Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: z2sS/wVb9utvOzNVEXhAsdffyqowLpM9Yfch8t8UcMc=
Subject key identifier: E4:03:E9:1C:92:B8:A5:B8:ED:72:4A:C8:11:5C:15:1D:E0:C8:55:C1
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7511A0F4DE3DF267A5627F7E66C572A9B1CA59CF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa
Signing time: Mon 23 Mar 2026 14:24:20 +0000
ROA not before: Mon 23 Mar 2026 14:19:20 +0000
ROA not after: Mon 22 Mar 2027 14:24:20 +0000
asID: 22427
IP address blocks: 141.11.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:11:a0:f4:de:3d:f2:67:a5:62:7f:7e:66:c5:72:a9:b1:ca:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 23 14:19:20 2026 GMT
Not After : Mar 22 14:24:20 2027 GMT
Subject: CN=E403E91C92B8A5B8ED724AC8115C151DE0C855C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:20:24:09:42:62:33:e3:1b:98:a6:96:d7:
d2:0a:37:39:66:32:f7:9d:68:6e:74:13:e7:8a:6f:
50:9c:f3:80:1b:39:f8:b4:12:3c:9f:9a:49:18:20:
42:7b:b8:67:14:e1:55:db:0a:0c:66:f9:3b:39:2c:
9e:34:f2:17:37:ce:3e:48:89:3e:9e:a5:65:61:f2:
f5:8b:20:43:7b:30:40:bb:f8:3a:f7:56:ed:8a:05:
25:d4:dd:73:9b:99:12:26:44:4b:14:36:99:11:87:
27:36:37:72:63:55:4b:de:3a:b6:78:34:f7:9a:7d:
ed:68:13:84:d1:b8:73:71:9c:44:f0:65:2a:f4:7e:
16:3e:91:a6:d6:c9:46:83:d2:47:42:6d:65:9a:d8:
1f:99:18:a7:76:fa:47:3b:6b:16:fd:e2:26:09:c3:
92:cf:62:af:f1:6e:1c:0a:b1:2e:9e:a6:f6:bc:0e:
fa:3f:4f:54:6d:e5:3d:26:9c:45:34:12:78:dd:53:
79:09:4c:f7:6a:a7:e1:e6:f7:e4:07:29:ad:d4:d5:
3e:ad:8d:c0:7b:c4:a4:b3:5a:02:b6:ef:00:8f:89:
0a:d5:90:35:4c:be:8c:2e:29:4e:80:42:a5:62:ea:
0e:2b:00:ea:31:90:e0:0e:2f:99:2a:ff:6a:a1:53:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:E9:1C:92:B8:A5:B8:ED:72:4A:C8:11:5C:15:1D:E0:C8:55:C1
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b9:0e:23:c4:1d:63:3b:cb:13:45:4d:b4:0a:f4:48:b6:e8:
99:2c:39:5f:b1:9c:8f:55:bf:e9:7c:4f:8d:78:49:23:26:5b:
23:9e:05:81:c3:1d:63:04:7f:53:5b:20:5b:7e:f0:d0:d2:01:
29:1d:69:35:49:5b:d9:16:34:29:3b:bb:bf:85:87:e3:57:d6:
8a:f5:a2:94:2c:6e:81:92:65:a4:c5:14:51:bc:32:ce:c1:f8:
1c:30:29:f5:7b:f1:3f:93:50:02:02:65:82:70:48:82:cf:6e:
ca:cb:79:4c:36:d2:6e:e3:e9:02:5a:45:1b:51:f0:6e:73:9b:
92:ce:f1:6c:fa:6c:c5:49:28:b3:5d:3f:bc:d9:e4:57:61:5c:
b1:47:cf:07:85:2d:c0:90:a7:ed:a3:ef:a8:89:2f:20:df:db:
95:94:71:2e:65:8f:a0:8a:b9:f6:27:1b:05:51:88:ca:c2:a8:
b0:83:82:46:74:fd:a7:6c:f4:5f:40:4c:35:c4:62:54:75:33:
81:f3:c4:80:5e:31:59:1d:fc:54:78:94:19:6c:d4:72:66:4b:
e9:27:fd:c3:74:86:f7:4b:e0:15:a5:b4:0a:88:a3:b7:53:41:
67:35:44:71:a8:d8:ac:c7:dc:bc:a5:a7:fc:4e:53:9c:28:e1:
4c:9e:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:56:47 2026 by rpki-client