Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: MFcB2Zw/FZNKGvfIqGS0U1qF6zvfYZwBhV5MBp1/Njo=
Subject key identifier: 81:11:E4:8A:CE:15:39:CB:47:73:1E:F4:20:B1:2E:B1:4D:AF:70:30
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 47819DD4E5656A845AD1A356CE4304FB8CD0D72B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22427.roa
Signing time: Wed 22 Jul 2026 02:08:50 +0000
ROA not before: Wed 22 Jul 2026 02:03:50 +0000
ROA not after: Wed 21 Jul 2027 02:08:50 +0000
asID: 22427
IP address blocks: 91.124.128.0/24 maxlen: 24
95.134.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:81:9d:d4:e5:65:6a:84:5a:d1:a3:56:ce:43:04:fb:8c:d0:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 22 02:03:50 2026 GMT
Not After : Jul 21 02:08:50 2027 GMT
Subject: CN=8111E48ACE1539CB47731EF420B12EB14DAF7030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:b2:da:31:ad:d3:7d:67:89:96:07:ba:4b:
37:0b:93:c6:01:ad:a0:e7:e9:18:6c:c4:46:46:de:
3a:fb:69:1e:00:3e:2e:9e:4e:68:7e:6c:e2:d1:d5:
98:e1:ff:c1:18:92:2e:8f:ed:0d:56:4f:8a:a1:e3:
08:49:ac:46:d3:cf:ed:e3:65:29:85:51:12:51:0f:
ea:b3:51:db:d2:44:1d:d7:8f:d0:6a:e5:9c:b8:45:
cd:f9:6e:41:14:d8:61:6f:03:75:05:1c:85:f6:ec:
2f:1b:08:a9:97:37:17:36:e2:be:09:ca:dd:35:a3:
d1:db:1e:23:11:cb:0d:0a:c5:95:13:81:c3:49:dc:
29:6e:77:6e:0f:e7:28:7c:fb:58:6c:4b:cb:29:21:
c2:f0:6e:51:78:c3:e7:e7:28:b1:a6:ca:6c:49:6c:
0d:b8:3f:ef:a5:3d:7f:e1:c7:5c:e4:f0:69:38:25:
ca:06:d1:fb:3c:c2:04:9e:41:49:cf:5e:cb:d8:24:
18:42:3a:e4:13:ae:34:bb:43:55:42:79:03:44:f2:
41:f1:63:9a:60:2c:9b:39:7e:36:e6:da:2b:06:1f:
5d:9a:e4:8c:40:a1:27:57:29:ec:62:80:20:83:7f:
98:59:5d:02:dc:f6:52:67:9c:92:47:a1:6b:c0:2a:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:E4:8A:CE:15:39:CB:47:73:1E:F4:20:B1:2E:B1:4D:AF:70:30
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.128.0/24
95.134.153.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fd:96:6e:8f:e2:57:bd:e6:31:c6:f1:18:cd:b7:c3:b7:f0:
89:68:a3:e4:ae:75:22:e6:40:f6:11:7e:79:77:d9:e0:bd:66:
d2:0d:17:bf:36:45:af:8a:31:44:55:c8:41:25:19:d2:96:da:
e0:87:fe:9f:a1:35:d3:e6:63:c9:fe:28:fb:7e:8d:c7:b2:85:
f8:13:1b:b3:00:8e:fb:0f:f6:24:d7:21:77:9a:28:08:47:84:
a8:90:39:40:9c:45:2d:d8:ff:1a:a1:24:52:58:05:76:fa:f1:
d5:89:6a:af:ea:e4:8d:cf:a1:49:5b:a0:9e:30:72:ae:f5:e2:
b9:24:ab:2c:c0:cb:da:15:27:d6:d7:77:91:35:82:54:2c:33:
51:3a:59:76:0f:84:96:d0:3d:a9:1a:c3:60:e1:0d:bc:43:25:
7b:13:49:8b:dc:76:4e:fe:b2:a5:5f:63:78:1b:85:d5:08:f3:
e9:44:dc:65:fc:85:9b:df:9b:c4:f7:fb:5c:b3:0b:cf:49:79:
05:df:6d:eb:9e:dd:c1:d0:48:03:4f:4a:e3:83:62:d3:45:28:
94:78:e1:c0:66:e7:bb:07:b0:c6:42:1b:70:9e:75:17:38:bb:
0d:7e:9d:3f:5a:d2:e6:18:1f:0b:ad:ad:54:7a:cc:8b:dd:5f:
0f:14:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:46 2026 by rpki-client