Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: bM29HEaJOhae2/6FlWOFrcN0d96sTLObF2uuDnoygkU=
Subject key identifier: B4:BA:9F:72:BF:2F:04:E1:9D:31:C3:2F:22:F0:74:5E:20:12:D9:EA
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 79AB52166E347524F45DE2AEBA91319AFF91FAD3
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS20473.roa
Signing time: Tue 16 Sep 2025 10:04:31 +0000
ROA not before: Tue 16 Sep 2025 09:59:31 +0000
ROA not after: Tue 15 Sep 2026 10:04:31 +0000
asID: 20473
IP address blocks: 194.93.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 07:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ab:52:16:6e:34:75:24:f4:5d:e2:ae:ba:91:31:9a:ff:91:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 16 09:59:31 2025 GMT
Not After : Sep 15 10:04:31 2026 GMT
Subject: CN=B4BA9F72BF2F04E19D31C32F22F0745E2012D9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:59:b6:02:ef:44:3d:8b:07:c9:94:a3:f9:4b:
1c:b5:85:87:43:75:39:d3:58:de:4a:ea:d0:b0:74:
a6:f3:34:6d:17:4e:ba:f2:eb:7b:e1:69:4b:86:b5:
69:84:ba:79:32:20:8c:89:62:e4:0e:79:72:33:5f:
68:cd:48:83:d6:2e:13:98:eb:1c:52:58:a0:3f:62:
f2:40:b8:af:c2:1a:6b:a4:a4:ba:f5:c6:b6:18:51:
78:a0:fe:d4:83:16:e2:86:2a:2a:c3:df:64:64:27:
32:d5:7a:53:20:ef:96:1b:39:88:06:3f:1f:db:62:
96:49:1d:b7:cc:43:e7:0d:ad:b1:31:d3:66:7c:9a:
13:a6:bc:7b:e0:52:76:db:ec:57:36:9f:66:58:a6:
f5:c7:c1:d4:dd:8f:e4:d4:c3:8c:21:7d:a3:5b:53:
8f:b9:4d:d1:4f:9e:90:93:89:8c:be:41:b7:9f:d9:
b2:d2:73:98:6e:d5:52:fe:35:f3:31:8a:b5:85:1b:
82:a3:0f:c4:e1:80:90:0d:65:4c:a2:3e:a4:01:e1:
31:38:52:2a:13:9d:5b:2d:a9:26:2b:54:ea:1c:51:
b6:84:b2:80:5f:1c:f5:5a:52:e9:29:0e:2e:bd:9a:
cb:ea:0d:85:fe:b9:68:8a:15:11:06:48:c9:7d:1d:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:9F:72:BF:2F:04:E1:9D:31:C3:2F:22:F0:74:5E:20:12:D9:EA
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8d:24:0c:e2:8c:bf:db:11:e3:de:26:68:8d:ea:5e:c5:ab:
32:bc:10:63:e6:f7:ca:70:73:a9:cb:74:72:28:df:4f:95:d5:
2a:d1:47:aa:37:40:60:fc:60:9f:39:e5:f9:89:a0:03:7c:fc:
8b:6f:84:93:05:e9:aa:3e:bd:23:6b:0d:04:3c:fa:e5:97:2b:
14:14:28:5d:af:15:aa:e5:83:c4:7c:72:17:92:c2:70:2e:79:
b1:10:8e:4c:9e:39:32:c1:02:b2:29:f3:b0:4a:2f:98:85:3a:
0b:f7:df:c0:1d:71:1e:0d:e2:c0:55:32:94:9a:e5:79:f3:aa:
68:8d:a0:4e:89:7e:f5:22:0e:d9:8d:1e:0a:25:1e:80:8f:75:
99:21:da:19:32:6a:f2:7d:68:84:db:c8:28:64:dd:eb:bb:22:
48:f3:24:20:87:37:79:2f:ab:f3:a4:9d:a0:1f:fc:77:43:d3:
37:46:b8:56:75:a6:70:ed:54:8a:f9:77:55:ff:d2:e5:cb:39:
2c:73:93:b5:cb:fa:0e:de:db:04:69:f1:ac:c6:a7:e3:08:42:
f9:8f:b9:34:f4:6c:76:01:4f:4e:8b:c7:de:95:28:c6:2c:4d:
30:3c:80:a0:33:1f:a6:8d:42:32:28:65:b5:01:21:16:86:b5:
6c:65:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:15 2025 by rpki-client