Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20001.roa
File: AS20001.roa (raw, json)
Hash identifier: Suy2C9Q2LcqWFW0ql+0Sk6vghKLsh4aU6NQ35ZSLfkU=
Subject key identifier: FA:CF:B5:98:F9:69:D4:7E:8E:A1:96:16:15:1F:A5:A2:9F:31:C9:34
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 320E3AC0191B4E6E968DA9934B446104DB0ED6EC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20001.roa
Signing time: Thu 19 Mar 2026 07:34:04 +0000
ROA not before: Thu 19 Mar 2026 07:29:04 +0000
ROA not after: Thu 18 Mar 2027 07:34:04 +0000
asID: 20001
IP address blocks: 92.113.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0e:3a:c0:19:1b:4e:6e:96:8d:a9:93:4b:44:61:04:db:0e:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 19 07:29:04 2026 GMT
Not After : Mar 18 07:34:04 2027 GMT
Subject: CN=FACFB598F969D47E8EA19616151FA5A29F31C934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:a6:e2:22:48:7e:52:51:ba:bf:15:5b:86:
08:ec:ac:f7:09:95:5f:71:8e:9e:20:a5:c8:2c:8b:
59:80:1d:2a:bc:ce:ac:97:34:34:ae:0c:d7:e8:15:
3d:73:c5:41:67:db:26:5e:ee:48:3d:b1:07:ae:c4:
ce:64:00:84:55:c6:9e:0c:c7:a0:8e:bc:d3:c9:84:
18:26:f7:66:45:c1:16:02:57:08:77:96:89:47:88:
fe:d9:4f:a2:b9:14:75:41:88:19:9d:ae:1f:e4:0d:
6d:80:17:92:84:cb:65:2d:d6:d3:60:75:90:33:e2:
5f:fb:45:5a:05:51:93:fc:d8:1f:c5:48:29:e9:b2:
1e:02:47:bd:f5:d0:b6:cf:f5:09:37:fb:c3:e8:b1:
4e:c9:af:56:75:04:6b:8f:55:dd:ad:c1:79:d7:dd:
3e:c6:0c:2f:d5:72:aa:06:51:49:04:e2:7e:16:01:
e7:a7:70:05:5c:c7:00:03:12:b5:b2:ce:dd:3c:39:
13:41:c3:2d:0b:94:e9:39:a5:09:7b:28:4c:2b:1a:
4f:0c:d8:75:7f:2f:bf:f1:ee:1f:a7:e9:b6:98:9f:
46:17:aa:d7:09:42:9b:31:7a:73:23:75:22:a2:13:
26:64:b2:73:01:8c:05:94:50:bb:b5:84:31:5f:ad:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:B5:98:F9:69:D4:7E:8E:A1:96:16:15:1F:A5:A2:9F:31:C9:34
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.215.0/24
Signature Algorithm: sha256WithRSAEncryption
63:92:b1:13:79:a9:d9:ce:8d:2c:05:1c:0e:5c:a0:8f:e4:04:
c6:6f:50:0e:da:ab:ce:c6:ec:33:36:e0:bd:0a:02:7d:2a:04:
86:cf:75:ca:31:be:83:1d:fe:de:1d:fb:27:61:6c:36:5c:27:
72:72:1f:ad:c0:cc:22:65:90:dc:1f:8b:8d:2d:be:90:04:54:
40:35:bb:a1:99:31:da:89:3f:cc:c1:80:17:7a:0b:7d:a4:17:
fb:1c:a0:dd:5c:cc:0e:20:07:bd:ae:6a:76:ab:4c:0c:49:ca:
2f:ab:f8:f1:98:bb:f0:a2:d2:a9:26:13:6e:19:24:7a:e5:33:
c1:04:78:4a:c4:54:fb:eb:10:7b:38:14:10:cc:cc:b8:fd:a7:
2f:40:79:99:f4:d3:2f:f3:24:d9:7d:14:97:57:b2:61:1b:f1:
94:61:05:45:50:83:89:05:31:55:e8:5e:ba:25:c9:15:41:f5:
b9:d8:2f:99:12:32:7a:14:b7:de:99:cc:e0:60:01:1e:b4:80:
3d:72:c0:18:ed:0a:3c:ec:0b:34:61:f3:c4:14:cc:a1:ed:a6:
e8:e7:6a:a4:69:65:b4:f4:ae:53:db:a7:bb:f9:00:1c:95:6b:
34:61:6f:9f:e2:0e:3c:f5:49:72:d0:30:1e:0d:55:8d:af:fe:
a4:aa:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 12:35:02 2026 by rpki-client