Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: xKAnLfNKj4WvvERZEeSL1oPfLB5T+WeGICCaK3DJS4I=
Subject key identifier: 3D:3D:C3:1C:EF:51:BC:B6:F6:55:20:56:10:C5:FE:E8:C1:9F:FC:72
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 492B5F1B27C147F07DB8D8D5655E143CB38121BE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS22773.roa
Signing time: Thu 02 Apr 2026 07:03:32 +0000
ROA not before: Thu 02 Apr 2026 06:58:32 +0000
ROA not after: Thu 01 Apr 2027 07:03:32 +0000
asID: 22773
IP address blocks: 51.19.0.0/17 maxlen: 24
51.19.128.0/17 maxlen: 24
51.146.160.0/20 maxlen: 24
94.195.0.0/16 maxlen: 24
188.223.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 01:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2b:5f:1b:27:c1:47:f0:7d:b8:d8:d5:65:5e:14:3c:b3:81:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 2 06:58:32 2026 GMT
Not After : Apr 1 07:03:32 2027 GMT
Subject: CN=3D3DC31CEF51BCB6F655205610C5FEE8C19FFC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:4f:ff:32:65:e5:ae:aa:fc:03:fd:fc:98:
b3:51:33:cd:d2:46:01:a1:88:04:be:80:b4:ac:ca:
a1:41:53:f4:40:10:e6:13:7e:0d:4a:f2:71:37:4f:
4b:87:14:c3:07:50:19:f2:c5:f0:61:af:6d:f8:fe:
93:52:95:f8:61:07:0b:61:60:9a:92:a7:e0:4d:69:
5c:dc:34:44:0e:88:38:e8:43:c7:e9:ee:c3:74:9b:
79:c6:b8:43:d6:44:a1:6d:7a:3a:44:a8:61:82:22:
62:60:54:a8:f5:03:ed:68:19:57:80:96:25:ab:bb:
cd:6a:a9:0b:a0:ae:2c:31:a6:f7:cf:0b:f0:c3:dc:
af:00:19:7a:3a:28:3f:fb:65:3e:e5:08:f2:23:8d:
20:74:9c:59:65:3f:cd:c9:31:e0:0f:9a:5a:94:f3:
43:c4:37:16:d3:c0:20:a9:25:ea:eb:3f:ec:ff:2c:
70:a0:01:f9:11:66:13:b6:03:14:4c:93:73:43:52:
10:95:a7:7a:26:36:0b:f6:44:81:17:4b:fc:65:ed:
1b:7c:b3:49:b7:33:fe:0f:5d:ec:0d:2e:43:88:4b:
87:75:79:53:08:9f:67:86:9a:42:f1:d2:67:79:dc:
4d:7d:9e:0d:f9:22:09:02:12:2c:cb:22:8a:91:14:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:C3:1C:EF:51:BC:B6:F6:55:20:56:10:C5:FE:E8:C1:9F:FC:72
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.19.0.0/16
51.146.160.0/20
94.195.0.0/16
188.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:45:3c:13:17:16:46:64:90:07:0f:a1:b1:39:8b:0c:dc:a2:
f4:11:da:c0:4d:ed:dc:90:ed:ce:45:44:3c:bb:12:ba:a3:c5:
5d:2e:93:3a:de:24:68:10:f1:3b:2d:4c:d4:7f:2b:da:83:e6:
48:6c:ea:68:93:b4:7c:a6:7e:0f:bc:f7:c2:99:91:1c:9b:57:
f8:a2:b3:da:44:83:4e:26:8c:10:7c:eb:bc:ca:66:ed:ba:7c:
f7:db:ae:c7:5b:6e:7f:f1:ed:5a:6e:30:08:13:76:da:25:e9:
fd:81:2b:a7:44:db:90:8e:4c:8b:da:56:df:98:8b:37:95:cf:
a8:04:2a:5f:68:0a:cc:f5:5e:55:59:f2:66:6d:ef:26:85:01:
5f:8e:f5:c9:1a:eb:d0:9e:a5:c9:12:b2:8e:4a:26:cb:0a:24:
f2:11:8a:2f:12:9b:f4:03:e0:cd:2c:83:08:fd:df:a5:9e:0e:
c3:0b:3d:d2:f5:6d:5e:ec:6a:4b:83:d5:59:c9:de:e2:c5:34:
3d:9b:07:5d:98:41:df:3a:04:4e:cc:b7:f3:4e:fb:33:9b:89:
70:63:7a:0a:c0:70:36:a6:74:17:5c:27:76:13:19:d7:9c:3d:
b2:2c:3e:74:42:32:72:69:d6:04:ba:a4:0f:5d:8a:80:f7:fc:
1a:a1:e3:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUSStfGyfBR/B9uNjVZV4UPLOBIb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA0MDIwNjU4MzJaFw0yNzA0MDEwNzAzMzJaMDMxMTAvBgNV
BAMTKDNEM0RDMzFDRUY1MUJDQjZGNjU1MjA1NjEwQzVGRUU4QzE5RkZDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hk//MmXlrqr8A/38mLNRM83S
RgGhiAS+gLSsyqFBU/RAEOYTfg1K8nE3T0uHFMMHUBnyxfBhr234/pNSlfhhBwth
YJqSp+BNaVzcNEQOiDjoQ8fp7sN0m3nGuEPWRKFtejpEqGGCImJgVKj1A+1oGVeA
liWru81qqQugriwxpvfPC/DD3K8AGXo6KD/7ZT7lCPIjjSB0nFllP83JMeAPmlqU
80PENxbTwCCpJerrP+z/LHCgAfkRZhO2AxRMk3NDUhCVp3omNgv2RIEXS/xl7Rt8
s0m3M/4PXewNLkOIS4d1eVMIn2eGmkLx0md53E19ng35IgkCEizLIoqRFMe9AgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUPT3DHO9RvLb2VSBWEMX+6MGf/HIwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjI3NzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMBsEAgABMBUDAwAzEwME
BDOSoAMDAF7DAwMAvN8wDQYJKoZIhvcNAQELBQADggEBAB1FPBMXFkZkkAcPobE5
iwzcovQR2sBN7dyQ7c5FRDy7ErqjxV0ukzreJGgQ8TstTNR/K9qD5khs6miTtHym
fg+898KZkRybV/iis9pEg04mjBB867zKZu26fPfbrsdbbn/x7VpuMAgTdtol6f2B
K6dE25COTIvaVt+YizeVz6gEKl9oCsz1XlVZ8mZt7yaFAV+O9cka69CepckSso5K
JssKJPIRii8Sm/QD4M0sgwj936WeDsMLPdL1bV7sakuD1VnJ3uLFND2bB12YQd86
BE7Mt/NO+zObiXBjegrAcDamdBdcJ3YTGdecPbIsPnRCMnJp1gS6pA9dioD3/Bqh
42w=
-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:47 2026 by rpki-client