Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22653.roa
File: AS22653.roa (raw, json)
Hash identifier: aeSRVyYyqs/3FX0cOyBaL0qVp/GlspGJpHktT209QMs=
Subject key identifier: C9:59:88:E4:15:7D:66:0B:DE:04:40:EE:20:4A:2B:96:53:C4:0F:F9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 01BFE8726A175F7CC3B8E52970997325EF1CEEC9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22653.roa
Signing time: Tue 21 Apr 2026 07:01:46 +0000
ROA not before: Tue 21 Apr 2026 06:56:46 +0000
ROA not after: Tue 20 Apr 2027 07:01:46 +0000
asID: 22653
IP address blocks: 84.75.236.0/22 maxlen: 22
84.75.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bf:e8:72:6a:17:5f:7c:c3:b8:e5:29:70:99:73:25:ef:1c:ee:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 06:56:46 2026 GMT
Not After : Apr 20 07:01:46 2027 GMT
Subject: CN=C95988E4157D660BDE0440EE204A2B9653C40FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:3f:83:79:5e:8a:11:31:04:a8:73:a4:05:
24:80:fa:34:43:a5:d8:d9:90:9d:27:22:23:df:fb:
21:d2:4e:4a:e0:cc:a9:65:8f:a5:00:d4:70:f2:35:
15:da:30:b7:bf:8d:fe:04:37:ff:d2:85:b1:58:75:
14:f2:d0:68:da:f4:8e:84:2d:f5:ab:c1:db:58:66:
ec:7f:b8:55:62:a3:a4:b4:ad:1f:8f:5a:e0:22:2e:
ec:9d:fd:a5:d7:6b:a4:d9:80:18:9e:bf:a8:65:5b:
c2:8d:66:ee:69:f2:3b:53:a9:9e:7d:8a:da:dd:5d:
3d:f8:af:c5:f3:5f:2f:f8:c0:11:83:f2:87:54:62:
e2:e4:0d:56:89:80:2d:21:d8:7b:99:fd:84:f2:30:
3c:ff:a2:8e:cf:11:e9:b1:8d:13:15:6e:d2:4e:10:
81:d3:4d:7a:ab:2e:79:72:b4:4f:46:9e:8c:95:e2:
a6:2b:7d:78:b1:d3:48:4a:1e:ad:a3:35:f9:c1:4d:
94:6e:bf:db:98:69:bd:e8:77:78:7e:5b:32:0d:18:
23:21:bd:80:90:7b:bf:56:c1:d7:f1:e1:49:37:8e:
44:29:cf:f1:9d:ce:44:b7:c4:da:c3:b7:20:0e:3d:
ea:79:e4:42:97:10:23:55:43:cc:0e:9e:4f:c3:bc:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:88:E4:15:7D:66:0B:DE:04:40:EE:20:4A:2B:96:53:C4:0F:F9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.236.0/22
84.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
27:b5:cc:84:52:ea:4d:85:27:b8:5d:d0:6c:cb:c0:0c:27:d6:
47:fe:4f:d3:ab:9b:5d:d1:41:ac:db:a2:d2:ea:0a:6b:ca:6f:
28:38:f0:e2:e5:f1:38:e7:33:0c:8d:36:aa:e8:01:4f:0d:05:
6c:52:b2:ec:f1:61:b1:d1:fb:53:c7:ad:55:0f:01:f0:50:df:
c8:23:33:79:78:16:c1:14:29:91:3a:a0:80:66:85:44:35:84:
1c:ba:b5:ca:ed:f1:14:ad:41:72:14:14:1f:91:05:87:b8:b1:
03:33:ed:3d:e2:a8:e8:cc:c2:db:42:e6:82:0c:b9:f5:cf:93:
bb:bc:68:e7:cb:97:fb:e0:13:40:ac:3a:77:32:e0:76:cd:67:
3f:8d:c1:f2:3e:ed:8d:ab:d1:51:67:30:82:ab:d1:bb:a3:1c:
db:9f:08:83:ff:9b:d3:47:c7:38:c6:e4:72:78:80:7f:04:d7:
f0:8e:df:e8:83:85:a2:d6:63:36:05:2c:fc:37:40:61:f0:32:
6d:89:1c:85:38:29:5e:9f:d7:4a:22:e4:96:fc:71:62:75:8b:
73:6f:76:6f:2c:84:71:52:60:88:dd:8d:bb:69:a5:19:0c:4e:
a2:4f:48:94:18:d7:ab:dc:44:da:1c:21:e5:0c:63:ae:8a:06:
41:d5:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:46 2026 by rpki-client