Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: Mg4jo3oKGMkQYO7O9ALZsjHuGP+O+C6eh7Q0SX0J2Vg=
Subject key identifier: B4:F8:B2:EB:EC:2E:99:9F:B0:28:1B:B8:69:01:81:1C:05:53:FF:C3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 76F1DDEB2087D712F5FE6436D1A13CF13EC8A6EF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
Signing time: Tue 12 Aug 2025 00:00:16 +0000
ROA not before: Mon 11 Aug 2025 23:55:16 +0000
ROA not after: Tue 11 Aug 2026 00:00:16 +0000
asID: 22427
IP address blocks: 82.22.126.0/24 maxlen: 24
82.22.195.0/24 maxlen: 24
82.26.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f1:dd:eb:20:87:d7:12:f5:fe:64:36:d1:a1:3c:f1:3e:c8:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 11 23:55:16 2025 GMT
Not After : Aug 11 00:00:16 2026 GMT
Subject: CN=B4F8B2EBEC2E999FB0281BB86901811C0553FFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:ad:06:fc:ca:b5:ee:75:3c:1a:3d:66:39:
39:9e:45:76:8a:2e:94:cb:21:4f:8d:b6:26:7b:03:
42:d3:1b:6b:2e:ea:ee:a1:96:a2:1d:b8:39:f3:77:
20:99:16:a4:37:27:df:f1:4c:9c:57:f6:10:bd:bb:
6b:c6:94:37:1d:de:aa:53:eb:99:a3:51:ee:8d:36:
15:fc:85:39:0a:d0:03:e8:ae:1d:3c:52:2a:72:30:
9a:00:16:c6:43:03:f4:ad:c1:4a:41:e4:be:34:4c:
21:77:8d:06:c4:fc:c2:4a:94:de:48:c5:b2:4b:7d:
c9:ad:5d:96:7d:be:2c:c0:2b:fe:dd:f9:f0:17:c5:
32:e6:09:30:74:22:42:00:45:82:13:8b:e6:02:27:
ef:e7:70:9f:dc:33:c5:c8:88:a7:1b:c6:fd:a5:af:
5a:aa:50:38:1f:d8:d9:35:56:28:d6:66:57:55:fd:
0b:c8:35:32:24:c8:a8:38:ac:87:4e:97:32:10:6d:
2d:4e:d3:64:78:51:3f:12:da:b6:31:c7:7d:5e:0c:
2c:51:73:f5:f9:85:9d:87:44:56:cc:67:fd:03:8f:
0e:5a:e0:e5:ea:1b:40:c1:8f:e4:f1:97:7e:06:47:
c3:a8:49:7d:df:85:85:ca:8f:62:b5:f0:a8:53:96:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:B2:EB:EC:2E:99:9F:B0:28:1B:B8:69:01:81:1C:05:53:FF:C3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.126.0/24
82.22.195.0/24
82.26.131.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f5:43:3c:de:c2:c5:64:0f:48:1e:54:65:44:6f:d0:d6:1f:
66:5f:36:37:b6:70:37:ab:1e:93:9a:52:f5:8f:7a:ef:12:f4:
a6:53:b8:12:22:e6:f2:16:28:de:bc:98:f5:37:45:7e:3b:7e:
7e:ed:66:48:bd:13:eb:f5:59:ac:5b:87:ee:f4:35:e4:e3:ac:
b9:7a:63:ce:2f:0d:f5:e1:31:89:2f:e1:78:67:70:6b:dc:02:
8c:d5:44:96:22:b2:6b:ce:6a:7b:ce:8c:23:71:27:9d:6d:a4:
96:b0:ea:54:f5:0a:85:23:bb:a6:dc:e3:a9:80:bd:03:e3:af:
ed:dc:59:1a:25:f9:68:17:51:70:06:eb:8b:db:e5:36:ec:6a:
76:c4:ea:52:ec:3d:c7:24:63:74:99:ab:ee:89:c5:f5:08:9e:
f8:84:b7:d3:26:ca:92:d0:0e:85:cb:1b:d3:4e:33:ad:50:a2:
56:6f:da:82:de:c2:25:9f:ff:52:81:34:a1:ec:98:51:f7:dc:
3e:e0:75:04:3a:2c:da:57:46:3b:10:59:6c:a3:8d:f0:3c:88:
67:02:d8:0f:c5:42:13:39:50:2b:ea:02:ae:3b:b0:05:45:05:
ca:9c:8d:47:bc:5a:1d:2d:72:1f:03:da:b6:bc:1b:6a:8d:df:
a9:02:68:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:42 2025 by rpki-client