Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20648.roa
File: AS20648.roa (raw, json)
Hash identifier: Q8VdjiL3qNxCLw3xXVOV6s/bV6jXBtSlIiY3pfKwEwk=
Subject key identifier: A9:54:68:3E:D1:C7:BA:84:1D:D4:6B:B0:89:2F:F7:24:BD:AB:D1:5C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6A46951D274C11C4401D9EF1A1BC7C7427F7D25F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20648.roa
Signing time: Wed 24 Jun 2026 08:36:31 +0000
ROA not before: Wed 24 Jun 2026 08:31:31 +0000
ROA not after: Wed 23 Jun 2027 08:36:31 +0000
asID: 20648
IP address blocks: 91.124.60.0/24 maxlen: 24
91.124.116.0/24 maxlen: 24
95.134.54.0/24 maxlen: 24
95.134.60.0/24 maxlen: 24
95.134.232.0/24 maxlen: 24
95.135.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:46:95:1d:27:4c:11:c4:40:1d:9e:f1:a1:bc:7c:74:27:f7:d2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 24 08:31:31 2026 GMT
Not After : Jun 23 08:36:31 2027 GMT
Subject: CN=A954683ED1C7BA841DD46BB0892FF724BDABD15C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:b8:77:91:43:e6:b3:2c:ad:01:16:af:bf:
d9:9e:19:c7:46:2a:a0:44:c0:fd:f6:62:4f:06:da:
74:ff:49:2e:36:d8:5f:17:74:55:e5:bb:32:fb:dc:
d1:6d:a6:2f:64:16:55:22:d1:40:62:22:33:db:c0:
a6:81:95:e1:92:f9:6a:0b:7a:61:d4:e0:84:1d:a8:
f3:11:0e:b2:9e:d8:22:c9:a3:f4:28:86:d7:ce:f5:
78:b7:77:1e:1c:04:99:c4:eb:e7:9a:19:4c:ad:c0:
92:26:c0:4b:eb:26:8a:b6:e4:07:a2:67:7c:0f:8d:
64:11:2a:9b:e4:71:c4:a1:21:73:58:1b:17:1c:09:
23:9b:3f:a8:24:4d:48:08:7e:4a:30:e9:a0:13:b3:
72:13:df:5a:d1:b4:ba:b9:48:b2:ed:03:d9:9b:6f:
69:cd:ab:d7:23:02:33:44:51:4f:23:0e:85:d3:1b:
17:48:50:07:88:4c:39:85:fe:8f:db:34:2a:4f:d8:
57:14:54:39:e4:9b:94:a3:1d:9e:84:fc:73:8c:4a:
23:b5:22:1c:24:4c:aa:e5:b8:bb:b3:22:ae:55:db:
14:03:9b:e3:8d:ff:82:d1:0c:29:85:da:7d:90:be:
7e:12:ed:56:ac:f8:9d:52:f0:5a:84:10:2e:b3:a1:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:54:68:3E:D1:C7:BA:84:1D:D4:6B:B0:89:2F:F7:24:BD:AB:D1:5C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.60.0/24
91.124.116.0/24
95.134.54.0/24
95.134.60.0/24
95.134.232.0/24
95.135.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:08:07:52:1f:44:15:91:0a:71:c5:f9:c6:2c:df:00:83:a1:
bc:10:e8:05:53:43:f0:30:fb:3a:ef:87:ff:56:a3:23:63:99:
02:56:6a:35:93:82:e6:fa:95:7c:90:ab:1d:c8:31:da:9a:e8:
f2:74:96:f7:b7:b4:27:e5:45:72:ed:45:d1:1c:2b:d8:4f:7f:
93:b9:c0:ba:98:cb:e9:6e:28:1a:3d:f4:c1:27:f4:bc:c0:dd:
d0:dc:6a:fd:db:f0:e1:ac:1b:7b:8b:58:32:d2:7c:9a:50:90:
e0:1a:b8:51:02:ff:f1:b4:52:3c:b8:54:4e:de:91:5e:01:0b:
4d:1f:dc:1b:c9:69:b8:52:86:61:36:0b:d4:7a:ec:b0:8d:aa:
e1:98:0f:c0:97:2e:69:89:4b:c1:64:e7:04:69:eb:96:52:7c:
db:62:8f:f0:21:5d:da:97:db:d4:f3:aa:80:41:f2:b9:9f:4a:
b4:39:45:94:72:7d:82:23:96:c7:42:89:a6:d7:25:a1:18:4f:
07:e7:9d:76:8d:06:1f:05:2c:fe:69:96:c9:c3:ff:dd:ad:1d:
2e:46:18:00:cc:d0:7c:53:f6:93:e3:50:d7:f4:7a:36:e9:f2:
52:38:d6:95:77:4e:17:41:4c:09:ad:fa:5b:cd:4c:ec:1b:bc:
33:f9:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 06:45:30 2026 by rpki-client