Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: NohXFtWsk86qjHcqRqsZCi3F5I0Jxsly/zLEF1YPcTk=
Subject key identifier: 54:23:1C:24:E5:60:27:4F:CA:1A:C1:CE:86:EE:C6:14:1C:56:97:3D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 305D2DC042316677A7874207F37C7F7C0A22D04A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22773.roa
Signing time: Thu 26 Mar 2026 23:39:10 +0000
ROA not before: Thu 26 Mar 2026 23:34:10 +0000
ROA not after: Thu 25 Mar 2027 23:39:10 +0000
asID: 22773
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5d:2d:c0:42:31:66:77:a7:87:42:07:f3:7c:7f:7c:0a:22:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 26 23:34:10 2026 GMT
Not After : Mar 25 23:39:10 2027 GMT
Subject: CN=54231C24E560274FCA1AC1CE86EEC6141C56973D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:fa:27:a9:92:63:a3:c6:e1:9d:24:73:d2:
05:c4:3c:6a:20:a7:aa:ba:58:b8:83:c5:a4:47:42:
35:b3:e3:6e:46:0f:e2:79:06:79:32:c5:75:17:60:
e7:f0:30:5d:1c:a5:8a:96:a3:1e:a7:9a:f5:3c:83:
dd:b3:f0:b4:b5:29:d9:e9:86:8a:9a:ed:8d:10:6f:
eb:36:0d:65:82:bb:a6:0f:ca:2b:0c:06:8a:db:34:
5c:23:9e:90:fd:7c:8b:9b:a0:01:5a:f8:1f:f1:40:
0e:62:50:6d:84:a1:41:83:4b:f7:eb:c4:98:0c:02:
d6:bb:f2:cb:04:dd:2e:95:a9:a8:9f:8b:80:56:a9:
a4:0e:06:e8:9c:f6:c2:8b:b2:15:9b:fd:ab:e1:e4:
d0:f0:bb:7c:c6:45:d1:6d:d3:f1:74:6d:6b:7a:81:
47:91:ea:91:74:13:77:b1:87:66:f2:a2:d0:4d:4e:
99:6f:f3:11:e4:d1:a4:5d:04:8b:09:8e:2a:31:56:
92:46:84:6c:24:42:32:35:01:30:05:8f:93:01:65:
df:96:99:20:cc:11:0a:9d:d7:ad:17:55:5c:68:03:
54:12:92:ab:67:58:fc:68:78:9a:b3:84:7d:24:55:
cd:f7:0f:12:fd:37:8b:77:9d:8a:c6:83:2a:92:34:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:1C:24:E5:60:27:4F:CA:1A:C1:CE:86:EE:C6:14:1C:56:97:3D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.207.255
162.141.216.0-162.141.255.255
167.148.16.0/21
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:ec:4e:40:d7:ba:e4:92:1d:51:9d:9a:34:43:3c:de:ae:97:
6f:4d:bc:64:66:38:bc:ad:b0:b8:d1:49:58:f3:59:58:94:69:
82:5a:42:76:8c:4f:7d:00:9e:c6:4f:72:96:e0:5c:42:7e:93:
a3:28:21:c3:60:f7:f8:ee:a3:c4:5f:29:59:0a:92:e1:94:7a:
6e:2e:34:98:a0:60:5b:73:be:43:3d:19:06:04:2a:1c:20:95:
87:85:6a:57:b8:71:85:3b:21:57:34:43:5c:82:12:b3:72:a1:
28:07:07:91:30:d7:da:81:f1:aa:2a:38:c9:2d:89:6b:d9:22:
b6:42:1e:6f:bb:21:0b:10:aa:5c:a1:77:1b:68:1f:20:c7:5b:
4d:71:e9:27:a3:e8:1d:11:cb:cd:12:b0:14:ed:fc:f6:62:df:
48:26:08:a1:84:c9:6a:61:6a:ac:6d:7c:d1:5f:2f:a2:9f:8d:
5a:18:34:19:dd:5c:db:de:e2:50:a9:f3:d9:40:31:0a:60:ad:
0b:84:31:59:75:61:be:d1:70:72:14:55:23:b5:e2:bf:04:39:
15:e2:12:5b:4a:28:fa:11:a0:fd:70:43:f9:0f:e3:97:89:1d:
47:ef:49:d4:80:eb:2d:4a:a3:a1:09:da:fd:72:d0:5a:71:07:
bc:f7:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:47 2026 by rpki-client