Signature Verification

General information

The signature verification service is a web application, which can be used for verifying electronic signatures without installing dedicated software. Signatures complying with the internationally standardised formats XAdES, CAdES, PAdES, XMLDSIG and CMS are supported as well as the formats formerly utilised in Austrian e-government applications (e. g. PDF-AS).

Depending on the browser configuration, the user interface is displayed in English or German language.

For confidentiality purposes, RTR offers this service only by means of encryption.

Should you encounter any problems, please contact signatur@signatur.rtr.at.

Method

For verifying an electronic signature, select the signed file in the form signature verification and press the button "verify". As a result, you get a verification protocol consisting of two information blocks.

The first information block contains details about the signed file:

  • the file name,
  • the hash function (a cryptographic checksum),
  • the file size, and
  • the type (the signature format).

The second information block lists the signatories of the signed file. On the right-hand side, there are three columns ignature value (S), certificate (C) and manifest (M). The electronic signature is valid if all columns are green or if each column contains "OK".

By clicking on the name of a signatory, information on the certificate of this signatory is displayed. Under certain circumstances a looking-glass is displayed behind the name of the signatory. By clicking on the looking-glass, the signed data are displayed in a separate window.

Processing of national trusted lists

Validation of a qualified certificate is possible only if the country from which the certificate originates maintains a Trusted List recognised in the European Union (i.e., currently the Member States of the European Union and the signatories of the Agreement on the European Economic Area) and if the Trusted List can be processed technically. This is impossible if e.g. the Trusted Liste does not comply with the applicable XML schema or if the signature of the Trusted List cannot be verified. In such a case the qualified certificate may still be valid but has to be verified in a different way.

When verifying a qualified certificate, one should keep in mind which Trusted Lists have been processed correctly.

Supported formats

Currently, the following document and signature formats are supported:

  • X.509 certificates
  • CAdES
  • XAdES
  • PAdES
  • ASiC
  • CMS
  • XMLDsig
  • PDF ("Adobe signature")
  • PDF-AS ("official signature")
  • BDC hotSign
  • IT Solution trustDesk