Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20115.roa
File: AS20115.roa (raw, json)
Hash identifier: bzP2aC0wDVSu3o3QaLgN+tdooMa5DNsu6lJhIoMXZ0I=
Subject key identifier: 05:70:18:47:EC:FD:BB:EE:C6:87:CB:F6:1C:FA:0E:54:61:6D:F2:6F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31BC87D7E90AA49C75CD0540E288A6D9E136876E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20115.roa
Signing time: Fri 28 Aug 2026 00:49:30 +0000
ROA not before: Fri 28 Aug 2026 00:44:30 +0000
ROA not after: Fri 27 Aug 2027 00:49:30 +0000
asID: 20115
IP address blocks: 82.22.136.0/22 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.36.0/22 maxlen: 24
82.27.144.0/20 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bc:87:d7:e9:0a:a4:9c:75:cd:05:40:e2:88:a6:d9:e1:36:87:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 00:44:30 2026 GMT
Not After : Aug 27 00:49:30 2027 GMT
Subject: CN=05701847ECFDBBEEC687CBF61CFA0E54616DF26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:64:5f:ba:6d:62:21:e5:44:ae:18:8f:2f:
74:19:63:d6:80:b1:5e:df:e8:81:7e:ea:af:7d:3d:
81:c4:66:e5:8c:1a:6c:b3:14:ec:b2:4f:c4:16:05:
8e:b0:43:55:52:d9:e2:4b:5d:80:0a:40:63:fc:54:
e8:be:0d:68:1b:73:9e:3c:8f:7c:b6:c6:47:05:3f:
50:7c:5b:d1:32:dc:c4:f8:ce:26:2c:e5:2b:71:00:
49:b4:2d:37:05:90:73:fa:73:90:1e:5e:ec:cd:e5:
9a:c5:cb:3c:bf:20:ee:ee:9d:7b:5a:6f:7e:23:a6:
5d:28:03:60:2e:42:9a:d1:ee:c9:84:0a:81:1a:85:
61:46:bc:40:98:b5:80:c0:d4:b4:1c:49:d8:92:aa:
36:7c:45:21:a0:8b:92:c5:de:d5:84:0a:e1:ac:29:
8a:49:b9:92:d6:0f:eb:f2:bd:f6:86:45:a5:b2:c8:
83:12:b0:ab:11:6f:5a:76:1c:21:e1:f0:77:ec:52:
f9:49:bd:e9:83:59:0a:f0:ca:b4:82:d3:74:38:f9:
a8:be:fc:e1:54:69:99:a6:96:33:ec:3d:b4:99:e7:
a6:9d:fb:9d:26:ff:28:e6:e8:fe:49:da:e7:07:f3:
95:6e:aa:8b:ca:29:84:62:60:c2:e2:3b:82:a7:ac:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:18:47:EC:FD:BB:EE:C6:87:CB:F6:1C:FA:0E:54:61:6D:F2:6F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.136.0/22
82.23.140.0/23
82.23.152.0/21
82.24.36.0/22
82.27.144.0/20
82.29.30.0/23
82.29.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:88:9e:b7:d9:6d:89:98:2a:23:3d:15:2e:21:6a:22:32:14:
5f:8e:3f:0a:88:28:ef:59:de:93:34:8a:d9:0b:ed:79:75:71:
93:ec:16:08:4a:8f:34:2d:da:1a:49:6f:e2:b6:3e:1c:33:89:
af:a1:d4:f7:16:53:52:05:3a:79:9e:1d:a3:1f:b8:a3:02:db:
fb:78:de:a1:2e:4b:d9:12:e4:89:e4:0e:65:a0:b1:95:5c:e1:
75:e9:3d:bd:a4:cb:4f:11:5d:c3:81:b1:3f:6f:61:69:5f:d3:
37:ec:a2:d2:ad:29:1d:88:1b:b3:25:de:7d:69:d6:49:d5:11:
fb:1c:6d:d0:2d:9a:65:ed:d8:f7:6b:9a:4e:e6:28:22:bc:6b:
7a:ce:f2:f1:45:ee:de:68:fa:2c:45:a1:c9:e4:b4:88:40:1c:
00:31:e5:b2:39:db:4e:19:67:29:a5:91:b5:ea:4d:88:35:a0:
b7:4d:0b:c8:77:5d:b1:18:e1:6b:35:b2:3b:01:2a:97:6e:c1:
75:f0:95:a2:98:8e:99:7b:4d:17:e2:de:b4:fd:62:bb:f4:23:
3d:fe:56:ab:37:87:23:d5:47:31:fb:55:65:57:e1:c3:10:3e:
f1:97:34:82:20:58:2c:85:3c:e9:6e:00:9e:b0:dd:ce:4f:a5:
fd:e6:72:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:33:34 2026 by rpki-client