:66:02:a0:54:ab:db:c0:
12:31:ec:20:2b:00:a1:26:91:ee:61:f7:05:29:35:6d:c8:6a:
dc:52:c2:36:db:5b:3b:a7:0c:7c:02:24:24:50:d5:85:e6:41:
38:83:65:5f:1b:84:1f:c5:ca:58:5f:28:9c:a9:a4:09:87:58:
9b:75:82:39:9e:9e:70:38:3d:62:fc:db:d1:1a:34:18:83:06:
5b:52:78:3e:33:77:af:c0:6e:35:79:9e:20:99:17:de:a4:59:
90:e6:a3:b9:37:3e:83:17:53:e9:75:c3:df:59:bd:94:2b:55:
27:22:6b:51:62:f6:eb:55:9d:9a:25:ea:d8:45:8f:2e:59:a5:
9c:46:7d:6b:1f:f4:53:e1:b7:4d:5d:c8:f8:5e:f2:f8:4b:82:
52:7f:2d:98:68:ae:d5:a0:db:60:1f:c5:41:43:16:bb:74:fc:
19:35:f4:b5:81:b9:c3:47:c0:5b:a9:74:d2:1c:ab:89:f2:2d:
4a:e8:0f:74:68:07:5b:f2:a7:6b:dc:45:49:ad:6b:4a:52:62:
c4:38:ea:85:f5:ce:27:f4:1f:51:c2:50:b1:db:c8:d8:9b:f1:
86:ca:ea:ea:8b:a5:27:19:41:27:6e:50:c1:63:78:78:c7:56:
96:a9:5f:57
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUa2A826Rp9bsSnQUhi/LiqKR/AugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjMxMjAyMzFaFw0yNzEwMjIxMjA3MzFaMDMxMTAvBgNV
BAMTKEE2REM5NzlCMDE3QTA4RDJBNUYzRDY1NENFNTQ1RkREQzU4MTY0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFoW6jIzQYa+kre/2qe4FtYON
u1w4pKz8FdBIeK4k4kd+5DFV4LmEFjco5uFsyQ0si75/71jttrxWRNcROKnyf+aE
7MlyRc1Q73CTevtcF5hD6bHPCpFGxMd0No9JlTCyW32HGFXeq4P+qRPQLR68E5Zr
k78dkCAi/spL1nFaHMak5KVah2wtul9v05wr7oH71Zs/7/qEEDh1O4gK9PYqWWPo
5PcQWKm2G/Vwvo+DthXCFK12lk4nhjkTXqHVl8sAV8uIK06PUS+RGFEMguc++GwX
5bJP0wXSh2g0W0Ecv1Oy28yH4t087V/tqg6AxHBZqcB5ptPipbfjIKluf+rpAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUptyXmwF6CNKl89ZUzlRf3cWBZB8wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgdgGCCsGAQUFBwEHAQH/BIHIMIHFMDwEAgABMDYDBABS
Fi0DBABSJikDBAFSJ6IDBABSKXUDBABSL50DBABUS/wDBACyU2sDBACyU5QDBACy
U5wwgYQEAgACMH4DBwAqE5UAAGEDBwAqE5UAAK4DBwAqE5UAAM8DBwAqE5UAAN0D
BwAqE5UAAQwDBwAqE5UAASADBwAqE5UAAUkDBwAqE5UAAU0DBwAqE5UAAV4DBwAq
E5UAAXADBwAqE5UAAawDBwAqE5UAAbMDBwAqE5UAAdgDBwAqE5UAAewwDQYJKoZI
hvcNAQELBQADggEBAJ/7RA4eS7N/3gtMZgKgVKvbwBIx7CArAKEmke5h9wUpNW3I
atxSwjbbWzunDHwCJCRQ1YXmQTiDZV8bhB/FylhfKJyppAmHWJt1gjmennA4PWL8
29EaNBiDBltSeD4zd6/AbjV5niCZF96kWZDmo7k3PoMXU+l1w99ZvZQrVScia1Fi
9utVnZol6thFjy5ZpZxGfWsf9FPht01dyPhe8vhLglJ/LZhortWg22AfxUFDFrt0
/Bk19LWBucNHwFupdNIcq4nyLUroD3RoB1vyp2vcRUmta0pSYsQ46oX1zif0H1HC
ULHbyNib8YbK6uqLpScZQSduUMFjeHjHVpapX1c=
-----END CERTIFICATE-----
Generated at Thu Nov 12 17:03:05 2026 by rpki-client