
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: NTTm4ayIGkUOaRPjUG3VUTNQDNgJZTr5/lV/HRc1oxw=
Subject key identifier: F1:0C:5D:F4:02:06:AE:1F:1E:71:93:22:8C:BA:7A:62:8E:7B:5C:60
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 28B45EE83399A601841DF0246B4981696F708087
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS22427.roa
Signing time: Mon 05 Oct 2026 06:11:24 +0000
ROA not before: Mon 05 Oct 2026 06:06:24 +0000
ROA not after: Mon 04 Oct 2027 06:11:24 +0000
asID: 22427
IP address blocks: 79.176.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b4:5e:e8:33:99:a6:01:84:1d:f0:24:6b:49:81:69:6f:70:80:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:06:24 2026 GMT
Not After : Oct 4 06:11:24 2027 GMT
Subject: CN=F10C5DF40206AE1F1E7193228CBA7A628E7B5C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:09:25:e4:ba:b0:97:e8:46:7e:eb:22:6c:
71:8d:a3:de:41:c4:67:5a:29:d8:4e:eb:dc:45:d0:
c0:f9:91:9e:21:ba:ee:31:39:8d:f1:a7:b4:0b:03:
d4:72:03:2e:4a:86:31:fd:70:71:de:0a:60:85:2b:
04:88:00:04:2a:c0:fc:53:06:d0:00:e6:58:50:06:
39:16:60:15:20:e1:a1:68:d1:e4:ea:d1:d4:7c:38:
02:5e:89:75:45:81:b3:65:58:3d:32:36:0d:fe:00:
98:58:34:cf:36:39:69:1c:72:77:55:35:12:ed:da:
64:b1:bc:93:15:53:ba:d3:6a:84:3e:5a:95:67:aa:
61:94:d0:0d:61:cc:91:ec:23:e5:69:1c:b1:49:04:
b9:f9:50:1b:e6:d7:f6:4d:bf:00:a8:82:08:c5:0c:
a8:c1:8a:e7:39:03:31:7b:70:5c:92:cf:4d:a0:86:
94:4c:bb:f4:a3:52:bf:14:a4:a8:93:36:1e:3d:3a:
58:86:72:a6:6f:b5:5f:e0:27:50:46:f3:9a:82:54:
be:0b:e0:8e:3a:5b:30:dc:6b:4a:05:c5:bc:98:48:
e1:c2:9a:9e:e8:4b:9d:bb:c5:25:c1:59:66:7f:8b:
49:52:da:e6:67:fd:91:54:44:48:e3:54:6f:fd:bf:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:5D:F4:02:06:AE:1F:1E:71:93:22:8C:BA:7A:62:8E:7B:5C:60
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.27.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e7:db:95:6c:10:fb:2b:96:e1:eb:f5:2e:a4:82:4e:9f:af:
83:8d:d9:99:d7:fe:3f:a9:89:87:8d:66:9b:28:e5:4e:8a:45:
8a:df:f0:c6:51:5d:ec:c3:7f:50:db:49:63:29:60:e7:8f:2b:
8d:1c:b2:73:7d:21:6a:f1:2e:6f:65:55:38:12:3d:d2:78:21:
3a:d5:7f:83:f5:3f:53:66:e0:ba:e1:f0:f8:11:c7:70:f4:7a:
e2:0e:87:8b:1f:b2:4e:be:e8:0f:02:52:db:97:83:1d:8b:36:
8a:05:5b:39:65:b2:3e:ef:92:6e:80:05:2f:00:ba:7a:f3:43:
aa:db:29:1f:b8:8c:32:ca:fe:e7:71:7d:a8:9b:65:39:b1:07:
38:b3:51:8f:2f:12:f8:07:c7:3d:9e:59:42:d9:29:57:ad:cd:
9a:30:a3:11:78:e2:3c:db:25:94:0f:17:07:e0:44:8e:ca:88:
d3:02:91:21:90:81:34:d1:77:04:5a:11:44:5c:ea:23:05:e9:
f6:03:8a:e8:68:b5:ea:6d:e7:53:d4:f9:1d:aa:2c:bc:cb:dc:
56:9f:6e:20:f7:32:cd:de:b9:63:cd:75:b6:e0:fd:02:37:b2:
6e:e2:ce:d4:2c:01:d7:31:c8:6f:30:50:80:2b:d4:4e:3a:64:
8a:bf:f2:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:41 2026 by rpki-client