
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 3V7vWM2zN/PXlc9LCUA1peSJ7/07CWZCBaPdIP7Ax/g=
Subject key identifier: 27:2E:31:80:6B:72:67:75:75:A6:57:98:DE:5C:C3:EE:8F:8A:57:B6
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 097E0D5E5D7E3A6F92AC96B003A1B9B7BF751196
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS20473.roa
Signing time: Thu 22 Oct 2026 09:28:53 +0000
ROA not before: Thu 22 Oct 2026 09:23:53 +0000
ROA not after: Thu 21 Oct 2027 09:28:53 +0000
asID: 20473
IP address blocks: 79.182.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7e:0d:5e:5d:7e:3a:6f:92:ac:96:b0:03:a1:b9:b7:bf:75:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 22 09:23:53 2026 GMT
Not After : Oct 21 09:28:53 2027 GMT
Subject: CN=272E31806B72677575A65798DE5CC3EE8F8A57B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:82:5a:4d:96:bb:0d:22:e2:1f:32:a4:5b:
1b:94:cd:3e:46:aa:89:34:07:d0:76:60:59:f2:d6:
87:4d:23:6e:b1:50:40:ce:d8:2c:30:d3:1d:bc:92:
a6:98:e0:92:14:53:06:70:7e:b0:01:d9:c9:54:9e:
64:fc:4b:90:8b:b3:75:61:ce:7a:f7:cd:3a:96:f7:
5d:a5:ec:37:41:19:7c:dc:96:aa:25:71:ed:52:3a:
ee:c6:74:5b:85:8b:ad:f2:c5:d9:58:77:36:78:16:
be:9a:63:d9:d3:de:59:4d:99:4f:45:27:f9:63:0e:
a8:44:0b:d2:da:a1:d6:ac:31:1f:06:33:e1:98:e8:
57:0b:1d:ae:d5:f1:68:08:ec:0b:d1:35:fc:90:df:
ee:f9:71:36:6e:81:ef:d1:fb:9b:72:1b:31:cb:ef:
20:ba:6e:be:4f:6f:70:a5:7b:3a:9f:b7:23:1c:29:
c7:2e:fb:80:3f:44:bf:7c:4c:d2:11:89:dd:4e:4c:
1a:f5:f2:da:03:e8:ff:56:8e:d6:ba:cb:76:ef:ba:
5f:32:7b:98:5e:14:cf:6d:6f:b7:7d:27:06:33:fe:
1d:97:fe:47:ce:41:b7:89:6e:79:27:3e:0b:64:d1:
88:7b:72:bc:85:c6:93:5f:56:08:27:46:71:88:14:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:31:80:6B:72:67:75:75:A6:57:98:DE:5C:C3:EE:8F:8A:57:B6
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d9:e0:98:d0:4a:fe:ca:c0:97:65:2d:0a:05:2d:d4:4b:7f:
b6:8d:67:e1:17:47:af:e8:d0:e4:2c:18:e7:cb:b0:96:c1:d6:
42:f7:f9:56:34:0f:9b:a0:1e:ee:0a:73:0e:20:27:d8:8b:79:
63:cb:aa:83:d1:27:60:c9:92:6d:df:1c:b7:cc:6b:c8:2d:96:
d6:a0:c5:9b:2f:64:84:93:13:60:e7:6f:7b:6b:d6:5d:09:2d:
0a:4f:be:88:d9:bf:f7:6b:2a:1a:88:f0:4c:bd:65:d1:39:17:
a4:2f:eb:59:c6:40:98:ea:98:89:93:68:97:a3:cf:2e:45:0c:
42:04:dd:53:a3:f2:6c:12:18:4b:9f:70:06:ac:e8:d3:18:71:
1f:c2:8b:4a:51:6f:08:f3:24:ea:b8:7d:2f:d5:0c:3e:45:df:
8c:cc:0a:a8:df:22:27:27:fd:99:e8:b0:02:f1:df:20:f9:7a:
31:6b:5d:ad:45:f8:26:3d:c0:af:c9:64:16:e4:cb:98:ad:20:
c2:d3:b6:7d:fa:1d:21:13:7d:57:40:a3:af:7a:e0:8c:a6:24:
72:54:33:5e:5a:0d:4f:3a:a2:27:ee:25:b4:89:ef:f9:35:fc:
22:5a:35:63:ee:bf:aa:9a:99:d0:0f:24:f2:ed:53:29:39:1a:
f2:de:7f:3e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUCX4NXl1+Om+SrJawA6G5t791EZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMjIwOTIzNTNaFw0yNzEwMjEwOTI4NTNaMDMxMTAvBgNV
BAMTKDI3MkUzMTgwNkI3MjY3NzU3NUE2NTc5OERFNUNDM0VFOEY4QTU3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGIJaTZa7DSLiHzKkWxuUzT5G
qok0B9B2YFny1odNI26xUEDO2Cww0x28kqaY4JIUUwZwfrAB2clUnmT8S5CLs3Vh
znr3zTqW912l7DdBGXzclqolce1SOu7GdFuFi63yxdlYdzZ4Fr6aY9nT3llNmU9F
J/ljDqhEC9LaodasMR8GM+GY6FcLHa7V8WgI7AvRNfyQ3+75cTZuge/R+5tyGzHL
7yC6br5Pb3ClezqftyMcKccu+4A/RL98TNIRid1OTBr18toD6P9Wjta6y3bvul8y
e5heFM9tb7d9JwYz/h2X/kfOQbeJbnknPgtk0Yh7cryFxpNfVggnRnGIFGSVAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUJy4xgGtyZ3V1pleY3lzD7o+KV7YwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG
XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDQ3My5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAE+2tzANBgkqhkiG9w0BAQsFAAOCAQEAXNngmNBK/srAl2UtCgUt1Et/
to1n4RdHr+jQ5CwY58uwlsHWQvf5VjQPm6Ae7gpzDiAn2It5Y8uqg9EnYMmSbd8c
t8xryC2W1qDFmy9khJMTYOdve2vWXQktCk++iNm/92sqGojwTL1l0TkXpC/rWcZA
mOqYiZNol6PPLkUMQgTdU6PybBIYS59wBqzo0xhxH8KLSlFvCPMk6rh9L9UMPkXf
jMwKqN8iJyf9meiwAvHfIPl6MWtdrUX4Jj3Ar8lkFuTLmK0gwtO2ffodIRN9V0Cj
r3rgjKYkclQzXloNTzqiJ+4ltInv+TX8Ilo1Y+6/qpqZ0A8k8u1TKTka8t5/Pg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:02:48 2026 by rpki-client