Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: RJpHMT9SV7bQWJPWGeTXICHYAiL/vYnl2zDbk64HMZE=
Subject key identifier: B9:0C:A8:7A:E8:BE:AD:4D:E0:BD:86:AD:22:2E:10:F1:7C:97:22:B7
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 378DAB9DE12B471259D93BE79F7FEB1165098F08
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS22427.roa
Signing time: Sun 04 Oct 2026 00:51:38 +0000
ROA not before: Sun 04 Oct 2026 00:46:38 +0000
ROA not after: Sun 03 Oct 2027 00:51:38 +0000
asID: 22427
IP address blocks: 79.176.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8d:ab:9d:e1:2b:47:12:59:d9:3b:e7:9f:7f:eb:11:65:09:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:38 2026 GMT
Not After : Oct 3 00:51:38 2027 GMT
Subject: CN=B90CA87AE8BEAD4DE0BD86AD222E10F17C9722B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:49:7a:24:9f:03:91:57:c1:6d:99:0b:7f:
ab:bf:be:a5:73:41:a1:b4:e8:f3:49:ab:de:01:d4:
2f:38:a3:fb:4a:87:c6:94:e8:69:a0:54:ae:0f:32:
04:a0:f0:5e:19:59:7b:12:9b:af:2c:ec:98:5e:5d:
f7:01:c2:13:e3:ba:19:69:9f:1c:8e:66:a2:a1:e5:
7f:58:28:69:00:06:6b:19:36:5f:33:51:cc:28:52:
b6:75:12:04:b8:9b:8d:de:22:84:a0:05:c5:25:6d:
93:36:5c:bc:e0:9f:5e:2f:fe:10:92:88:c1:5e:71:
20:85:39:67:e8:1f:ed:3e:19:6b:73:03:46:e6:1f:
03:38:5b:b2:f5:6f:19:5f:47:94:ba:22:bd:59:eb:
e8:5e:fc:73:3d:df:e4:c2:e8:a6:27:8e:df:fc:ee:
b2:ca:43:40:a2:ee:c6:85:0d:8c:ac:90:4c:ea:7c:
bc:6c:69:fb:ed:36:5c:6f:2f:08:d6:94:ab:3e:4e:
6d:97:e7:bc:50:06:7b:88:ca:49:b9:23:69:e2:ff:
3b:80:c0:6d:e3:15:85:eb:a4:b1:d6:f2:08:20:de:
29:85:67:37:62:de:a5:6f:54:c7:59:69:df:1d:a6:
49:c8:87:ef:47:c8:18:8d:b8:84:74:5c:13:27:71:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:A8:7A:E8:BE:AD:4D:E0:BD:86:AD:22:2E:10:F1:7C:97:22:B7
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.27.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e9:48:09:1d:b2:45:60:37:48:ab:4a:f1:27:da:8a:30:3c:
61:76:f8:c3:74:ce:56:41:8e:17:99:56:7a:f9:f3:2c:2b:d2:
0f:90:a9:9a:88:21:5c:23:38:bd:92:14:f8:0c:17:7b:d3:66:
a6:dd:17:95:09:3d:39:cd:0d:2c:c4:d6:37:27:8b:1d:26:4d:
91:9c:50:f5:75:4e:55:1c:e4:40:6a:31:22:42:57:4d:ca:cf:
67:e8:36:81:a9:8a:05:4d:e4:7e:19:b9:aa:c8:a8:b9:bc:4e:
73:ba:eb:dd:8d:3f:a2:32:7c:25:16:b1:b6:3f:d8:ec:05:35:
4d:7a:4b:48:f5:d9:79:2e:2f:3f:15:b4:bb:20:d0:01:9a:d3:
f7:f9:ee:67:ce:c1:92:cf:bb:2d:5a:8e:45:cf:41:34:5a:0b:
56:cd:8a:ff:0a:d5:ce:90:5d:61:96:32:62:1e:d3:a9:24:e4:
51:54:e8:3c:c9:9f:e4:9b:d6:54:b0:6c:b2:20:e7:f4:27:4c:
ce:30:2b:f4:2c:f2:7e:b8:c2:21:0a:61:82:23:48:7a:32:9f:
82:d4:77:78:ff:f4:e7:78:b0:84:ca:8d:84:43:87:df:93:5f:
63:12:ce:3f:fc:d2:3d:e4:59:f1:80:65:7b:e0:5f:4c:ad:2c:
a3:fd:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:29 2026 by rpki-client