Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20860.roa
File: AS20860.roa (raw, json)
Hash identifier: 3cNgRSI4dVxDQvNgR8fep2ge/vsY8c5htrxEiWN5HFo=
Subject key identifier: F9:6E:43:8A:B5:74:E1:A4:41:8C:9F:9A:6B:A6:87:61:16:36:E2:85
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 79F24D3A28569E496F3566FD81D73CA843EC4ED4
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20860.roa
Signing time: Thu 03 Sep 2026 14:49:32 +0000
ROA not before: Thu 03 Sep 2026 14:44:32 +0000
ROA not after: Thu 02 Sep 2027 14:49:32 +0000
asID: 20860
IP address blocks: 141.98.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f2:4d:3a:28:56:9e:49:6f:35:66:fd:81:d7:3c:a8:43:ec:4e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 3 14:44:32 2026 GMT
Not After : Sep 2 14:49:32 2027 GMT
Subject: CN=F96E438AB574E1A4418C9F9A6BA687611636E285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:2d:81:1c:87:b0:b1:b4:28:09:8f:4a:ed:
fd:68:a5:11:02:f0:9a:ff:2b:20:af:9e:01:56:e6:
31:1b:45:15:5f:2f:7a:5d:82:28:53:d2:d8:ea:4f:
d0:67:1b:ce:89:14:97:e7:95:e8:ac:0e:b5:3c:2d:
d9:6f:c4:ed:81:2f:36:75:01:eb:cd:44:35:c9:7f:
68:26:ef:30:67:e9:d6:35:df:0f:33:27:97:20:44:
4e:e4:8a:37:bb:57:b4:69:a7:c7:50:ad:b3:52:55:
ce:07:e8:f5:43:ec:46:41:fb:5c:52:10:6a:04:c0:
2a:d8:48:3f:e2:e3:b7:ff:dd:88:92:73:35:4b:b9:
d0:86:53:37:59:05:64:54:ae:33:5e:83:4e:e2:f1:
4a:83:09:fb:21:30:01:49:62:21:c6:30:31:72:54:
be:e3:a8:d6:ef:d7:d8:e6:28:b8:7b:7b:9b:04:7c:
d2:3b:27:03:a5:48:f6:bf:b2:08:c4:ef:6b:e9:9d:
8e:99:ee:2d:77:5b:e1:b6:9d:81:73:db:32:6d:ee:
20:0b:a7:b5:9f:dc:9d:64:fa:2f:61:97:ee:71:e3:
69:e2:8c:ac:d6:16:e8:97:0f:8d:12:ab:cb:c6:cd:
00:55:a0:d8:ac:91:7f:6d:e7:f7:39:9c:2f:5b:9b:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6E:43:8A:B5:74:E1:A4:41:8C:9F:9A:6B:A6:87:61:16:36:E2:85
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS20860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.158.0/23
Signature Algorithm: sha256WithRSAEncryption
50:8d:c0:10:27:f2:45:1b:21:c6:f9:6d:b1:dd:80:15:dc:f6:
8f:12:6e:29:97:7d:68:d3:92:59:97:4a:cb:8a:3c:52:ea:05:
6c:d9:55:5c:d8:b7:b7:cc:e3:68:14:a7:86:4b:92:87:aa:c7:
3a:2d:25:b3:fa:e0:ae:f9:de:4f:5e:32:df:9d:5c:cf:b7:79:
b0:c5:49:b1:b0:da:80:ed:24:89:e3:f2:b1:b9:73:3e:96:a6:
a5:8d:3e:41:7b:b7:03:84:5d:f8:91:47:79:20:49:55:dd:37:
fb:1f:b4:9b:54:37:94:55:14:a0:19:28:36:df:ab:99:96:e4:
37:00:7e:3b:c8:36:54:52:39:2d:36:21:5d:13:39:e3:bd:49:
5a:20:a9:3a:96:86:a6:b8:7a:87:35:80:be:5e:bc:19:36:23:
0e:0b:03:0a:26:b0:fa:40:68:83:e4:5b:fa:31:08:02:a9:ea:
1d:0e:be:d0:93:dd:27:63:6f:38:39:52:ac:1f:be:93:c0:37:
fe:98:eb:fe:5a:86:fc:d9:88:3b:30:1e:bb:27:57:07:2b:95:
ca:3d:08:ab:46:c1:0e:4f:72:89:02:86:12:ca:a7:4b:66:da:
41:bb:61:7d:24:81:84:10:e8:3a:ff:e4:6b:55:68:a3:fa:b7:
87:d7:df:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:25 2026 by rpki-client