Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20055.roa
File: AS20055.roa (raw, json)
Hash identifier: UVqRbv56kQ/x4LSeMir5iba8uj/10z5peE/xqNtnaZM=
Subject key identifier: 7C:37:2F:3D:AB:5F:4B:CF:AF:49:6F:F8:0D:13:1F:EF:59:D6:6F:75
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4850DFEAE56FF1BCE165C81E38A4EAA46893EAA0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20055.roa
Signing time: Thu 12 Nov 2026 13:45:34 +0000
ROA not before: Thu 12 Nov 2026 13:40:34 +0000
ROA not after: Thu 11 Nov 2027 13:45:34 +0000
asID: 20055
IP address blocks: 94.192.116.0/22 maxlen: 24
94.192.144.0/22 maxlen: 24
94.192.152.0/22 maxlen: 24
94.193.32.0/22 maxlen: 24
94.193.64.0/22 maxlen: 24
94.193.92.0/22 maxlen: 24
94.193.176.0/22 maxlen: 24
94.193.220.0/22 maxlen: 24
94.194.152.0/22 maxlen: 24
94.194.236.0/22 maxlen: 24
176.25.140.0/22 maxlen: 24
176.25.160.0/22 maxlen: 24
176.25.192.0/22 maxlen: 24
176.25.204.0/22 maxlen: 24
176.25.216.0/22 maxlen: 24
176.25.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:50:df:ea:e5:6f:f1:bc:e1:65:c8:1e:38:a4:ea:a4:68:93:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 12 13:40:34 2026 GMT
Not After : Nov 11 13:45:34 2027 GMT
Subject: CN=7C372F3DAB5F4BCFAF496FF80D131FEF59D66F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:0b:ad:74:dd:c8:57:65:ab:97:14:26:44:
5a:0f:1c:79:2b:d2:1f:42:3a:a3:67:ea:d5:06:1b:
a0:06:45:2f:46:c8:6a:62:28:fa:9a:b3:37:6b:48:
c4:fa:a2:35:ef:84:9e:93:8d:d2:81:80:0c:7c:26:
3d:21:e5:bc:61:0b:97:9f:e2:55:b2:a7:9a:cc:b6:
8a:01:4a:de:08:9b:f6:13:77:96:06:e4:3d:ab:42:
d5:6d:f4:4e:60:01:6f:03:d1:62:d4:3c:c4:72:3f:
b5:d5:47:24:8e:3b:01:7b:99:fe:4b:bd:d8:3b:e0:
aa:32:92:45:82:9a:43:ec:17:6b:dd:75:06:c2:1f:
3d:bf:b8:6c:b0:df:be:d1:66:cd:c1:28:68:39:db:
c2:cc:1e:68:c3:18:7f:45:64:ea:06:55:f1:05:e8:
b7:a5:1b:4d:da:32:1a:0f:7e:c9:e4:e0:f5:fe:57:
1d:f0:40:8b:87:05:c4:17:9f:01:96:be:40:64:e3:
99:84:c4:10:77:d1:e9:9e:74:6b:e0:1a:58:29:13:
0a:98:a1:10:3e:68:bc:f2:ed:f4:ea:9e:23:3c:1b:
00:1b:06:08:53:2d:03:ef:bc:3c:fa:bb:81:b4:99:
f3:f7:7c:00:ef:2f:e9:7d:74:f1:dd:c4:b8:9c:ee:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:37:2F:3D:AB:5F:4B:CF:AF:49:6F:F8:0D:13:1F:EF:59:D6:6F:75
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20055.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.192.116.0/22
94.192.144.0/22
94.192.152.0/22
94.193.32.0/22
94.193.64.0/22
94.193.92.0/22
94.193.176.0/22
94.193.220.0/22
94.194.152.0/22
94.194.236.0/22
176.25.140.0/22
176.25.160.0/22
176.25.192.0/22
176.25.204.0/22
176.25.216.0/22
176.25.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:6a:a4:2a:ad:dc:0c:0b:d9:00:09:0a:39:be:ae:40:89:19:
c2:28:ef:7b:41:83:bb:04:42:21:00:79:95:dc:4d:8d:d3:e2:
27:37:9f:c9:bf:96:e0:49:b5:0c:b3:7b:e4:08:fd:75:81:91:
83:28:02:1f:5e:79:32:3d:67:91:09:65:46:89:59:c0:52:be:
35:c8:3c:73:44:79:6a:e8:6a:85:01:f8:33:27:de:99:42:cd:
5f:f5:67:7b:46:a5:a4:2e:2a:a4:8c:50:61:ea:9c:c8:4b:2a:
6c:68:d4:e4:ae:30:1a:5c:71:68:65:bd:51:71:11:92:d2:2c:
8a:d2:83:b0:f8:fe:df:b2:b7:bd:46:79:cd:31:38:21:5c:f3:
7a:44:2d:7f:de:cc:bc:74:42:73:a0:54:e1:33:c2:7a:a1:fc:
38:3d:5e:4e:1c:a4:5a:da:3b:62:8a:ff:3c:f8:56:b0:2d:fc:
01:4b:82:9b:e2:98:98:ec:86:23:8b:ab:f7:6e:e1:64:a9:33:
77:77:2d:c5:b3:f5:7f:3e:a5:3f:14:2e:e1:f3:f4:f7:a9:23:
ce:aa:fc:08:5c:d6:3a:1f:b1:ca:58:37:00:13:54:af:b5:75:
18:75:14:c5:1d:6c:ec:87:e0:6e:32:00:c7:85:c2:cb:46:0e:
01:61:6b:97
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIUSFDf6uVv8bzhZcgeOKTqpGiT6qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMTIxMzQwMzRaFw0yNzExMTExMzQ1MzRaMDMxMTAvBgNV
BAMTKDdDMzcyRjNEQUI1RjRCQ0ZBRjQ5NkZGODBEMTMxRkVGNTlENjZGNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziAutdN3IV2WrlxQmRFoPHHkr
0h9COqNn6tUGG6AGRS9GyGpiKPqaszdrSMT6ojXvhJ6TjdKBgAx8Jj0h5bxhC5ef
4lWyp5rMtooBSt4Im/YTd5YG5D2rQtVt9E5gAW8D0WLUPMRyP7XVRySOOwF7mf5L
vdg74KoykkWCmkPsF2vddQbCHz2/uGyw377RZs3BKGg528LMHmjDGH9FZOoGVfEF
6LelG03aMhoPfsnk4PX+Vx3wQIuHBcQXnwGWvkBk45mExBB30emedGvgGlgpEwqY
oRA+aLzy7fTqniM8GwAbBghTLQPvvDz6u4G0mfP3fADvL+l9dPHdxLic7oHBAgMB
AAGjggJjMIICXzAdBgNVHQ4EFgQUfDcvPatfS8+vSW/4DRMf71nWb3UwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjAwNTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIweQYIKwYBBQUHAQcBAf8EajBoMGYEAgABMGADBAJewHQD
BAJewJADBAJewJgDBAJewSADBAJewUADBAJewVwDBAJewbADBAJewdwDBAJewpgD
BAJewuwDBAKwGYwDBAKwGaADBAKwGcADBAKwGcwDBAKwGdgDBAKwGfQwDQYJKoZI
hvcNAQELBQADggEBABpqpCqt3AwL2QAJCjm+rkCJGcIo73tBg7sEQiEAeZXcTY3T
4ic3n8m/luBJtQyze+QI/XWBkYMoAh9eeTI9Z5EJZUaJWcBSvjXIPHNEeWroaoUB
+DMn3plCzV/1Z3tGpaQuKqSMUGHqnMhLKmxo1OSuMBpccWhlvVFxEZLSLIrSg7D4
/t+yt71Gec0xOCFc83pELX/ezLx0QnOgVOEzwnqh/Dg9Xk4cpFraO2KK/zz4VrAt
/AFLgpvimJjshiOLq/du4WSpM3d3LcWz9X8+pT8ULuHz9PepI86q/Ahc1jofscpY
NwATVK+1dRh1FMUdbOyH4G4yAMeFwstGDgFha5c=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:50:49 2026 by rpki-client