Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: RJGucHbvpQVZmWUVS2SnxBoFbzUthXh9tfloALVZjgI=
Subject key identifier: 07:EF:4C:63:B9:3F:FD:E3:0D:B0:F7:0A:2D:80:75:95:A5:2E:F1:21
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A51451C8941F450E15B3843946411178BA01321
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22427.roa
Signing time: Fri 25 Sep 2026 00:06:23 +0000
ROA not before: Fri 25 Sep 2026 00:01:23 +0000
ROA not after: Fri 24 Sep 2027 00:06:23 +0000
asID: 22427
IP address blocks: 155.117.247.0/24 maxlen: 24
167.148.28.0/24 maxlen: 24
167.148.140.0/24 maxlen: 24
167.148.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:45:1c:89:41:f4:50:e1:5b:38:43:94:64:11:17:8b:a0:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 25 00:01:23 2026 GMT
Not After : Sep 24 00:06:23 2027 GMT
Subject: CN=07EF4C63B93FFDE30DB0F70A2D807595A52EF121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:6a:f3:c0:e1:51:44:02:7a:09:2c:46:2d:
ee:f6:1d:a2:87:94:d7:fb:17:49:e2:d5:39:e3:0b:
f4:8d:39:f5:a2:56:3a:cf:9c:19:b2:91:75:5c:98:
cc:10:c7:d1:85:6e:bf:b6:a1:ed:40:69:12:eb:29:
a9:89:15:00:eb:a0:da:19:b4:a6:15:fe:3a:a0:8c:
9c:8f:97:9c:7c:bc:9a:2c:7a:a9:5b:85:9a:d5:b5:
c4:4d:44:16:2b:35:25:d1:9a:43:5e:c6:62:5e:41:
9f:a7:7d:74:f2:86:c2:3e:42:28:ef:79:5c:5d:73:
c6:7c:2f:e7:6a:95:2b:ca:c7:8d:3f:78:e5:bc:04:
b9:cd:69:d0:21:7e:96:ac:3b:fc:f7:a9:c2:15:af:
d9:49:31:4f:b7:17:c4:f9:3d:96:8a:0b:3e:ca:73:
57:3c:28:c6:3e:1a:6d:cf:40:56:96:3b:53:8a:e9:
dc:30:e7:8b:6d:69:9a:2f:9e:65:bf:fb:e8:04:3b:
0f:b3:13:da:ad:e5:9a:7a:b0:af:1c:81:64:38:30:
e5:10:63:53:39:d9:77:bf:d9:80:2a:be:ad:46:22:
c4:e5:e1:43:d5:56:0f:eb:15:ac:0e:c5:f0:ae:6c:
41:ce:82:0b:67:17:6a:cb:13:04:2c:18:1d:d9:32:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EF:4C:63:B9:3F:FD:E3:0D:B0:F7:0A:2D:80:75:95:A5:2E:F1:21
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.247.0/24
167.148.28.0/24
167.148.140.0/24
167.148.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:74:85:49:f6:1e:f8:af:c2:78:75:37:a4:29:de:fd:01:cd:
3a:97:b8:80:27:a7:3f:87:a9:b2:69:e9:4e:71:9c:3e:c5:76:
2f:4b:55:45:b3:fc:50:71:f7:0f:c1:e9:2b:8c:fe:92:3d:fd:
38:73:b3:f7:89:9b:b5:2c:46:f3:5d:08:d1:3c:64:27:29:88:
85:b0:64:9c:7b:0c:0a:b4:74:c9:68:4f:af:83:c2:dd:c4:4b:
a6:ca:07:88:7b:37:ec:5d:93:5b:04:e0:51:77:9f:25:cd:76:
57:07:8a:9a:c7:98:1e:53:08:11:f1:63:3c:2d:f7:e9:94:99:
3c:08:80:31:9f:c1:56:2f:fa:cd:bb:6f:0d:d7:0e:e7:7b:ad:
b7:0e:72:7f:26:66:d7:25:f8:d4:c3:f0:42:aa:9d:c9:03:51:
0d:bc:f2:f1:ac:15:f6:82:54:ea:dc:b1:ff:6b:04:d4:da:94:
33:a1:d8:7b:26:60:88:ff:a5:b9:5e:e9:5e:fc:ef:1e:2a:de:
3d:ac:87:a3:8d:23:88:9d:db:41:d8:62:0c:b7:ff:91:8d:a6:
3e:14:ba:39:93:c2:a0:3c:a4:87:f6:19:54:de:3e:42:81:45:
e2:82:8c:7f:cd:be:02:38:16:b7:31:18:3c:a8:c5:6a:66:13:
7f:b4:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:33:36 2026 by rpki-client