Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20860.roa
File: AS20860.roa (raw, json)
Hash identifier: IOX862Ku7DAtGm+BvlvnExYzSxQLyXjiUhvEG23PCrE=
Subject key identifier: E6:54:E7:33:30:A3:8E:25:13:6C:A4:17:DD:FA:67:4D:EB:19:8E:D5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 502857DFA111074C9942B99BCC0119CE7CEB474C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20860.roa
Signing time: Mon 03 Aug 2026 13:49:18 +0000
ROA not before: Mon 03 Aug 2026 13:44:18 +0000
ROA not after: Mon 02 Aug 2027 13:49:18 +0000
asID: 20860
IP address blocks: 146.103.7.0/24 maxlen: 24
146.103.20.0/24 maxlen: 24
146.103.21.0/24 maxlen: 24
146.103.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:28:57:df:a1:11:07:4c:99:42:b9:9b:cc:01:19:ce:7c:eb:47:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 13:44:18 2026 GMT
Not After : Aug 2 13:49:18 2027 GMT
Subject: CN=E654E73330A38E25136CA417DDFA674DEB198ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:66:f1:8e:59:72:ed:84:6a:ef:d2:da:9f:
7c:db:49:1b:af:95:6b:f1:75:af:29:d5:d0:3d:b3:
11:22:79:49:57:a1:32:98:48:d1:7a:b7:56:7a:23:
5d:12:13:0a:be:cd:8e:96:5f:7f:7c:e0:4c:ce:c2:
fd:46:79:19:03:05:cb:a3:f3:12:25:3c:76:0c:e5:
21:69:1c:4a:b8:c2:79:a5:71:5a:39:75:6b:b7:6c:
41:16:38:7f:16:7c:e1:65:0b:a4:1a:e8:a8:5a:3f:
81:33:d4:40:ca:a5:56:d0:bf:60:4d:1f:14:bc:c5:
e5:49:b1:bc:1a:74:cd:84:33:ac:13:1a:73:07:31:
c5:99:ab:71:5b:b6:5d:ac:75:e5:30:71:4b:cc:60:
c4:06:69:cb:db:a5:b4:78:d9:6d:ed:53:21:12:ad:
e3:b0:8e:e6:6f:79:ac:b4:b4:4e:40:1d:fc:3b:2c:
76:55:99:63:91:f8:98:b6:d5:31:d7:e3:0d:36:2a:
cc:4f:e8:40:66:ef:5e:15:45:8a:72:e2:f9:81:2f:
b1:f6:44:2d:52:cb:57:fc:04:9e:0c:b5:9b:99:a6:
fc:34:ee:3c:70:51:6b:62:82:35:89:85:60:15:53:
d9:0c:a2:32:58:a7:0a:4f:e1:53:bb:50:65:cb:d2:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:E7:33:30:A3:8E:25:13:6C:A4:17:DD:FA:67:4D:EB:19:8E:D5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.7.0/24
146.103.20.0/23
146.103.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0d:60:cb:be:14:f5:3a:33:a6:99:08:38:be:c6:48:75:8e:
9e:1d:2e:6f:54:ec:5a:1f:ec:44:f0:32:96:d2:d6:b5:95:53:
49:b3:0e:a9:90:08:43:82:e8:ca:74:2c:dc:4f:73:47:72:73:
0d:55:d9:bc:25:e4:1d:c8:56:f2:51:ea:c6:1f:5f:56:34:d0:
f3:54:cd:7b:6d:7d:10:18:b8:05:06:76:47:bb:c7:e3:78:cb:
58:f6:42:5d:a0:1f:0b:b1:63:0b:c4:88:34:3d:9f:fb:66:9d:
63:d8:8b:f3:4e:e8:6a:5e:88:f1:0e:7b:1a:3c:17:21:5e:e1:
89:7c:b9:d6:8d:bd:13:9c:98:06:ab:a2:7e:2b:76:9c:d4:01:
29:36:bd:fa:1a:da:69:54:bd:91:55:af:66:25:83:a8:d2:c9:
f0:7d:94:3c:28:30:af:08:a0:bf:90:64:c1:37:83:91:91:8c:
4d:9c:19:54:7e:b6:2e:97:6b:f6:f8:58:e7:74:15:8a:e0:7f:
00:69:78:0a:9f:08:61:23:08:f9:01:3c:28:0d:d0:60:54:9f:
f0:a0:b8:70:07:36:88:79:e8:ec:9c:10:77:e9:ee:b6:aa:87:
e9:50:f8:12:ee:8a:07:1c:78:33:9e:44:bd:6b:13:90:2a:9d:
f7:8a:75:e9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUUChX36ERB0yZQrmbzAEZznzrR0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MDMxMzQ0MThaFw0yNzA4MDIxMzQ5MThaMDMxMTAvBgNV
BAMTKEU2NTRFNzMzMzBBMzhFMjUxMzZDQTQxN0RERkE2NzRERUIxOThFRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8G2bxjlly7YRq79Lan3zbSRuv
lWvxda8p1dA9sxEieUlXoTKYSNF6t1Z6I10SEwq+zY6WX3984EzOwv1GeRkDBcuj
8xIlPHYM5SFpHEq4wnmlcVo5dWu3bEEWOH8WfOFlC6Qa6KhaP4Ez1EDKpVbQv2BN
HxS8xeVJsbwadM2EM6wTGnMHMcWZq3Fbtl2sdeUwcUvMYMQGacvbpbR42W3tUyES
reOwjuZveay0tE5AHfw7LHZVmWOR+Ji21THX4w02KsxP6EBm714VRYpy4vmBL7H2
RC1Sy1f8BJ4MtZuZpvw07jxwUWtigjWJhWAVU9kMojJYpwpP4VO7UGXL0oElAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQU5lTnMzCjjiUTbKQX3fpnTesZjtUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA4NjAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACSZwcD
BAGSZxQDBACSZxcwDQYJKoZIhvcNAQELBQADggEBAH4NYMu+FPU6M6aZCDi+xkh1
jp4dLm9U7Fof7ETwMpbS1rWVU0mzDqmQCEOC6Mp0LNxPc0dycw1V2bwl5B3IVvJR
6sYfX1Y00PNUzXttfRAYuAUGdke7x+N4y1j2Ql2gHwuxYwvEiDQ9n/tmnWPYi/NO
6GpeiPEOexo8FyFe4Yl8udaNvROcmAaron4rdpzUASk2vfoa2mlUvZFVr2Ylg6jS
yfB9lDwoMK8IoL+QZME3g5GRjE2cGVR+ti6Xa/b4WOd0FYrgfwBpeAqfCGEjCPkB
PCgN0GBUn/CguHAHNoh56OycEHfp7raqh+lQ+BLuigcceDOeRL1rE5AqnfeKdek=
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:32 2026 by rpki-client