Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: WDz1Z1kQHnJQpg4uor+qSuD/84TGvXm7voR1nZd1JN4=
Subject key identifier: BA:7E:A6:13:FC:6F:E9:F6:2A:31:55:36:70:CB:1C:50:49:AA:35:9D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 05DA1DBBD1A3C67AA4576B2A210EEEE59C0B9ACC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22427.roa
Signing time: Fri 27 Jun 2025 09:50:40 +0000
ROA not before: Fri 27 Jun 2025 09:45:40 +0000
ROA not after: Fri 26 Jun 2026 09:50:40 +0000
asID: 22427
IP address blocks: 91.124.128.0/24 maxlen: 24
178.94.160.0/24 maxlen: 24
178.94.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:da:1d:bb:d1:a3:c6:7a:a4:57:6b:2a:21:0e:ee:e5:9c:0b:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 27 09:45:40 2025 GMT
Not After : Jun 26 09:50:40 2026 GMT
Subject: CN=BA7EA613FC6FE9F62A31553670CB1C5049AA359D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:61:a2:49:27:fc:05:b6:1b:a2:1b:2e:49:
c1:f0:fd:83:5b:86:b7:51:3b:98:61:7a:32:83:03:
2f:4b:a7:0e:f4:e8:9f:9e:33:ae:dc:90:ad:3d:7c:
20:94:59:61:36:ed:64:6c:89:49:32:82:9b:c3:bf:
8e:c6:ae:48:a0:db:5a:dd:27:b6:4b:78:c5:ce:68:
7c:55:d7:6f:9a:4c:22:ef:ed:72:40:00:b5:e4:cf:
01:0d:ef:42:39:fb:0f:d5:0d:ea:f0:29:be:ce:df:
f6:89:2e:4e:c9:0f:28:ab:14:73:0d:c1:e0:d8:bd:
a6:39:4a:da:99:c6:24:fc:80:44:f6:fe:bb:a6:62:
49:1b:f0:97:49:94:31:69:77:c2:57:7a:1d:40:23:
32:19:05:a4:e7:7c:bd:72:5d:bc:ca:00:2c:19:6e:
f6:76:a5:98:17:d0:4d:67:c7:ca:24:4b:89:26:87:
7e:ee:7f:33:ad:2f:65:03:be:ce:ab:ff:ef:4f:4d:
c7:6a:2d:23:af:44:7a:61:15:01:e5:42:5a:b1:26:
5a:93:0b:e2:06:50:77:79:e8:05:dc:5c:29:f4:cd:
4f:0c:1f:ae:5e:ca:27:d9:62:6f:68:f2:76:e1:21:
ec:b1:ca:df:18:c4:72:12:a5:17:e9:63:dc:18:b9:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:A6:13:FC:6F:E9:F6:2A:31:55:36:70:CB:1C:50:49:AA:35:9D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.128.0/24
178.94.160.0/24
178.94.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c0:a3:9d:96:c4:9e:98:a8:6e:cc:4f:a1:7f:97:6d:9a:b3:
10:18:9c:95:1b:9c:7f:9e:58:59:a9:ab:8a:16:7d:ae:e5:8d:
dd:dc:2a:24:b9:79:23:63:e7:29:f9:73:7b:28:2b:31:44:fe:
35:2e:e9:d0:ef:6a:66:60:2f:29:79:22:ee:dc:9d:0f:2f:02:
b8:04:be:f0:8e:19:9f:0a:7b:07:68:14:15:a5:f3:41:b0:53:
0e:ff:19:4f:4a:ac:98:9e:fb:f3:36:8a:3b:b1:76:52:a5:e0:
60:1c:0d:5d:46:e4:ff:0a:d9:8c:57:cd:13:01:3a:93:5b:ec:
44:6e:86:f9:57:34:20:fa:21:2b:d0:c3:57:57:e3:3e:1c:8e:
ee:02:6e:69:02:46:c8:8e:ce:db:bf:11:0a:19:91:cf:9c:07:
4c:aa:38:75:33:75:1a:63:f6:f4:27:1e:0c:5b:b3:07:31:5a:
1b:b2:36:b4:fe:27:5c:cc:f6:41:64:69:ff:b8:36:56:8f:b6:
1a:45:18:5b:c9:47:a5:ed:97:fb:02:4b:0a:78:1f:de:f3:59:
3d:a4:7e:56:b2:1c:59:68:de:05:a5:a3:f8:e1:d2:60:4e:31:
18:d6:ee:fd:72:c6:42:0a:eb:fd:cf:9d:5f:42:fa:38:bf:1f:
8e:a3:7b:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:55:30 2025 by rpki-client