Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 4OtKkb17GNFofYaW9zJ+T1kJHO/N/yxAoiFPPHKZ5oM=
Subject key identifier: 5F:5A:BC:2F:53:88:6C:C1:7E:73:04:EF:8C:5C:CB:7C:23:BA:0C:76
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 47507BDDD38200AEF5055C2D08341A5B8CD7AF69
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Mon 05 Oct 2026 05:25:14 +0000
ROA not before: Mon 05 Oct 2026 05:20:14 +0000
ROA not after: Mon 04 Oct 2027 05:25:14 +0000
asID: 20473
IP address blocks: 82.22.45.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.38.41.0/24 maxlen: 24
82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
82.47.157.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
2a13:9500:170::/48 maxlen: 48
2a13:9500:1ac::/48 maxlen: 48
2a13:9500:1b3::/48 maxlen: 48
2a13:9500:1d8::/48 maxlen: 48
2a13:9500:1ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:50:7b:dd:d3:82:00:ae:f5:05:5c:2d:08:34:1a:5b:8c:d7:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 5 05:20:14 2026 GMT
Not After : Oct 4 05:25:14 2027 GMT
Subject: CN=5F5ABC2F53886CC17E7304EF8C5CCB7C23BA0C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:69:67:12:de:f1:37:5a:fd:56:86:30:5d:
01:a3:a8:ec:19:98:20:75:ec:b2:df:25:00:26:81:
84:72:b6:ab:23:d0:52:37:93:ea:22:24:a9:53:04:
f1:29:ad:2d:76:9a:14:16:dd:ca:22:c9:47:ff:ae:
d5:bb:b8:68:b0:11:96:90:a7:67:00:6a:fc:f6:bf:
f5:92:b4:73:f8:21:bc:1e:08:ec:86:35:35:78:16:
7b:3b:65:45:33:0e:c9:e0:42:0c:6d:fd:9a:9e:23:
a7:07:b2:fb:40:9b:e3:a0:19:37:05:7e:43:8f:03:
eb:30:b4:c9:ea:f3:da:bc:44:cb:a7:3a:1d:27:34:
b5:87:ea:bb:ae:59:39:7e:c3:8b:2a:92:be:11:55:
aa:1d:4c:4e:24:6e:db:98:5b:16:0f:cd:0a:7c:12:
69:87:3a:36:d4:a1:45:d2:07:34:62:6a:e4:78:18:
51:a0:32:34:cb:62:5d:67:47:b0:71:a3:83:dc:51:
61:67:84:0e:f1:82:0c:94:94:57:6d:8d:66:c4:93:
c7:e6:b9:5f:b8:f5:2e:2e:c4:fb:48:12:43:9d:7c:
9a:c4:19:12:70:61:19:e0:bd:26:6f:7e:0a:35:cd:
65:b0:2d:00:bc:67:62:2e:5d:c5:65:74:55:51:ba:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:BC:2F:53:88:6C:C1:7E:73:04:EF:8C:5C:CB:7C:23:BA:0C:76
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.45.0/24
82.29.44.0/24
82.38.41.0/24
82.39.162.0/23
82.41.117.0/24
82.47.157.0/24
178.83.107.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
2a13:9500:170::/48
2a13:9500:1ac::/48
2a13:9500:1b3::/48
2a13:9500:1d8::/48
2a13:9500:1ec::/48
Signature Algorithm: sha256WithRSAEncryption
35:c3:b8:34:ef:47:61:16:cf:fa:07:19:de:a8:66:0c:83:dc:
30:1a:0a:8c:3f:cb:43:cc:01:56:10:6f:cc:81:b8:22:a8:f5:
8d:65:f0:a3:c9:e8:7d:7a:f3:07:4b:da:e9:4f:ce:50:c8:0d:
ef:36:57:cb:83:3e:21:45:d8:06:44:4c:6b:5b:1d:48:84:32:
e1:5c:9f:26:df:31:9d:3d:a2:1e:ae:bb:f2:21:63:ce:ef:f4:
87:06:ef:2d:86:47:44:28:d6:51:fc:da:e0:f1:ae:37:6f:ac:
00:14:6f:fb:73:7d:81:84:af:89:b8:4f:9c:01:c6:b1:38:2c:
98:1d:e7:69:fe:d7:7a:ec:5a:ea:f9:32:14:bb:19:e1:1a:d5:
0d:51:65:89:df:c5:43:49:cb:9e:6e:7b:b4:a3:16:2b:78:bb:
17:80:2b:bd:5b:d7:f0:b9:9c:0d:09:ae:aa:10:3c:f3:64:92:
6b:a6:f3:69:e1:9f:cb:3c:b0:88:52:5c:2a:a9:54:82:7a:33:
31:50:5c:f1:bf:93:b5:81:bb:b6:b6:4c:c3:39:1a:47:1e:d4:
99:85:65:ff:85:6a:de:ed:e9:19:c2:75:1a:55:d0:a5:26:29:
2a:fb:37:44:af:92:40:9c:8b:7e:00:72:c1:d6:b0:57:2f:cc:
99:f9:37:99
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUR1B73dOCAK71BVwtCDQaW4zXr2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMDUwNTIwMTRaFw0yNzEwMDQwNTI1MTRaMDMxMTAvBgNV
BAMTKDVGNUFCQzJGNTM4ODZDQzE3RTczMDRFRjhDNUNDQjdDMjNCQTBDNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRlWlnEt7xN1r9VoYwXQGjqOwZ
mCB17LLfJQAmgYRytqsj0FI3k+oiJKlTBPEprS12mhQW3coiyUf/rtW7uGiwEZaQ
p2cAavz2v/WStHP4IbweCOyGNTV4Fns7ZUUzDsngQgxt/ZqeI6cHsvtAm+OgGTcF
fkOPA+swtMnq89q8RMunOh0nNLWH6ruuWTl+w4sqkr4RVaodTE4kbtuYWxYPzQp8
EmmHOjbUoUXSBzRiauR4GFGgMjTLYl1nR7Bxo4PcUWFnhA7xggyUlFdtjWbEk8fm
uV+49S4uxPtIEkOdfJrEGRJwYRngvSZvfgo1zWWwLQC8Z2IuXcVldFVRupNFAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUX1q8L1OIbMF+cwTvjFzLfCO6DHYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgdgGCCsGAQUFBwEHAQH/BIHIMIHFMDwEAgABMDYDBABS
Fi0DBABSHSwDBABSJikDBAFSJ6IDBABSKXUDBABSL50DBACyU2sDBACyU5QDBACy
U5wwgYQEAgACMH4DBwAqE5UAAGEDBwAqE5UAAK4DBwAqE5UAAM8DBwAqE5UAAN0D
BwAqE5UAAQwDBwAqE5UAASADBwAqE5UAAUkDBwAqE5UAAU0DBwAqE5UAAV4DBwAq
E5UAAXADBwAqE5UAAawDBwAqE5UAAbMDBwAqE5UAAdgDBwAqE5UAAewwDQYJKoZI
hvcNAQELBQADggEBADXDuDTvR2EWz/oHGd6oZgyD3DAaCow/y0PMAVYQb8yBuCKo
9Y1l8KPJ6H168wdL2ulPzlDIDe82V8uDPiFF2AZETGtbHUiEMuFcnybfMZ09oh6u
u/IhY87v9IcG7y2GR0Qo1lH82uDxrjdvrAAUb/tzfYGEr4m4T5wBxrE4LJgd52n+
13rsWur5MhS7GeEa1Q1RZYnfxUNJy55ue7SjFit4uxeAK71b1/C5nA0JrqoQPPNk
kmum82nhn8s8sIhSXCqpVIJ6MzFQXPG/k7WBu7a2TMM5Gkce1JmFZf+Fat7t6RnC
dRpV0KUmKSr7N0SvkkCci34AcsHWsFcvzJn5N5k=
-----END CERTIFICATE-----
Generated at Sun Oct 18 17:42:02 2026 by rpki-client