Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: WVEx7ZqZHDYe6cVHXxBqzUCIia938shMxnWeCqgfW2E=
Subject key identifier: 30:2A:3A:26:C5:D4:05:86:E8:C5:AC:0A:F4:F0:BE:CB:CD:10:98:67
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 475F230D2C102C4C854A3AB9447424CE88507A6E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22773.roa
Signing time: Wed 08 Jul 2026 00:04:43 +0000
ROA not before: Tue 07 Jul 2026 23:59:43 +0000
ROA not after: Wed 07 Jul 2027 00:04:43 +0000
asID: 22773
IP address blocks: 82.21.104.0/22 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.152.0/21 maxlen: 24
82.24.10.0/23 maxlen: 24
82.24.44.0/23 maxlen: 24
82.24.50.0/23 maxlen: 24
82.24.102.0/23 maxlen: 24
82.24.184.0/22 maxlen: 24
82.24.204.0/23 maxlen: 24
82.25.0.0/22 maxlen: 24
82.25.18.0/23 maxlen: 24
82.25.128.0/22 maxlen: 24
82.25.206.0/23 maxlen: 24
82.26.102.0/23 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.80.0/21 maxlen: 24
82.27.112.0/22 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.168.0/21 maxlen: 24
82.27.192.0/22 maxlen: 24
82.29.30.0/23 maxlen: 24
82.29.144.0/22 maxlen: 24
178.83.0.0/22 maxlen: 24
178.83.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5f:23:0d:2c:10:2c:4c:85:4a:3a:b9:44:74:24:ce:88:50:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 7 23:59:43 2026 GMT
Not After : Jul 7 00:04:43 2027 GMT
Subject: CN=302A3A26C5D40586E8C5AC0AF4F0BECBCD109867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:0d:4b:b4:2f:8b:e3:cd:e8:07:7a:cf:68:
59:65:db:0e:71:8d:b1:7e:b0:fd:3a:f2:9b:ce:ee:
f2:cd:b6:07:0f:2f:14:00:a1:fa:c8:5b:1c:ae:7f:
a5:ba:49:f8:3a:4d:43:94:4f:c0:28:77:2a:fb:1a:
55:9b:16:56:96:86:ea:06:48:52:cd:dd:a3:ed:75:
4a:6f:a5:64:4b:34:2d:92:a5:fd:30:b7:5c:80:35:
a8:92:29:0c:cc:a5:ce:ae:49:08:b0:81:41:b7:b3:
dd:60:c6:67:c5:b9:64:19:cc:2e:98:cb:07:39:54:
7c:e7:62:07:fe:67:ff:d1:18:0e:15:86:dd:d3:d2:
03:62:89:4a:56:36:07:9d:c0:07:d7:b6:51:c9:5e:
ea:08:41:13:54:7b:aa:b7:58:b6:32:c9:d0:73:1f:
b9:10:a8:a8:ed:23:5b:33:0b:7f:c7:7d:45:f7:28:
90:27:9c:72:13:a3:2e:88:59:c0:1e:a1:3e:ee:e8:
84:eb:d2:29:ef:8b:6d:4f:65:05:9d:d3:2e:a2:06:
49:e5:db:b5:c5:ad:aa:c3:4c:12:9e:e1:8a:f5:b3:
f1:a4:19:fc:1d:ec:cd:39:90:df:3c:88:04:95:e7:
a7:b9:4e:2d:4d:13:a6:09:28:c5:cc:63:52:5c:44:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:3A:26:C5:D4:05:86:E8:C5:AC:0A:F4:F0:BE:CB:CD:10:98:67
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.104.0/22
82.22.128.0/21
82.22.148.0-82.22.155.255
82.23.140.0/23
82.23.152.0/21
82.24.10.0/23
82.24.44.0/23
82.24.50.0/23
82.24.102.0/23
82.24.184.0/22
82.24.204.0/23
82.25.0.0/22
82.25.18.0/23
82.25.128.0/22
82.25.206.0/23
82.26.102.0/23
82.27.48.0/20
82.27.80.0/21
82.27.112.0/22
82.27.136.0/21
82.27.168.0/21
82.27.192.0/22
82.29.30.0/23
82.29.144.0/22
178.83.0.0/22
178.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
48:6f:2c:6a:61:9e:42:d1:b6:eb:ba:f9:f5:81:0b:96:11:26:
cb:4e:d0:15:19:97:3f:32:11:aa:eb:c4:92:5e:e5:a6:cb:fb:
36:73:3c:77:64:71:a1:79:59:52:02:98:3f:07:8c:b7:cd:2b:
db:3b:83:c8:be:04:b4:87:c2:8e:36:a2:b6:cb:2a:74:ac:a6:
20:15:82:01:33:7f:c2:86:24:d7:c2:16:a9:3e:3d:11:8b:4b:
7f:f3:8f:69:b6:eb:4a:1d:63:98:4d:76:95:e0:96:74:18:dc:
0b:c0:01:b1:93:40:95:29:d9:03:53:d0:84:e0:4f:24:c0:95:
32:95:9c:04:f5:05:3f:62:a3:85:b6:1a:cd:9e:3d:d5:54:1e:
92:6a:d4:c1:70:f1:f7:f0:11:a3:a4:d2:68:5b:46:32:80:c1:
b8:b6:66:b5:0a:0b:f4:84:dc:a9:ff:78:2a:3b:ae:d2:c9:cd:
4d:fa:52:a4:19:c4:c6:de:f0:ba:c9:7d:84:0f:db:15:94:c2:
23:e4:7d:d8:2b:03:8a:87:1d:ba:c4:6a:17:22:78:0a:32:c4:
e9:58:a6:bc:f9:28:6b:d1:55:6b:aa:2f:f3:69:ff:4b:69:6e:
04:a1:26:b9:cb:28:09:c5:8b:08:65:50:ae:71:ba:7d:fc:98:
e2:2c:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:07 2026 by rpki-client