Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22381.roa
File: AS22381.roa (raw, json)
Hash identifier: jtsOsJMYYorYdSMxuOEoQH2dPVLGVjl9J25K1NXrTa0=
Subject key identifier: 73:25:56:EE:D7:BE:1A:12:35:B8:B4:87:48:14:2F:1B:25:C4:C8:06
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 39EF1B72C819127C2754D5934EA05E31B9A18B49
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22381.roa
Signing time: Fri 20 Mar 2026 17:04:38 +0000
ROA not before: Fri 20 Mar 2026 16:59:38 +0000
ROA not after: Fri 19 Mar 2027 17:04:38 +0000
asID: 22381
IP address blocks: 141.11.72.0/23 maxlen: 23
141.11.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ef:1b:72:c8:19:12:7c:27:54:d5:93:4e:a0:5e:31:b9:a1:8b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 20 16:59:38 2026 GMT
Not After : Mar 19 17:04:38 2027 GMT
Subject: CN=732556EED7BE1A1235B8B48748142F1B25C4C806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:1f:70:92:88:a2:43:3d:9c:33:aa:55:4f:
87:d1:71:08:a0:f5:98:00:a2:5b:21:a3:f8:d2:08:
8b:d6:85:21:78:42:8a:be:bd:7e:59:f5:20:8b:e2:
58:27:f3:d2:9f:fe:d6:7b:95:12:0f:e8:44:9a:22:
d5:19:bf:5b:39:ef:09:f7:c0:b8:cf:72:d7:d2:c1:
41:ec:7f:a1:da:53:f8:08:b0:af:15:e7:78:4e:ef:
09:ee:7b:bc:80:7c:c7:8e:70:d5:67:53:e2:2f:ea:
e1:53:e1:32:89:e6:19:d3:32:3b:78:91:75:16:f2:
82:dc:33:96:6f:c7:8e:3f:7e:77:f2:b1:5e:0a:a3:
61:d4:2f:56:4c:ee:2f:d5:3a:9b:b6:77:f6:d0:4b:
16:8d:48:09:b6:b6:48:01:e9:d9:4a:c3:ee:cf:7c:
0f:43:b4:93:b0:70:f2:1d:74:07:62:6e:51:76:cd:
55:12:dd:b6:53:ac:42:88:5b:ed:ec:72:31:c0:30:
5f:91:85:d4:42:a7:f5:c8:40:d0:31:c4:51:e4:0d:
be:7b:c1:a4:3c:6f:b0:25:4f:d5:6e:38:ea:b8:43:
ed:37:f4:6e:1c:8e:76:61:47:a5:73:c2:e1:b4:93:
16:5b:f0:da:ee:d6:f7:01:d0:2c:ec:8b:a0:bb:84:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:56:EE:D7:BE:1A:12:35:B8:B4:87:48:14:2F:1B:25:C4:C8:06
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22381.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.128.0/23
Signature Algorithm: sha256WithRSAEncryption
51:16:65:3b:fb:ae:52:0f:3d:62:3a:6b:40:54:49:4d:c7:d4:
c4:43:49:e3:7d:fe:c8:a9:8b:69:fa:54:7c:eb:3f:e4:77:ab:
aa:46:a8:fa:b9:2c:e0:5c:2f:b6:78:23:42:3a:58:ea:f1:43:
46:23:fb:44:d7:9d:65:67:c6:f4:7f:fa:26:b7:26:49:6c:e9:
19:8a:cb:2f:1a:46:4a:3e:75:5d:9f:bc:cc:2b:4b:e6:68:29:
c7:e1:3b:f7:e0:81:4a:ba:5b:be:04:7e:bf:0c:fd:4b:22:2e:
82:93:61:a0:52:87:3e:09:ba:8f:3d:26:a1:ee:28:f3:cd:22:
21:ed:64:17:22:08:c8:dd:51:28:ea:85:ad:21:2a:2f:1f:64:
8e:07:66:f7:94:03:fd:8c:1d:4f:4f:53:17:e7:5a:72:ba:a8:
85:33:56:3f:17:cd:68:3c:2e:43:09:f7:60:ae:3f:90:24:49:
d1:59:dc:d7:4f:ca:a2:1d:8e:6d:e3:f2:b9:28:7e:ab:e1:8c:
96:88:e8:be:d2:9b:94:2d:8d:d8:44:52:55:e0:33:ac:e3:a7:
5e:83:94:f6:d0:bd:eb:f4:82:46:2a:e6:47:13:da:4d:5b:2b:
fa:b5:33:a6:ba:5a:0e:f2:b5:01:f9:15:54:6a:05:61:a4:6d:
e1:ea:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:29:34 2026 by rpki-client