Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20712.roa
File: AS20712.roa (raw, json)
Hash identifier: PdPjh6y0AI+vEyYKcmdiqEfLIISdA7WbdxtfHbi6sKY=
Subject key identifier: A8:4E:6C:9C:68:2E:9C:3C:B7:93:47:DF:B6:B0:D5:02:2E:DC:C2:E6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2CC82961F74818FC4FBBF4462E717C10945F2332
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20712.roa
Signing time: Tue 25 Aug 2026 20:00:14 +0000
ROA not before: Tue 25 Aug 2026 19:55:14 +0000
ROA not after: Tue 24 Aug 2027 20:00:14 +0000
asID: 20712
IP address blocks: 51.146.73.0/24 maxlen: 24
51.194.130.0/24 maxlen: 24
94.116.12.0/22 maxlen: 22
94.116.32.0/22 maxlen: 22
94.116.196.0/22 maxlen: 22
188.220.10.0/24 maxlen: 24
188.220.192.0/24 maxlen: 24
188.220.206.0/24 maxlen: 24
188.220.217.0/24 maxlen: 24
188.221.11.0/24 maxlen: 24
188.221.23.0/24 maxlen: 24
188.221.98.0/24 maxlen: 24
188.221.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c8:29:61:f7:48:18:fc:4f:bb:f4:46:2e:71:7c:10:94:5f:23:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 25 19:55:14 2026 GMT
Not After : Aug 24 20:00:14 2027 GMT
Subject: CN=A84E6C9C682E9C3CB79347DFB6B0D5022EDCC2E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:9a:06:5b:15:9b:84:06:33:3f:68:1a:72:
80:3e:23:e4:3e:3e:d2:85:c2:55:dc:96:77:10:64:
cb:46:fe:7e:ce:c4:91:8e:50:54:7a:3a:4a:8a:d1:
49:79:bf:b8:4d:80:3f:e3:25:6f:24:77:96:68:9b:
28:63:4e:fe:2e:5d:b4:ee:45:cf:e0:75:e0:0a:26:
b1:38:e9:f5:a6:8e:e6:01:dc:9d:82:11:12:f3:34:
90:7f:e7:07:fe:5f:c1:ca:2c:5b:f4:38:71:83:26:
fe:ea:90:49:17:2d:be:08:98:b1:a2:0e:ab:31:e5:
e0:c0:1c:35:82:ac:3b:9d:5a:7c:90:e6:f4:e8:48:
75:35:f2:22:4c:79:be:f1:07:b8:6c:29:fd:d1:55:
1c:ee:43:9c:81:d3:0f:61:41:12:c9:ba:67:47:91:
6c:fc:28:22:66:f3:fa:2a:17:cd:10:af:d2:95:b7:
cb:88:3e:04:1e:2f:c8:04:01:a8:6c:a4:14:93:ed:
28:37:f7:68:db:49:a9:4a:b3:93:9b:cc:fd:74:8c:
33:e8:c8:c7:6e:99:f6:eb:aa:36:37:3c:d4:4f:09:
9e:e3:d1:21:9b:fb:a9:81:4a:44:e2:e9:80:9e:c8:
4e:8b:c4:14:58:ad:3d:00:4f:e5:98:c4:db:de:db:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:6C:9C:68:2E:9C:3C:B7:93:47:DF:B6:B0:D5:02:2E:DC:C2:E6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS20712.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.73.0/24
51.194.130.0/24
94.116.12.0/22
94.116.32.0/22
94.116.196.0/22
188.220.10.0/24
188.220.192.0/24
188.220.206.0/24
188.220.217.0/24
188.221.11.0/24
188.221.23.0/24
188.221.98.0/24
188.221.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:89:01:ca:71:72:28:f5:b3:a8:fd:42:dc:77:a6:80:72:6b:
66:af:48:0f:df:22:ed:1a:c9:cc:99:aa:63:ae:0d:5f:b9:b2:
4b:48:7a:d2:08:d9:d9:6f:ed:a3:d4:98:e1:a5:52:c3:14:46:
ef:93:e1:6e:39:d6:39:95:ca:38:5a:4e:0b:b7:61:f8:40:6e:
1f:a1:02:06:bd:e8:53:4c:c5:25:47:e4:b5:54:8d:0f:76:3c:
a0:18:7e:d2:9c:b6:a9:c8:c2:4e:8e:13:f7:47:44:27:22:d5:
96:79:dc:50:5b:b0:f7:7b:fc:e4:ee:73:eb:ae:7f:ee:c1:64:
76:ce:64:59:39:82:4b:c8:c4:4b:3e:d3:25:a1:4c:7b:5c:d0:
c4:8e:c3:ea:83:93:91:39:65:47:88:c8:80:d3:32:82:f8:4a:
f7:e4:5d:6a:20:1c:c4:f1:b1:2e:eb:4e:30:31:a4:52:19:dc:
17:06:dd:c9:f5:6d:a9:8f:2c:ee:2c:2a:e7:30:0f:59:61:ab:
6b:d6:90:4e:e5:79:68:b6:68:9d:14:97:f5:47:31:57:87:3c:
05:0a:cf:43:10:58:bd:f2:66:22:bf:10:9d:12:0e:b0:d2:f3:
65:2d:c9:1b:9d:18:eb:a8:83:dc:e6:1a:11:38:19:78:00:a9:
41:9d:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:23 2026 by rpki-client