Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: U1q0TybEYeXgTw6uKd6kOWdUCeNkhTbXbTRfVFUjPhs=
Subject key identifier: 5F:A7:6A:C7:9D:06:3B:75:BD:30:F6:CB:E5:71:10:55:A9:92:D0:E6
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 1220581525E6388A5825CD90E2BB5EE56271F3E3
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS22773.roa
Signing time: Thu 13 Aug 2026 06:51:48 +0000
ROA not before: Thu 13 Aug 2026 06:46:48 +0000
ROA not after: Thu 12 Aug 2027 06:51:48 +0000
asID: 22773
IP address blocks: 5.151.50.0/24 maxlen: 24
5.151.76.0/24 maxlen: 24
5.151.85.0/24 maxlen: 24
5.151.86.0/24 maxlen: 24
5.151.87.0/24 maxlen: 24
5.151.97.0/24 maxlen: 24
5.151.98.0/24 maxlen: 24
5.151.99.0/24 maxlen: 24
5.151.107.0/24 maxlen: 24
5.151.110.0/24 maxlen: 24
5.151.111.0/24 maxlen: 24
5.151.138.0/24 maxlen: 24
5.151.149.0/24 maxlen: 24
5.151.164.0/24 maxlen: 24
5.151.165.0/24 maxlen: 24
5.151.175.0/24 maxlen: 24
5.151.213.0/24 maxlen: 24
5.151.223.0/24 maxlen: 24
5.151.235.0/24 maxlen: 24
5.151.242.0/24 maxlen: 24
5.151.244.0/24 maxlen: 24
5.151.245.0/24 maxlen: 24
5.151.247.0/24 maxlen: 24
5.151.249.0/24 maxlen: 24
5.151.250.0/24 maxlen: 24
31.220.229.0/24 maxlen: 24
31.220.244.0/24 maxlen: 24
37.203.143.0/24 maxlen: 24
37.203.149.0/24 maxlen: 24
37.203.179.0/24 maxlen: 24
37.203.187.0/24 maxlen: 24
37.203.188.0/24 maxlen: 24
46.33.4.0/24 maxlen: 24
46.33.5.0/24 maxlen: 24
46.33.21.0/24 maxlen: 24
46.33.28.0/24 maxlen: 24
95.175.128.0/24 maxlen: 24
95.175.129.0/24 maxlen: 24
95.175.130.0/24 maxlen: 24
95.175.140.0/24 maxlen: 24
95.175.151.0/24 maxlen: 24
109.175.129.0/24 maxlen: 24
109.175.130.0/24 maxlen: 24
109.175.138.0/24 maxlen: 24
109.175.140.0/24 maxlen: 24
109.175.147.0/24 maxlen: 24
109.175.151.0/24 maxlen: 24
109.175.152.0/24 maxlen: 24
109.175.176.0/24 maxlen: 24
109.175.181.0/24 maxlen: 24
109.175.207.0/24 maxlen: 24
109.175.212.0/24 maxlen: 24
109.175.223.0/24 maxlen: 24
109.175.250.0/24 maxlen: 24
109.175.251.0/24 maxlen: 24
109.202.228.0/24 maxlen: 24
109.202.248.0/24 maxlen: 24
109.202.253.0/24 maxlen: 24
130.43.138.0/24 maxlen: 24
130.43.142.0/24 maxlen: 24
130.43.153.0/24 maxlen: 24
130.43.157.0/24 maxlen: 24
130.43.158.0/24 maxlen: 24
130.43.164.0/24 maxlen: 24
130.43.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:20:58:15:25:e6:38:8a:58:25:cd:90:e2:bb:5e:e5:62:71:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Aug 13 06:46:48 2026 GMT
Not After : Aug 12 06:51:48 2027 GMT
Subject: CN=5FA76AC79D063B75BD30F6CBE5711055A992D0E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:37:99:00:c0:26:f6:54:c9:07:28:e2:82:
05:36:1e:30:e2:72:13:b8:99:ed:a2:91:b4:63:90:
de:50:f0:4d:e8:25:94:f2:28:fa:88:d1:76:46:6b:
d8:4c:c8:c1:69:30:d1:29:a9:e1:13:3f:e2:03:f2:
16:da:dd:ba:1e:07:b6:46:1d:c2:d1:24:ba:c2:16:
7e:d0:75:1c:6f:51:35:65:64:b9:46:bf:93:f6:52:
72:e0:47:bc:fc:f4:21:44:ac:38:13:a4:d9:3f:2e:
f8:dc:8e:9f:8b:21:6f:38:0b:fc:f8:78:a6:84:6d:
8a:33:dd:61:dc:48:8f:8a:b7:30:43:8a:0d:24:ea:
9e:28:2a:c1:28:05:28:e8:e1:4c:15:f1:36:b2:b6:
33:11:74:88:4e:7a:16:70:21:fb:63:ef:92:3e:ba:
be:38:2e:62:b9:74:48:c3:75:3d:75:97:b7:6b:af:
65:52:d6:da:07:89:87:07:c3:21:6d:8e:97:69:ed:
fa:56:76:71:ac:04:2d:3a:b8:15:c6:50:3d:12:ab:
d8:3d:cd:53:dc:5a:5f:1d:0e:11:8c:a8:78:9f:da:
d6:71:b5:ba:df:ac:fa:72:c5:7c:80:1c:f8:7c:ee:
4c:74:e7:7e:c8:b1:2b:78:dd:7d:48:ad:ad:ab:93:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:6A:C7:9D:06:3B:75:BD:30:F6:CB:E5:71:10:55:A9:92:D0:E6
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.151.50.0/24
5.151.76.0/24
5.151.85.0-5.151.87.255
5.151.97.0-5.151.99.255
5.151.107.0/24
5.151.110.0/23
5.151.138.0/24
5.151.149.0/24
5.151.164.0/23
5.151.175.0/24
5.151.213.0/24
5.151.223.0/24
5.151.235.0/24
5.151.242.0/24
5.151.244.0/23
5.151.247.0/24
5.151.249.0-5.151.250.255
31.220.229.0/24
31.220.244.0/24
37.203.143.0/24
37.203.149.0/24
37.203.179.0/24
37.203.187.0-37.203.188.255
46.33.4.0/23
46.33.21.0/24
46.33.28.0/24
95.175.128.0-95.175.130.255
95.175.140.0/24
95.175.151.0/24
109.175.129.0-109.175.130.255
109.175.138.0/24
109.175.140.0/24
109.175.147.0/24
109.175.151.0-109.175.152.255
109.175.176.0/24
109.175.181.0/24
109.175.207.0/24
109.175.212.0/24
109.175.223.0/24
109.175.250.0/23
109.202.228.0/24
109.202.248.0/24
109.202.253.0/24
130.43.138.0/24
130.43.142.0/24
130.43.153.0/24
130.43.157.0-130.43.158.255
130.43.164.0/24
130.43.186.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2f:62:52:f2:fc:5b:5f:c5:da:ee:0c:40:f5:51:14:2c:3c:
30:2b:33:03:09:35:0d:e6:d2:e0:f3:54:2d:54:a7:86:ae:5b:
39:25:93:11:1c:c0:87:fa:d6:bf:a8:06:0a:32:64:5c:a4:e8:
a5:2b:cd:f1:b1:89:19:65:ec:85:4a:56:0c:31:e4:06:4d:e5:
3b:2f:68:bc:61:9c:e5:19:dc:e2:d9:9e:e9:4a:70:22:2e:2e:
ce:87:dd:71:06:7b:e0:b4:ac:8c:be:ed:93:7d:24:18:eb:02:
c2:61:0b:36:f0:aa:2c:c8:8f:0f:28:8c:09:f5:ff:2a:5a:4d:
31:7f:a2:f0:18:c0:d2:cd:c0:fb:2a:b2:b7:a2:c7:f8:11:26:
00:f2:3b:ec:60:42:40:68:1d:ff:69:b8:61:73:e3:6f:79:22:
c6:4f:ff:4e:16:c0:67:18:2b:bb:b2:8d:ee:4e:75:48:82:b3:
ad:09:28:e3:5e:e8:5f:22:1d:cd:8a:1f:ae:db:a5:70:fc:88:
bb:04:50:3a:01:7a:1a:c2:e3:f0:a1:d4:0b:93:80:ce:52:a0:
0f:48:12:dd:21:2e:be:9d:79:99:ce:83:ee:18:11:58:55:62:
6b:4e:44:cb:84:96:6c:3d:d8:69:10:04:69:9e:28:1b:76:b9:
62:ce:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:19:33 2026 by rpki-client