Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: GcneSIFlb0DzhImdFxxg43dKLnd9z97ZWigEhIH77sk=
Subject key identifier: 4B:39:18:38:97:02:E4:71:99:7D:16:65:33:5F:43:EB:2A:5E:32:03
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 46F848434FC915BA2084D4849F7BB53EFACA7D1A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Wed 19 Aug 2026 00:05:06 +0000
ROA not before: Wed 19 Aug 2026 00:00:06 +0000
ROA not after: Wed 18 Aug 2027 00:05:06 +0000
asID: 20473
IP address blocks: 82.22.45.0/24 maxlen: 24
82.29.28.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.38.41.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
178.83.88.0/24 maxlen: 24
178.83.90.0/24 maxlen: 24
178.83.92.0/24 maxlen: 24
178.83.94.0/24 maxlen: 24
178.83.95.0/24 maxlen: 24
178.83.97.0/24 maxlen: 24
178.83.98.0/24 maxlen: 24
178.83.104.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.142.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
2a13:9500:170::/48 maxlen: 48
2a13:9500:1ac::/48 maxlen: 48
2a13:9500:1b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f8:48:43:4f:c9:15:ba:20:84:d4:84:9f:7b:b5:3e:fa:ca:7d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 19 00:00:06 2026 GMT
Not After : Aug 18 00:05:06 2027 GMT
Subject: CN=4B3918389702E471997D1665335F43EB2A5E3203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:8a:e9:20:0b:49:ff:7b:07:f9:de:f5:a4:
8e:fa:21:5c:80:e4:49:72:cd:1c:26:10:01:bf:e7:
cc:e9:3b:71:20:aa:8f:9a:97:1a:9a:b5:e2:3d:cf:
74:1a:c6:1b:52:dc:1c:bf:68:6d:48:c6:e6:f5:e6:
8b:eb:44:c6:db:dc:6d:0c:3a:50:11:9f:a0:67:b6:
78:dc:19:e3:23:82:9e:31:6d:3c:62:a4:c5:b4:e3:
44:72:7a:55:53:b9:87:e0:38:40:90:2b:4f:d9:bb:
51:a8:c1:e2:f6:f7:12:0d:eb:c2:38:4c:f6:3c:e0:
0c:13:28:79:55:4f:09:93:73:08:cb:35:1d:97:cf:
cc:bc:97:1c:19:7d:7d:a1:bd:97:e8:32:8a:4d:09:
e6:de:07:c9:e6:40:77:41:99:4e:4f:df:a0:8e:b1:
f9:1d:0a:0c:0c:dc:18:c4:66:71:ae:fe:1b:c5:eb:
9f:fe:46:93:e2:e6:0e:c2:4d:a7:de:1d:c6:59:84:
d7:ea:64:8e:33:90:80:66:e7:4e:c7:4a:5a:b8:e6:
80:63:47:b0:45:7e:f9:ad:7d:3b:02:66:be:3a:de:
23:dd:a5:0f:f3:11:fe:e4:04:39:94:46:b0:49:33:
cf:2e:f0:75:d6:bd:37:1b:ef:13:61:57:57:6d:56:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:39:18:38:97:02:E4:71:99:7D:16:65:33:5F:43:EB:2A:5E:32:03
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.45.0/24
82.29.28.0/24
82.29.44.0/24
82.38.41.0/24
82.41.117.0/24
178.83.88.0/24
178.83.90.0/24
178.83.92.0/24
178.83.94.0/23
178.83.97.0-178.83.98.255
178.83.104.0/24
178.83.107.0/24
178.83.142.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
2a13:9500:170::/48
2a13:9500:1ac::/48
2a13:9500:1b3::/48
Signature Algorithm: sha256WithRSAEncryption
41:05:db:f1:e3:97:e9:1d:6a:1b:b1:96:6d:2a:6e:a8:f9:8a:
09:78:d0:72:92:32:9d:15:d1:7b:07:46:24:78:a2:b1:76:e6:
39:f4:41:7f:e5:20:8f:1c:c6:cd:92:27:66:93:31:2e:89:53:
40:71:ed:57:23:72:c2:ed:d5:7f:7d:64:9b:f0:c9:56:b9:74:
62:f2:b7:4a:00:2f:2f:ca:be:df:a7:39:2a:38:1a:82:5d:58:
10:0b:4f:ab:e4:82:cc:8b:83:fd:80:9e:61:75:75:4d:7d:7f:
57:c7:69:bf:ad:3b:8d:68:73:aa:db:7a:3c:bf:f4:24:f8:f3:
0c:88:a2:28:c5:3b:80:44:a4:a9:af:32:ce:74:f9:03:e1:19:
a7:4f:b4:24:cf:50:e0:42:41:c8:9e:16:00:a8:2c:f4:36:06:
eb:3f:b4:f4:f9:05:51:a9:76:0d:4b:c5:cb:80:1a:62:43:3a:
16:a7:c6:b8:c8:78:26:00:75:8a:d4:54:a2:86:ee:fa:49:0b:
dc:05:70:cd:d8:a1:99:fe:0a:ec:69:e3:14:3d:af:d3:cf:c9:
69:15:25:8e:d4:d3:46:ea:0b:36:de:98:c7:95:4f:ef:33:1c:
e8:4a:ad:f1:1b:8d:d4:23:82:47:d6:ef:ed:5b:59:ff:9a:2e:
a6:5b:a7:61
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIURvhIQ0/JFboghNSEn3u1PvrKfRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MTkwMDAwMDZaFw0yNzA4MTgwMDA1MDZaMDMxMTAvBgNV
BAMTKDRCMzkxODM4OTcwMkU0NzE5OTdEMTY2NTMzNUY0M0VCMkE1RTMyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4T4rpIAtJ/3sH+d71pI76IVyA
5ElyzRwmEAG/58zpO3Egqo+alxqateI9z3QaxhtS3By/aG1Ixub15ovrRMbb3G0M
OlARn6BntnjcGeMjgp4xbTxipMW040RyelVTuYfgOECQK0/Zu1GoweL29xIN68I4
TPY84AwTKHlVTwmTcwjLNR2Xz8y8lxwZfX2hvZfoMopNCebeB8nmQHdBmU5P36CO
sfkdCgwM3BjEZnGu/hvF65/+RpPi5g7CTafeHcZZhNfqZI4zkIBm507HSlq45oBj
R7BFfvmtfTsCZr463iPdpQ/zEf7kBDmURrBJM88u8HXWvTcb7xNhV1dtVkovAgMB
AAGjggLcMIIC2DAdBgNVHQ4EFgQUSzkYOJcC5HGZfRZlM19D6ypeMgMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgfEGCCsGAQUFBwEHAQH/BIHhMIHeMGgEAgABMGIDBABS
Fi0DBABSHRwDBABSHSwDBABSJikDBABSKXUDBACyU1gDBACyU1oDBACyU1wDBAGy
U14wDAMEALJTYQMEALJTYgMEALJTaAMEALJTawMEALJTjgMEALJTlAMEALJTnDBy
BAIAAjBsAwcAKhOVAABhAwcAKhOVAACuAwcAKhOVAADPAwcAKhOVAADdAwcAKhOV
AAEMAwcAKhOVAAEgAwcAKhOVAAFJAwcAKhOVAAFNAwcAKhOVAAFeAwcAKhOVAAFw
AwcAKhOVAAGsAwcAKhOVAAGzMA0GCSqGSIb3DQEBCwUAA4IBAQBBBdvx45fpHWob
sZZtKm6o+YoJeNBykjKdFdF7B0YkeKKxduY59EF/5SCPHMbNkidmkzEuiVNAce1X
I3LC7dV/fWSb8MlWuXRi8rdKAC8vyr7fpzkqOBqCXVgQC0+r5ILMi4P9gJ5hdXVN
fX9Xx2m/rTuNaHOq23o8v/Qk+PMMiKIoxTuARKSprzLOdPkD4RmnT7Qkz1DgQkHI
nhYAqCz0NgbrP7T0+QVRqXYNS8XLgBpiQzoWp8a4yHgmAHWK1FSihu76SQvcBXDN
2KGZ/grsaeMUPa/Tz8lpFSWO1NNG6gs23pjHlU/vMxzoSq3xG43UI4JH1u/tW1n/
mi6mW6dh
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:57 2026 by rpki-client