Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: pMtzQQlZg/Ky5WxkWzp+WBeYwrmetZfTJePh+iiSwNc=
Subject key identifier: 2C:55:B4:08:E7:7F:C2:C2:FD:C5:49:66:6F:FD:DC:7F:88:38:16:EC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 49EF679CCFE82F69D8151D94FE6DDA83C419E3A4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22773.roa
Signing time: Thu 26 Mar 2026 23:39:16 +0000
ROA not before: Thu 26 Mar 2026 23:34:16 +0000
ROA not after: Thu 25 Mar 2027 23:39:16 +0000
asID: 22773
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.10.0/23 maxlen: 24
82.24.44.0/23 maxlen: 24
82.24.50.0/23 maxlen: 24
82.24.102.0/23 maxlen: 24
82.24.184.0/22 maxlen: 24
82.24.204.0/23 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.18.0/23 maxlen: 24
82.25.128.0/22 maxlen: 24
82.25.206.0/23 maxlen: 24
82.26.102.0/23 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.80.0/21 maxlen: 24
82.27.112.0/22 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.168.0/21 maxlen: 24
82.27.192.0/22 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.144.0/22 maxlen: 24
178.83.0.0/22 maxlen: 24
178.83.128.0/22 maxlen: 24
178.83.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ef:67:9c:cf:e8:2f:69:d8:15:1d:94:fe:6d:da:83:c4:19:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 26 23:34:16 2026 GMT
Not After : Mar 25 23:39:16 2027 GMT
Subject: CN=2C55B408E77FC2C2FDC549666FFDDC7F883816EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:a2:d3:2e:18:e7:44:73:57:92:48:0a:3c:
c7:24:01:75:fe:d0:4e:ef:3b:19:50:ac:02:31:be:
f3:c9:4a:3e:30:72:30:85:38:ba:36:f7:f9:19:c2:
6f:61:f8:cf:5f:d6:2b:96:00:3a:23:32:3c:77:0d:
cc:b6:68:45:a6:1c:cf:de:cd:2d:25:9e:5d:7f:e7:
ab:67:27:d4:d5:4f:2e:d9:65:92:23:be:52:2f:3b:
57:b9:f0:0f:d2:55:16:0e:f0:5d:bc:6b:c6:08:c4:
2d:81:23:25:71:be:4b:c1:40:31:29:93:bc:ea:c0:
1f:c3:13:1e:d1:cb:0b:8a:fc:c3:b3:0f:ee:c1:e7:
59:58:6a:97:c4:bd:f4:21:ca:08:ec:c5:2d:71:cc:
bb:a5:06:25:73:54:d0:d1:23:42:3e:2a:85:c2:2f:
1b:07:d9:75:fa:0c:f7:97:35:52:12:b9:e4:36:cd:
d1:d8:a0:4b:1f:af:05:fa:e3:cd:5e:fe:ec:e7:3c:
22:85:5f:19:dc:28:c9:9a:cf:ce:bb:3c:a4:51:ce:
b4:ca:36:34:e6:0e:80:13:52:e6:f0:a3:c5:8b:d4:
90:a9:3a:01:8d:88:76:6e:9b:4d:dd:c1:3c:29:ea:
15:67:30:a7:48:bf:5e:46:39:8f:b7:02:5b:a8:12:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:B4:08:E7:7F:C2:C2:FD:C5:49:66:6F:FD:DC:7F:88:38:16:EC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.128.0/21
82.22.148.0-82.22.155.255
82.23.140.0/23
82.23.152.0/21
82.24.10.0/23
82.24.44.0/23
82.24.50.0/23
82.24.102.0/23
82.24.184.0/22
82.24.204.0/23
82.25.0.0/22
82.25.18.0/23
82.25.128.0/22
82.25.206.0/23
82.26.102.0/23
82.27.48.0/20
82.27.80.0/21
82.27.112.0/22
82.27.136.0/21
82.27.168.0/21
82.27.192.0/22
82.29.30.0/23
82.29.144.0/22
178.83.0.0/22
178.83.128.0/22
178.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9b:ac:a6:1d:75:ca:1b:95:17:ef:49:3b:05:27:4c:a1:75:
7e:c7:52:77:4c:c3:92:3e:f0:b4:b3:6c:c4:0f:21:79:d2:9d:
26:d0:e9:f9:da:dc:d7:2c:6c:08:36:44:e0:e4:60:57:11:e3:
d9:12:e2:7e:27:b8:14:58:b6:b1:ce:f9:fa:00:93:bc:e6:29:
78:74:2e:58:61:61:94:08:5e:a7:c9:f3:16:83:7d:2c:53:f6:
46:8f:03:1c:a2:4a:27:31:f6:92:0f:e6:15:99:14:9c:5a:66:
dd:bc:8e:ed:b8:db:02:06:b1:b0:5c:c8:11:f9:d9:05:f5:d9:
40:78:c3:70:a8:6f:a2:a9:26:d3:e6:ac:dc:9f:6b:b9:5f:ad:
9d:c7:02:f1:26:fd:5f:5f:d2:8e:75:22:ad:b6:7a:04:f1:0c:
ab:3b:e4:c4:be:ae:95:c8:e3:c2:90:3a:99:83:d7:71:d1:be:
4b:09:08:38:d6:49:e2:17:a3:e5:82:da:41:b8:b1:77:b8:40:
c5:e9:0a:6d:27:7d:92:cd:b0:d5:db:74:b5:0b:dc:de:be:09:
4f:de:6c:d5:52:4d:91:91:70:af:76:6f:04:2d:cd:95:4e:64:
8e:bc:26:c1:f7:18:2e:b3:13:70:a3:c1:9c:8f:17:38:36:03:
99:e1:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:47 2026 by rpki-client