Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: lNX4t+0E84BUF8mzV/AvTEiEO1mO1mx9NagXcg1FY48=
Subject key identifier: 04:95:18:F2:98:77:34:9E:FD:F9:11:F2:4D:F8:76:A0:15:62:5B:4F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 14FFFB79CC824F5622535DFB4C521793E4A7A1CA
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS22427.roa
Signing time: Wed 02 Sep 2026 08:49:32 +0000
ROA not before: Wed 02 Sep 2026 08:44:32 +0000
ROA not after: Wed 01 Sep 2027 08:49:32 +0000
asID: 22427
IP address blocks: 143.20.76.0/24 maxlen: 24
143.20.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ff:fb:79:cc:82:4f:56:22:53:5d:fb:4c:52:17:93:e4:a7:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 08:44:32 2026 GMT
Not After : Sep 1 08:49:32 2027 GMT
Subject: CN=049518F29877349EFDF911F24DF876A015625B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:f1:c9:d2:d4:23:e1:f5:79:c9:ec:46:03:
db:0f:f1:39:21:ac:bf:6a:93:b8:f8:d4:05:b6:e7:
54:70:f3:de:cc:9e:cc:92:54:52:aa:04:4c:07:51:
98:ab:b7:6e:3a:93:e4:d8:70:8c:0c:4e:75:4d:71:
91:ad:ce:6e:1c:b9:bd:f9:4f:7c:69:a3:25:24:3a:
0b:4b:58:ae:11:59:9b:ce:cb:47:e0:3b:2f:4e:50:
d5:1c:e6:71:db:9b:7a:a8:d4:51:42:b6:af:df:15:
20:62:fb:57:1a:19:67:f3:a2:23:8e:6f:bd:eb:85:
66:f2:1b:54:c0:94:ba:ce:07:bf:50:97:2b:64:ee:
f3:98:90:bd:58:88:69:5c:2a:1e:e1:a6:a9:6f:9f:
25:09:7c:f6:61:aa:ff:84:d2:68:fe:44:bc:55:87:
4d:9c:04:64:4d:b3:b9:02:96:cb:39:f1:dd:1d:8d:
bf:09:6e:49:8b:c3:48:58:ae:b9:88:50:f8:0f:80:
b2:32:0a:ae:cb:72:af:80:ab:a1:fd:05:77:f8:1f:
8d:37:ab:8c:7f:d8:da:fc:8c:9c:71:02:60:9d:4d:
c0:23:14:cc:02:5d:56:c2:a4:be:b2:fa:cb:06:04:
09:42:6f:2e:f9:b4:81:af:dd:63:b3:10:3b:28:08:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:18:F2:98:77:34:9E:FD:F9:11:F2:4D:F8:76:A0:15:62:5B:4F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.76.0/24
143.20.92.0/24
Signature Algorithm: sha256WithRSAEncryption
22:31:6e:d8:62:3c:1f:7d:49:cf:89:b7:5b:ae:95:e5:76:0c:
7c:99:24:92:ba:ec:74:19:79:6f:66:ac:f8:b5:42:40:93:7d:
67:a5:fe:9c:51:d5:5f:ce:9e:13:28:b7:40:b4:19:3c:5b:fb:
02:26:a2:16:44:d0:57:50:ab:29:6d:13:51:2d:65:b8:44:57:
6e:67:b0:80:9a:fe:d2:08:e0:52:66:b4:de:2e:05:4e:b5:d4:
f0:88:36:23:45:37:c7:0b:1a:ea:d8:fb:0c:04:08:5c:c8:e7:
ad:96:71:da:22:8c:61:03:eb:21:06:97:7a:e8:8d:4d:94:39:
d1:b1:14:36:8a:93:77:a1:fa:9e:a9:58:62:d7:bb:13:63:e1:
51:0c:e1:37:44:1d:fb:2e:d1:37:91:97:c2:95:ee:63:90:1c:
74:4e:9e:b9:4a:43:9b:a2:b0:64:a8:2b:95:87:9b:43:b5:41:
e1:1f:21:a6:4a:6a:05:a1:30:bf:53:f1:61:aa:6c:7a:e1:de:
82:cc:42:85:58:a6:24:8b:ca:d9:6c:c2:e9:bb:da:f6:c6:21:
ca:65:a0:16:c9:d8:79:65:2a:81:2d:66:a5:ca:1a:eb:f0:6d:
85:47:1c:53:d1:1b:84:55:45:be:a3:f6:8c:39:32:f8:d0:ef:
62:8a:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:35:05 2026 by rpki-client