Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: Ool7Ww+Iw+yAVJxfMsnoWTEaYJk6R254xLtsYolWlXg=
Subject key identifier: FA:99:A6:0A:66:EB:B7:A1:D8:3A:45:2D:A2:3E:4A:67:D0:05:4B:44
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 15D60A211DF7B03B927412274819320BC2287281
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
Signing time: Wed 17 Jun 2026 17:31:18 +0000
ROA not before: Wed 17 Jun 2026 17:26:18 +0000
ROA not after: Wed 16 Jun 2027 17:31:18 +0000
asID: 20473
IP address blocks: 2a14:7580:100::/40 maxlen: 48
2a14:7581:f30::/44 maxlen: 48
2a14:7581:fa0::/44 maxlen: 48
2a14:7581:3600::/40 maxlen: 48
2a14:7581:3e00::/40 maxlen: 48
2a14:7581:3f00::/40 maxlen: 48
2a14:7581:9f90::/48 maxlen: 48
2a14:7581:9f91::/48 maxlen: 48
2a14:7581:9f92::/48 maxlen: 48
2a14:7583:5d10::/48 maxlen: 48
2a14:7583:e500::/40 maxlen: 48
2a14:7583:f000::/40 maxlen: 48
2a14:7583:f100::/40 maxlen: 48
2a14:7584:8000::/36 maxlen: 48
2a14:7584:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d6:0a:21:1d:f7:b0:3b:92:74:12:27:48:19:32:0b:c2:28:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 17 17:26:18 2026 GMT
Not After : Jun 16 17:31:18 2027 GMT
Subject: CN=FA99A60A66EBB7A1D83A452DA23E4A67D0054B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:f6:3d:30:f3:df:f7:c2:20:46:0e:0a:fc:
39:e5:6c:38:0f:88:61:3f:40:aa:01:1e:54:2d:f0:
77:b1:81:e3:63:6b:1c:93:80:9c:6e:4a:dd:c5:e1:
20:7d:84:6d:df:b8:b0:65:ec:7f:8c:39:81:e2:77:
c0:89:31:81:f7:09:e5:a3:ec:24:18:64:4a:5c:fe:
f6:88:f6:d8:5b:26:a3:39:c5:86:3f:68:49:54:a3:
b5:b8:4a:6e:7d:ca:b4:2f:8c:e4:a8:59:7b:19:f5:
bf:36:25:e5:28:9c:e6:04:8d:78:bc:8f:c4:93:1c:
b7:ca:db:e1:81:ff:f7:e3:99:19:0f:40:39:b2:43:
d4:51:70:1d:c6:be:0f:7e:91:04:58:0a:bb:02:25:
93:2f:c6:59:3f:fa:a8:c3:94:35:35:e5:04:05:46:
98:8d:4d:40:a2:ee:e9:f3:49:80:1e:6f:01:9c:33:
32:ea:c5:78:f7:d1:2f:c2:47:66:12:0d:af:26:c1:
bc:55:8d:23:b6:a8:eb:e6:73:1f:27:b5:28:2a:45:
dc:f2:0c:a4:71:e8:35:a7:ab:ca:fb:50:60:59:3f:
24:96:c5:43:54:6d:5e:9f:68:2b:de:87:84:74:cd:
9f:0b:0c:25:cc:b8:87:6c:61:c6:44:4d:17:d4:c2:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:A6:0A:66:EB:B7:A1:D8:3A:45:2D:A2:3E:4A:67:D0:05:4B:44
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:100::/40
2a14:7581:f30::/44
2a14:7581:fa0::/44
2a14:7581:3600::/40
2a14:7581:3e00::/39
2a14:7581:9f90::-2a14:7581:9f92:ffff:ffff:ffff:ffff:ffff
2a14:7583:5d10::/48
2a14:7583:e500::/40
2a14:7583:f000::/39
2a14:7584:8000::/35
Signature Algorithm: sha256WithRSAEncryption
02:3e:a5:36:0a:17:d5:2c:6a:f7:d3:63:90:16:a3:9c:67:36:
a5:7f:57:c6:1f:26:1b:ab:4b:cc:b4:12:46:49:24:6c:91:17:
aa:8d:be:5e:19:2d:11:1a:93:0b:ea:1c:62:27:ef:c8:e1:3f:
b0:b3:a8:96:19:02:2b:95:30:35:74:f3:87:81:80:10:fe:46:
a7:20:8b:ee:bd:61:e1:6a:03:fa:82:53:b6:f1:8a:47:82:ab:
90:07:18:13:7f:74:9a:47:b3:13:4c:c6:6e:2c:b1:25:62:f7:
a8:86:b2:e7:c4:c3:b9:35:e3:b0:8d:a5:db:d7:45:df:90:4c:
1a:78:c0:1d:69:9e:12:f9:f0:51:be:b9:08:d3:59:b3:69:d2:
40:d8:d5:23:41:70:1b:5e:87:7b:72:38:c1:98:44:8e:62:88:
13:bd:d1:b4:04:0f:69:e9:50:9a:03:c8:b6:54:ec:87:0b:7d:
a7:de:ee:7e:5b:b9:39:02:91:75:8a:99:7c:3f:2f:1b:17:90:
28:3e:b0:85:9f:47:ac:b0:58:20:aa:c4:81:10:f5:c0:1b:9c:
4d:50:30:e2:98:6b:7b:16:47:9c:a9:62:50:4d:6c:d0:a1:a6:
bd:45:3a:18:e7:40:d6:8a:dc:d0:c4:37:10:63:c9:9c:64:db:
08:5b:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:46 2026 by rpki-client