Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20200.roa
File: AS20200.roa (raw, json)
Hash identifier: CjqZY6lRScLE4kcIs2N0Kxl1Y5ryGsuJ7X7yItwpPds=
Subject key identifier: 10:40:09:1E:19:D6:BA:29:B3:3E:79:27:B3:35:1C:A6:D9:F0:AC:F0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4EB5BC7BCF93B0F290B0CBEC4B20E4C42A43AC79
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20200.roa
Signing time: Sun 05 Apr 2026 08:47:51 +0000
ROA not before: Sun 05 Apr 2026 08:42:51 +0000
ROA not after: Sun 04 Apr 2027 08:47:51 +0000
asID: 20200
IP address blocks: 82.41.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b5:bc:7b:cf:93:b0:f2:90:b0:cb:ec:4b:20:e4:c4:2a:43:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 5 08:42:51 2026 GMT
Not After : Apr 4 08:47:51 2027 GMT
Subject: CN=1040091E19D6BA29B33E7927B3351CA6D9F0ACF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:2f:1a:93:a0:3d:6d:e1:07:b3:9b:a4:7b:
e4:42:b6:79:a4:06:28:5f:87:8c:ed:4d:80:e2:1b:
63:27:d1:5f:b5:5d:72:71:64:d2:2f:27:97:0f:78:
06:9c:23:c3:e5:ed:7d:b0:01:2b:e8:35:d1:b6:2d:
56:55:b0:60:a0:6f:cb:7b:2e:b5:dc:9e:bb:6c:a8:
1a:36:f9:18:63:ac:7e:af:a2:f7:d4:f1:20:32:64:
d8:62:34:3a:7f:53:78:ee:25:74:23:10:45:36:39:
c1:a9:68:62:81:52:47:14:54:de:8c:90:7e:c2:63:
e0:46:a5:93:3c:8a:be:1f:09:eb:26:d6:28:86:c1:
85:f0:1b:3d:40:40:98:cc:f6:f5:93:b2:84:4d:85:
0a:73:c9:f8:fb:a5:1e:20:37:00:31:de:3d:f7:3a:
df:e9:28:be:71:60:58:d6:ca:81:3d:69:20:e6:ac:
62:2e:8a:f3:0a:38:c5:ce:ae:31:45:d5:8a:9a:22:
ca:93:d1:2c:0e:a5:0f:c8:29:c2:6e:0e:8d:22:55:
69:a6:33:a9:3e:2f:56:59:da:b3:b2:a7:7e:59:f0:
7c:9d:70:c2:9e:f9:86:fa:89:61:8d:3d:7a:1b:cd:
bc:72:d2:59:c9:a9:14:3d:dc:63:ec:a5:b4:fc:53:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:40:09:1E:19:D6:BA:29:B3:3E:79:27:B3:35:1C:A6:D9:F0:AC:F0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:34:2d:81:fd:f8:ce:64:e2:55:18:e7:e6:db:1f:60:dd:65:
98:a8:78:60:c5:23:c7:12:ab:4b:b2:71:48:f6:01:90:16:57:
15:52:2e:44:4c:ef:39:b3:d0:26:28:cc:1b:8c:08:68:5c:87:
28:4e:95:37:8a:eb:23:42:fb:6a:79:52:24:96:b0:23:3e:20:
97:98:91:95:bc:5a:5f:a8:70:65:ee:fb:81:79:ac:81:4b:89:
5a:15:f4:89:7f:78:c8:9c:f9:9a:01:72:41:0a:1c:8c:59:20:
60:38:f9:e4:0b:ea:1e:e6:b8:f0:c6:ce:37:93:bf:1f:21:1a:
25:a1:7f:7c:09:81:df:c5:e3:4d:66:4b:89:bc:33:0f:3d:d7:
ba:6c:3d:7b:3d:b2:e3:4f:a5:a7:15:fa:00:3e:4b:07:ef:0e:
5f:4f:37:52:5c:db:80:30:35:cb:3a:7c:33:4f:ef:55:6e:d9:
59:90:9b:ad:65:32:3a:6f:39:a1:18:8c:6b:e4:44:df:2a:fd:
5a:32:53:f8:f7:58:8a:22:e6:45:cc:ec:38:e5:39:d1:f1:5a:
e9:58:b1:5e:c6:ef:0e:0b:f5:e3:6c:03:b7:00:df:73:02:5e:
88:9b:6b:2f:be:72:18:52:d0:d1:7b:78:23:7d:6c:9c:5a:4d:
b5:8b:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:39:38 2026 by rpki-client