Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: +NakeJdIAHBF7sN9OEh0ImQAawqDCF4glpVpsfBu7ew=
Subject key identifier: F7:2B:03:4C:4D:1E:87:A1:1B:F7:1E:C9:DD:BB:B8:74:9D:FE:F5:9E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1424F2B141B0A9D33695C6F3CEAA81B5DC697D86
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
Signing time: Mon 19 Oct 2026 00:01:16 +0000
ROA not before: Sun 18 Oct 2026 23:56:16 +0000
ROA not after: Mon 18 Oct 2027 00:01:16 +0000
asID: 20473
IP address blocks: 82.22.45.0/24 maxlen: 24
82.38.41.0/24 maxlen: 24
82.39.162.0/24 maxlen: 24
82.39.163.0/24 maxlen: 24
82.41.117.0/24 maxlen: 24
82.47.157.0/24 maxlen: 24
178.83.107.0/24 maxlen: 24
178.83.148.0/24 maxlen: 24
178.83.156.0/24 maxlen: 24
2a13:9500:61::/48 maxlen: 48
2a13:9500:ae::/48 maxlen: 48
2a13:9500:cf::/48 maxlen: 48
2a13:9500:dd::/48 maxlen: 48
2a13:9500:10c::/48 maxlen: 48
2a13:9500:120::/48 maxlen: 48
2a13:9500:149::/48 maxlen: 48
2a13:9500:14d::/48 maxlen: 48
2a13:9500:15e::/48 maxlen: 48
2a13:9500:170::/48 maxlen: 48
2a13:9500:1ac::/48 maxlen: 48
2a13:9500:1b3::/48 maxlen: 48
2a13:9500:1d8::/48 maxlen: 48
2a13:9500:1ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:f2:b1:41:b0:a9:d3:36:95:c6:f3:ce:aa:81:b5:dc:69:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 18 23:56:16 2026 GMT
Not After : Oct 18 00:01:16 2027 GMT
Subject: CN=F72B034C4D1E87A11BF71EC9DDBBB8749DFEF59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:32:7a:11:d8:3a:5a:69:70:fa:2b:2d:8a:
24:71:d2:b8:b4:0f:86:b0:b2:f0:b7:c5:59:b2:0c:
67:f6:dc:54:16:8c:1a:21:37:d7:5b:1a:93:c9:ab:
dc:f9:b0:f8:a3:15:d9:5d:cd:8f:eb:5a:ad:39:f1:
bf:47:20:54:57:55:fb:9a:13:a8:52:e5:77:88:a2:
62:cd:ee:a7:50:cf:56:4c:aa:df:f7:cd:fd:44:0b:
b5:78:96:3f:97:f0:a5:bc:23:4b:ba:77:95:be:5a:
b9:21:c9:07:07:ea:df:d4:68:ba:3c:91:9b:5f:a3:
10:07:d1:a2:64:f8:56:32:f2:96:d9:76:ff:ca:ac:
b0:60:60:1a:1a:86:7f:12:ef:80:98:b3:a0:93:d7:
07:a6:6a:1e:29:56:21:46:8f:e0:41:d1:07:4c:32:
c5:6f:04:0d:df:e2:0d:8c:76:45:4b:7d:9b:2f:6e:
46:8f:a2:e2:38:b6:46:8f:c5:ea:e8:69:a7:68:0b:
77:65:73:5d:43:b7:e8:d2:83:63:d1:f2:65:31:61:
26:b7:06:b2:11:a2:8d:b8:05:5c:bc:c4:db:c9:2a:
8e:d6:d5:02:2c:d7:4a:20:21:05:1e:f3:be:4f:b0:
65:55:9a:6a:be:d9:97:60:9d:47:85:4f:2d:85:2a:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:03:4C:4D:1E:87:A1:1B:F7:1E:C9:DD:BB:B8:74:9D:FE:F5:9E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.45.0/24
82.38.41.0/24
82.39.162.0/23
82.41.117.0/24
82.47.157.0/24
178.83.107.0/24
178.83.148.0/24
178.83.156.0/24
IPv6:
2a13:9500:61::/48
2a13:9500:ae::/48
2a13:9500:cf::/48
2a13:9500:dd::/48
2a13:9500:10c::/48
2a13:9500:120::/48
2a13:9500:149::/48
2a13:9500:14d::/48
2a13:9500:15e::/48
2a13:9500:170::/48
2a13:9500:1ac::/48
2a13:9500:1b3::/48
2a13:9500:1d8::/48
2a13:9500:1ec::/48
Signature Algorithm: sha256WithRSAEncryption
9c:1d:7f:67:7b:43:29:5f:9c:11:63:23:8c:e5:fa:b7:23:0c:
5b:f1:97:55:52:bb:3f:fe:33:04:cd:15:ea:40:a6:2b:96:65:
f5:bf:4c:0e:80:d5:66:2e:9d:1b:b0:7d:27:0b:24:64:87:c1:
4b:c4:c7:83:e4:5d:31:c2:61:61:86:b9:e3:56:49:f3:8f:f3:
35:a7:4f:26:90:5e:11:68:74:53:cd:ae:c6:ac:28:e5:e5:4e:
8d:dd:10:de:b1:f7:01:f5:25:cc:29:8b:9b:0e:e4:0c:2b:84:
6e:1c:4d:8d:32:2e:7a:39:8e:46:06:ea:00:5e:da:ff:c4:3b:
3e:88:b8:c5:1a:88:be:d3:ef:8e:bb:47:9e:28:2d:7f:7e:74:
a3:42:8d:48:c5:bb:b6:26:28:51:ab:43:46:4d:d7:e2:f7:91:
90:59:3e:e5:6f:e5:d9:8a:46:63:95:c4:3c:c2:5b:84:6c:00:
82:9a:0c:79:74:30:ea:f2:38:41:91:b3:c0:be:56:25:9c:3e:
74:51:e0:ec:3a:5b:07:7a:c6:af:15:9a:b5:8d:10:11:00:fa:
7b:e1:ed:e2:5d:57:5e:54:52:02:5b:95:90:bc:36:ba:43:5d:
09:ea:e7:e5:cb:4a:f2:0b:39:4c:e5:ba:0b:5a:8b:77:ca:48:
26:df:f9:47
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUFCTysUGwqdM2lcbzzqqBtdxpfYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTgyMzU2MTZaFw0yNzEwMTgwMDAxMTZaMDMxMTAvBgNV
BAMTKEY3MkIwMzRDNEQxRTg3QTExQkY3MUVDOUREQkJCODc0OURGRUY1OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNejJ6Edg6Wmlw+istiiRx0ri0
D4awsvC3xVmyDGf23FQWjBohN9dbGpPJq9z5sPijFdldzY/rWq058b9HIFRXVfua
E6hS5XeIomLN7qdQz1ZMqt/3zf1EC7V4lj+X8KW8I0u6d5W+WrkhyQcH6t/UaLo8
kZtfoxAH0aJk+FYy8pbZdv/KrLBgYBoahn8S74CYs6CT1wemah4pViFGj+BB0QdM
MsVvBA3f4g2MdkVLfZsvbkaPouI4tkaPxeroaadoC3dlc11Dt+jSg2PR8mUxYSa3
BrIRoo24BVy8xNvJKo7W1QIs10ogIQUe875PsGVVmmq+2ZdgnUeFTy2FKkq/AgMB
AAGjggK9MIICuTAdBgNVHQ4EFgQU9ysDTE0eh6Eb9x7J3bu4dJ3+9Z4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgdIGCCsGAQUFBwEHAQH/BIHCMIG/MDYEAgABMDADBABS
Fi0DBABSJikDBAFSJ6IDBABSKXUDBABSL50DBACyU2sDBACyU5QDBACyU5wwgYQE
AgACMH4DBwAqE5UAAGEDBwAqE5UAAK4DBwAqE5UAAM8DBwAqE5UAAN0DBwAqE5UA
AQwDBwAqE5UAASADBwAqE5UAAUkDBwAqE5UAAU0DBwAqE5UAAV4DBwAqE5UAAXAD
BwAqE5UAAawDBwAqE5UAAbMDBwAqE5UAAdgDBwAqE5UAAewwDQYJKoZIhvcNAQEL
BQADggEBAJwdf2d7QylfnBFjI4zl+rcjDFvxl1VSuz/+MwTNFepApiuWZfW/TA6A
1WYunRuwfScLJGSHwUvEx4PkXTHCYWGGueNWSfOP8zWnTyaQXhFodFPNrsasKOXl
To3dEN6x9wH1Jcwpi5sO5AwrhG4cTY0yLno5jkYG6gBe2v/EOz6IuMUaiL7T7467
R54oLX9+dKNCjUjFu7YmKFGrQ0ZN1+L3kZBZPuVv5dmKRmOVxDzCW4RsAIKaDHl0
MOryOEGRs8C+ViWcPnRR4Ow6Wwd6xq8VmrWNEBEA+nvh7eJdV15UUgJblZC8NrpD
XQnq5+XLSvILOUzlugtai3fKSCbf+Uc=
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:59:46 2026 by rpki-client