Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20860.roa
File: AS20860.roa (raw, json)
Hash identifier: ImAY0/IgIN9XMDwE49Aa5bgvzhJk5P43w7LKnZfD6kk=
Subject key identifier: 8E:DF:19:97:60:2A:EB:63:A5:AB:C7:0E:C2:8E:64:BA:FC:76:C6:8A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4EA922D4AA463A84228F5CB707B31ED30BB95F40
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20860.roa
Signing time: Thu 01 Oct 2026 07:00:52 +0000
ROA not before: Thu 01 Oct 2026 06:55:52 +0000
ROA not after: Thu 30 Sep 2027 07:00:52 +0000
asID: 20860
IP address blocks: 179.61.169.0/24 maxlen: 24
181.214.140.0/24 maxlen: 24
191.96.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a9:22:d4:aa:46:3a:84:22:8f:5c:b7:07:b3:1e:d3:0b:b9:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 1 06:55:52 2026 GMT
Not After : Sep 30 07:00:52 2027 GMT
Subject: CN=8EDF1997602AEB63A5ABC70EC28E64BAFC76C68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:68:1a:b8:fa:c4:7b:99:06:d5:ac:4e:4e:
7b:e2:5b:8b:70:bf:21:7f:5a:a6:de:2c:cb:d4:30:
c5:68:70:a2:3c:1b:f0:3a:be:f8:e4:2a:4a:e2:43:
ad:1f:69:c3:21:05:2f:6e:3e:17:17:94:f9:51:9c:
3a:bf:3e:92:5a:91:a4:9d:df:82:b8:20:4e:f2:11:
44:6c:4a:c8:27:92:24:04:5a:44:ca:85:5b:46:7e:
ad:bd:09:9c:9e:9d:cf:b7:49:41:ad:07:e7:88:8b:
07:df:92:3c:91:6b:fa:d8:34:67:f1:18:83:9c:e6:
49:04:42:b0:aa:38:6a:69:73:2c:4b:31:06:3a:12:
b2:4f:72:32:7b:cc:af:a8:9f:73:d1:c0:f7:c1:dc:
4c:f7:1d:55:34:26:36:fe:1a:20:83:58:ee:8d:fd:
08:e6:87:c9:c9:67:44:dc:31:17:08:cd:4f:5a:57:
5d:85:ae:98:19:f3:7b:7c:24:18:1e:ec:29:75:68:
89:e9:8a:c5:9c:ae:fb:5a:51:db:aa:42:2a:df:45:
f2:f7:09:e8:81:22:8c:51:c8:80:c9:65:83:e6:1a:
09:53:f6:fe:80:51:97:de:d9:74:b2:8b:74:db:24:
6c:ca:7b:0c:41:3a:8d:0a:04:b8:8b:fe:f0:d3:57:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:19:97:60:2A:EB:63:A5:AB:C7:0E:C2:8E:64:BA:FC:76:C6:8A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.169.0/24
181.214.140.0/24
191.96.208.0/24
Signature Algorithm: sha256WithRSAEncryption
22:34:98:a1:2f:5e:fa:d1:a8:95:f2:65:69:cd:8a:bc:d9:a7:
cc:d5:4c:ce:49:a6:08:7c:a3:57:a8:57:dd:99:e4:5d:88:f4:
3d:ae:ff:9a:ed:5a:72:55:bb:3b:14:29:9e:27:fc:c3:2c:7e:
dc:bc:72:55:d0:b9:7e:f2:5a:7c:41:b5:ee:6b:56:f7:f8:7f:
e4:db:06:60:54:40:fa:10:4b:37:f3:ec:c7:fa:5a:85:ce:cc:
a7:a5:0a:e7:ca:81:b3:eb:e3:bd:02:94:1d:0e:3a:ce:43:8d:
b0:33:f5:1e:59:ee:ba:e3:9f:9d:a8:16:53:8c:f4:58:18:91:
b9:55:7b:eb:4f:a2:c6:8a:f8:e3:ed:cc:27:94:68:90:9b:c5:
48:79:4d:d2:46:3b:b5:94:9c:97:f8:79:4f:3e:85:0b:fd:62:
cf:27:64:13:aa:38:60:0b:57:dd:8b:49:b8:6a:03:ca:75:6d:
67:fe:92:72:b1:2f:09:8b:1f:00:1f:1c:78:d7:d5:24:6f:59:
21:d6:3a:fd:b3:44:b2:d5:57:28:0e:18:6d:0a:6b:9f:1d:2f:
31:0e:11:01:75:82:e7:c1:f8:53:70:ae:1a:2e:58:a4:0c:1d:
66:f1:6e:07:ed:cb:ce:a5:e2:48:a4:76:7e:f9:12:ce:26:13:
17:2b:6f:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 21 07:40:55 2026 by rpki-client