Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: cNHhO3p0uwaw1uZEUGiIIfCcgf2P2UFlbTx1JXkiKLE=
Subject key identifier: 9D:B5:B1:BA:3C:53:7F:50:05:AE:3B:E0:64:53:4B:B6:B9:3F:75:8A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0B256285DA13CB0B9712C5182A8AF4DE68B5D90B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20473.roa
Signing time: Sat 04 Jul 2026 05:28:19 +0000
ROA not before: Sat 04 Jul 2026 05:23:19 +0000
ROA not after: Sat 03 Jul 2027 05:28:19 +0000
asID: 20473
IP address blocks: 51.194.65.0/24 maxlen: 24
51.194.135.0/24 maxlen: 24
51.194.141.0/24 maxlen: 24
51.241.167.0/24 maxlen: 24
188.220.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:25:62:85:da:13:cb:0b:97:12:c5:18:2a:8a:f4:de:68:b5:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 4 05:23:19 2026 GMT
Not After : Jul 3 05:28:19 2027 GMT
Subject: CN=9DB5B1BA3C537F5005AE3BE064534BB6B93F758A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:17:cd:d5:1f:95:ce:b5:40:db:ef:71:6d:
c7:12:1e:77:a0:80:b6:ea:a9:f0:4d:72:30:a3:ef:
3d:3b:1c:61:20:a0:88:26:31:3c:36:01:c5:fc:3e:
20:f4:49:d5:6b:0c:b2:0e:43:9f:ce:2b:a8:77:2e:
8a:67:21:6c:17:f8:aa:3c:11:fa:54:37:cf:a5:8a:
99:27:83:75:10:6c:f0:29:24:10:2c:80:8c:9a:a8:
35:d1:1e:80:b6:59:d5:82:88:5f:2d:58:ae:fc:3d:
1c:22:44:b8:4a:12:a2:da:ab:23:e0:e1:ed:9d:77:
7c:f7:b4:af:34:e1:ea:49:0c:e5:fd:a6:8d:d8:8a:
e5:b8:e6:86:ee:12:df:5f:65:94:95:4c:ea:f9:c5:
64:38:45:28:3e:08:34:11:89:b1:73:65:c4:a7:43:
64:70:7e:1f:22:02:d5:eb:9e:6c:e1:dd:cd:b1:4f:
d1:9b:89:b0:99:9f:36:54:de:c5:05:ab:a6:ba:1d:
64:8c:48:84:94:bc:d4:80:89:d3:73:4b:36:4d:e4:
dc:bd:6a:58:7d:b7:37:29:e7:69:1c:f2:8f:77:20:
ff:49:ae:78:e1:30:32:60:f1:3e:73:a0:01:e3:fe:
fa:5a:a1:78:3b:9d:e6:68:b2:2b:ec:6c:dc:c4:59:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:B1:BA:3C:53:7F:50:05:AE:3B:E0:64:53:4B:B6:B9:3F:75:8A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.65.0/24
51.194.135.0/24
51.194.141.0/24
51.241.167.0/24
188.220.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:eb:a9:bf:58:c4:9f:05:48:dc:38:11:ab:a3:36:fa:4b:cd:
93:d1:b8:15:8f:4f:ad:ae:ef:74:e4:05:23:ff:cd:c3:90:43:
c3:eb:4a:ca:a6:13:4e:54:30:23:47:e8:f4:bd:e2:ab:f8:a7:
50:23:dc:1c:67:e1:13:3c:b8:42:5f:fa:dc:8e:e1:3d:f3:c3:
a6:60:dc:9f:fd:21:95:5c:a0:f2:17:f6:c1:73:db:d5:60:77:
3e:e9:79:21:f5:9d:ac:d1:d2:c5:b0:86:70:f6:ea:64:13:c2:
94:d6:20:14:0f:63:db:7f:72:6e:90:d8:22:b8:a3:b9:31:92:
a1:c2:1c:94:b9:53:7e:46:0f:d8:ae:29:3d:97:b2:3c:40:77:
49:dd:53:7b:fd:91:98:43:09:1e:70:91:58:fb:7d:d6:af:4d:
aa:e0:8f:b2:59:83:71:79:b8:eb:0d:c8:76:ca:c0:81:bb:79:
a0:06:1f:c7:22:1e:dd:55:e7:6e:bb:0b:fb:d2:f4:54:65:0d:
15:5d:69:e5:38:02:c1:3e:e8:82:39:13:4d:81:19:b6:86:92:
46:ea:cd:25:2a:1a:a2:07:ae:92:bc:db:32:38:09:f2:c9:76:
09:6f:4f:fb:3c:26:8d:6c:93:35:98:ac:b5:4a:33:43:4f:bc:
96:c7:af:a1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUCyVihdoTywuXEsUYKor03mi12QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MDQwNTIzMTlaFw0yNzA3MDMwNTI4MTlaMDMxMTAvBgNV
BAMTKDlEQjVCMUJBM0M1MzdGNTAwNUFFM0JFMDY0NTM0QkI2QjkzRjc1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdhfN1R+VzrVA2+9xbccSHneg
gLbqqfBNcjCj7z07HGEgoIgmMTw2AcX8PiD0SdVrDLIOQ5/OK6h3LopnIWwX+Ko8
EfpUN8+lipkng3UQbPApJBAsgIyaqDXRHoC2WdWCiF8tWK78PRwiRLhKEqLaqyPg
4e2dd3z3tK804epJDOX9po3YiuW45obuEt9fZZSVTOr5xWQ4RSg+CDQRibFzZcSn
Q2Rwfh8iAtXrnmzh3c2xT9GbibCZnzZU3sUFq6a6HWSMSISUvNSAidNzSzZN5Ny9
alh9tzcp52kc8o93IP9JrnjhMDJg8T5zoAHj/vpaoXg7neZosivsbNzEWa1BAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUnbWxujxTf1AFrjvgZFNLtrk/dYowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAzwkED
BAAzwocDBAAzwo0DBAAz8acDBAC83EUwDQYJKoZIhvcNAQELBQADggEBAKbrqb9Y
xJ8FSNw4EaujNvpLzZPRuBWPT62u73TkBSP/zcOQQ8PrSsqmE05UMCNH6PS94qv4
p1Aj3Bxn4RM8uEJf+tyO4T3zw6Zg3J/9IZVcoPIX9sFz29Vgdz7peSH1nazR0sWw
hnD26mQTwpTWIBQPY9t/cm6Q2CK4o7kxkqHCHJS5U35GD9iuKT2XsjxAd0ndU3v9
kZhDCR5wkVj7fdavTargj7JZg3F5uOsNyHbKwIG7eaAGH8ciHt1V5267C/vS9FRl
DRVdaeU4AsE+6II5E02BGbaGkkbqzSUqGqIHrpK82zI4CfLJdglvT/s8Jo1skzWY
rLVKM0NPvJbHr6E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:44 2026 by rpki-client