Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: W3Oq4rBZsZfmwWiaWeX7pMvCaYP0Lq7grzQf6bNrT5s=
Subject key identifier: 78:BB:BF:8B:23:9E:E3:74:AF:9C:52:21:CF:0A:4B:67:29:F3:67:CD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6550D4F4638C00FBAAAFB0AC61230F340828C4A0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa
Signing time: Thu 25 Jun 2026 05:45:30 +0000
ROA not before: Thu 25 Jun 2026 05:40:30 +0000
ROA not after: Thu 24 Jun 2027 05:45:30 +0000
asID: 20473
IP address blocks: 141.11.70.0/24 maxlen: 24
141.11.116.0/24 maxlen: 24
141.11.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 05:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:50:d4:f4:63:8c:00:fb:aa:af:b0:ac:61:23:0f:34:08:28:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 25 05:40:30 2026 GMT
Not After : Jun 24 05:45:30 2027 GMT
Subject: CN=78BBBF8B239EE374AF9C5221CF0A4B6729F367CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:ef:77:b3:34:46:4c:69:08:ec:f0:73:9e:
11:ac:ca:e1:59:4d:4c:29:5d:f5:2b:9a:ca:a5:ed:
22:2c:90:5b:c5:57:4d:ce:13:1a:91:2b:5a:96:f7:
ba:4e:8f:c9:3b:c2:cc:5e:ac:83:45:9c:17:28:4b:
b3:fc:74:cb:51:5f:f2:51:b8:a7:c9:4a:1c:1b:0e:
87:97:02:e3:f1:7b:db:25:0c:30:35:74:7c:4f:c5:
83:ea:cb:f2:9c:fa:01:50:cb:13:74:8c:4b:a1:f4:
8b:09:93:a3:f6:c9:8e:fd:72:a2:45:60:e6:56:33:
09:da:b2:30:eb:aa:fa:80:f6:d1:a8:f7:70:f7:39:
b6:72:0e:21:6a:6a:87:90:03:d7:6e:c0:25:9a:57:
2e:c6:c4:d5:50:85:66:41:23:b2:31:3c:6e:51:33:
13:bb:ca:d5:61:78:30:f0:c1:35:1a:05:07:8a:a6:
f7:e9:59:c7:e9:3e:a8:fb:67:ec:40:09:7e:c2:c0:
b0:9c:34:70:4b:d6:1d:82:c9:d7:e1:9a:2f:f3:fd:
37:b8:00:e1:05:71:3a:a6:e6:68:c8:b1:48:bf:df:
fe:8a:6c:f6:b7:f9:0f:14:c5:69:5a:62:d7:57:a4:
ae:15:c2:eb:e6:4a:2f:73:37:94:95:72:1c:ee:d4:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BB:BF:8B:23:9E:E3:74:AF:9C:52:21:CF:0A:4B:67:29:F3:67:CD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.70.0/24
141.11.116.0/24
141.11.210.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f2:c0:36:64:f2:43:d0:3e:a1:7f:7c:6e:b7:02:8a:45:a5:
84:96:d8:86:37:71:44:bd:4a:cb:e8:10:1b:9c:2f:f7:73:98:
c7:05:a4:ed:70:8d:ed:e2:88:56:02:0a:a3:f9:31:30:bc:cb:
df:d0:9b:66:59:92:82:0b:ba:7a:b9:6f:ca:d5:cb:5a:81:a5:
f1:4a:bf:fe:7d:e9:78:e1:45:47:a9:cf:98:08:66:b0:5b:1f:
1d:00:b8:8a:5a:52:a6:30:99:71:df:27:8f:b8:12:d4:80:02:
9e:cf:f1:12:76:e5:16:b1:f5:fe:18:48:bc:02:d5:4a:59:f6:
ad:d8:cb:c4:e6:07:eb:80:17:67:9d:2b:bc:6d:48:73:91:41:
ca:74:a5:76:b5:52:f4:13:18:85:c3:87:c7:6e:a7:5d:ff:97:
44:8c:94:4c:ab:1c:1c:43:17:55:c5:d6:e6:db:3e:15:91:1f:
dc:93:f6:f5:f0:bf:dd:29:3f:a4:24:5d:60:41:e4:91:d3:cb:
00:61:15:02:35:98:82:e2:97:4c:2f:cd:7b:1b:1f:3f:84:b9:
40:67:d4:6b:e4:40:98:b2:4d:4e:e8:b5:6c:0c:6f:bd:44:d2:
c5:49:6b:dc:f2:bd:8c:67:1d:88:77:a8:3b:f3:b9:68:f0:bd:
d6:e1:9c:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:20 2026 by rpki-client