Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: 0TlUC+a21otHmlgSwtSVyCecWVc/gSqzbuu10ZTYLmE=
Subject key identifier: F5:E7:61:8C:9B:6C:D9:FB:0F:12:C7:1C:C1:F1:58:39:19:BB:28:F4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5BAC3D43ABDBCFADADF8F4C131F176FB98DAD2AC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
Signing time: Sun 08 Mar 2026 02:11:46 +0000
ROA not before: Sun 08 Mar 2026 02:06:46 +0000
ROA not after: Sun 07 Mar 2027 02:11:46 +0000
asID: 22427
IP address blocks: 82.22.195.0/24 maxlen: 24
178.83.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ac:3d:43:ab:db:cf:ad:ad:f8:f4:c1:31:f1:76:fb:98:da:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 8 02:06:46 2026 GMT
Not After : Mar 7 02:11:46 2027 GMT
Subject: CN=F5E7618C9B6CD9FB0F12C71CC1F1583919BB28F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:5c:a3:ea:d9:4e:17:9c:48:ff:e8:36:86:
a1:34:f3:c6:9c:4e:37:f4:da:39:3d:6e:54:d9:af:
f3:b8:c7:3b:cd:69:35:f2:ca:62:ee:97:43:4b:fe:
aa:00:ff:12:75:98:0d:0d:5e:2e:2b:ae:52:2c:c9:
d1:0b:04:80:73:4d:d8:b3:f9:a2:0d:66:89:ab:7a:
41:3c:42:a3:36:f6:96:5b:40:ea:d2:7b:4e:d8:21:
73:aa:4d:df:5d:0a:3c:7d:87:18:e4:f0:04:fd:e9:
22:f6:74:0a:5f:9a:63:35:42:56:2e:45:7d:cc:b5:
a7:34:f9:36:47:5d:db:c0:db:46:f7:fc:dd:bf:3d:
34:5d:96:6e:94:24:c1:b8:a3:8f:9a:3e:28:7d:46:
1f:ab:6b:b4:ce:1a:df:e3:66:18:c2:31:35:08:74:
f2:d2:31:e7:e2:49:20:7a:f5:21:e6:57:f2:4c:73:
c3:5c:0e:71:42:f0:40:c9:89:e7:87:47:30:50:62:
27:9a:23:55:3b:d7:60:06:bb:7c:7a:e3:2b:54:03:
04:26:d6:39:f7:6a:d2:a2:c0:9e:ac:c9:5d:9e:c9:
07:c9:fe:04:90:e1:2f:40:68:51:10:e8:d5:0d:8a:
ec:01:1b:55:e5:57:44:32:be:d4:ae:1b:06:45:25:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:61:8C:9B:6C:D9:FB:0F:12:C7:1C:C1:F1:58:39:19:BB:28:F4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.195.0/24
178.83.40.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4e:b5:31:f1:62:c5:4e:e4:b2:45:66:cf:ba:0e:95:7e:51:
18:aa:87:48:ab:b2:b0:f6:5e:4c:d5:53:c4:98:3a:bf:2e:c8:
1e:c8:c4:65:32:6a:90:1b:33:33:17:be:c8:8f:bc:8b:d5:2e:
4a:32:66:77:ff:1a:74:89:53:f0:9d:21:19:9c:34:bf:96:65:
5f:0a:55:04:61:12:f2:ea:48:56:c6:c8:0b:6b:07:a1:af:e1:
77:1a:42:06:b8:03:7a:1a:b5:54:25:71:01:0d:3b:42:ad:5f:
7f:09:35:51:ce:4c:4c:b1:61:7a:74:0d:1b:0b:56:96:10:81:
2b:a2:d9:d0:6d:f6:19:cf:6c:26:e5:57:b5:ba:03:20:16:d4:
f3:17:75:91:7a:2c:ea:b1:7a:2b:ba:da:27:e5:49:a7:35:69:
b1:15:6e:6b:39:7d:c6:fd:45:c4:1e:e0:60:8b:52:2d:d6:03:
53:4c:d4:5f:95:95:b8:85:1f:75:68:37:6c:c8:bd:b6:d4:a2:
73:8b:82:a2:35:43:88:09:f1:55:c8:dc:76:00:de:e6:62:d1:
14:8b:0b:44:d8:02:25:26:c9:2c:c1:6c:c5:f4:e3:5f:3a:3e:
8a:73:c3:a7:7e:e5:57:f5:f2:bc:93:d1:ee:6e:d2:3c:55:f3:
35:0e:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:19 2026 by rpki-client