Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: LmJoNabyaBD2VhXU6cPZy5p2WUOzxnvcoq6xVnJm814=
Subject key identifier: B1:C8:14:D8:FF:58:B7:8B:2F:71:5D:65:5F:8D:39:5D:48:22:33:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 70996931655E91830C0B4CB4680455DB81AAB03C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
Signing time: Mon 05 Oct 2026 00:00:43 +0000
ROA not before: Sun 04 Oct 2026 23:55:43 +0000
ROA not after: Mon 04 Oct 2027 00:00:43 +0000
asID: 20473
IP address blocks: 66.132.250.0/24 maxlen: 24
76.74.213.0/24 maxlen: 24
147.79.4.0/24 maxlen: 24
148.135.161.0/24 maxlen: 24
150.241.216.0/21 maxlen: 24
162.141.12.0/24 maxlen: 24
168.222.89.0/24 maxlen: 24
168.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:99:69:31:65:5e:91:83:0c:0b:4c:b4:68:04:55:db:81:aa:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 4 23:55:43 2026 GMT
Not After : Oct 4 00:00:43 2027 GMT
Subject: CN=B1C814D8FF58B78B2F715D655F8D395D4822336A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:0e:d8:71:03:a4:f8:1d:8e:38:c0:a8:76:
ad:e0:a3:79:17:d5:15:15:92:7a:be:bb:a4:93:e5:
a9:b5:70:a1:7d:85:12:0a:29:d7:fe:bc:c7:89:72:
7f:ee:10:98:4e:8b:3b:cc:90:fd:8e:7d:25:7a:fd:
66:c2:98:94:1a:2a:be:37:8f:f4:63:d0:59:4c:2e:
7c:a8:56:b9:96:3b:f4:b6:94:02:5e:38:12:45:97:
c9:76:66:61:d3:3b:b6:ee:3f:61:46:66:1a:60:59:
67:0f:e0:2c:19:b3:6d:40:f4:e0:50:25:5e:e5:84:
76:6e:a4:3b:4c:52:44:0c:ea:9b:48:97:0f:d2:90:
0c:7c:ed:c1:78:c1:85:9a:97:65:49:55:02:65:bc:
53:4d:81:c6:de:65:d9:57:a8:ce:ad:de:e2:5c:06:
33:d8:0c:b7:91:b6:8f:bc:24:51:b8:38:c2:df:d5:
f8:da:6b:d0:f5:81:b1:60:ac:48:f5:4f:3d:50:71:
24:a1:16:18:44:f2:d1:25:b6:55:c1:dc:d4:75:b5:
55:44:aa:dd:9b:8b:1e:65:d1:25:9d:a4:1b:0d:2f:
d5:7f:dd:0c:ea:54:2d:9d:16:77:87:38:d1:72:6d:
18:ca:b0:f4:48:bb:3b:08:66:dc:d8:0b:4c:81:a5:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:14:D8:FF:58:B7:8B:2F:71:5D:65:5F:8D:39:5D:48:22:33:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.250.0/24
76.74.213.0/24
147.79.4.0/24
148.135.161.0/24
150.241.216.0/21
162.141.12.0/24
168.222.89.0/24
168.222.95.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8f:c0:58:b7:16:06:fd:ad:4f:05:ef:e9:16:02:2a:f7:e2:
90:1f:64:ec:42:2a:e3:98:32:b5:70:fd:f0:ca:cf:c5:c8:4b:
12:ed:93:8b:80:b2:80:57:84:9d:fe:dc:27:ed:01:34:ec:f8:
3c:07:8d:e1:98:c9:5a:3d:6d:e1:c0:0d:32:dc:f8:1f:cf:64:
14:2b:3e:8d:9c:91:cb:2f:84:19:d2:3e:58:30:a3:6c:82:b5:
c3:2c:45:f2:63:81:9d:ec:13:be:9b:d8:f9:60:5a:9d:1c:03:
6b:9e:5b:84:53:7c:5f:2a:ff:fd:50:4e:cd:72:5f:50:aa:65:
1b:2e:0e:da:09:49:31:a9:c9:97:53:42:dd:b2:57:a9:8d:25:
be:88:17:17:fe:ba:6d:4f:6e:1c:4e:10:68:ad:25:3f:0d:99:
b8:a4:f9:38:b8:3a:0d:92:db:61:b8:05:b8:2e:20:78:42:ab:
a4:ee:5c:35:d3:7c:1d:1a:26:a4:4e:3a:ce:41:cc:3e:a1:2f:
a5:92:7d:07:c0:86:80:d6:8f:71:cf:04:e6:16:72:e8:fc:71:
21:c6:f6:98:ae:74:55:ae:4a:a9:96:ee:f0:a2:a3:6a:03:e8:
29:44:42:e6:ef:9c:6d:03:56:22:8e:f5:5b:37:de:9e:54:29:
4b:95:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:59:20 2026 by rpki-client