Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: Hk0dSeycivDxjYTgvpPt4Mxaif+ZBf3SfyqhUsj1EIQ=
Subject key identifier: CE:1E:9D:E2:75:47:6E:3F:C5:99:24:7A:05:AB:FC:DE:6E:DE:F1:D7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5AC88D59D7E15FD0695637E83CD1704F78D9DA4A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22773.roa
Signing time: Sat 15 Aug 2026 20:49:28 +0000
ROA not before: Sat 15 Aug 2026 20:44:28 +0000
ROA not after: Sat 14 Aug 2027 20:49:28 +0000
asID: 22773
IP address blocks: 95.134.32.0/22 maxlen: 24
95.135.204.0/22 maxlen: 24
178.93.48.0/22 maxlen: 22
178.94.224.0/22 maxlen: 24
178.95.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 17:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c8:8d:59:d7:e1:5f:d0:69:56:37:e8:3c:d1:70:4f:78:d9:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 15 20:44:28 2026 GMT
Not After : Aug 14 20:49:28 2027 GMT
Subject: CN=CE1E9DE275476E3FC599247A05ABFCDE6EDEF1D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:c2:43:b6:e9:7e:d9:6d:9d:8a:b9:da:5f:
56:24:62:f2:38:44:66:0b:87:70:ce:56:66:ca:ec:
c1:2a:64:94:61:63:bf:7d:c6:21:75:5a:31:7d:16:
5d:21:30:d7:1a:7e:a9:61:38:0b:d6:a2:75:66:7b:
5c:e2:46:c5:97:3a:78:5c:26:71:91:fb:01:73:28:
16:8a:67:95:2b:a8:96:fc:8f:64:f7:a8:21:1d:d7:
7f:a3:ee:9d:9f:2b:f8:8c:80:29:84:3f:12:b2:d3:
e5:31:6b:d3:e3:4b:f1:cf:b8:04:6a:25:a6:ed:cb:
a4:ff:a8:76:a2:03:0b:d9:31:17:cd:07:1e:25:15:
91:0b:3e:92:ff:96:7e:a3:15:72:b5:56:2b:d3:57:
cf:90:b3:e7:ed:3d:c3:7b:a4:9e:8d:44:87:47:6b:
08:b2:39:11:a0:82:4a:b1:71:ff:b4:10:12:b8:44:
76:19:ce:f8:40:58:4a:b7:11:31:04:a5:c3:82:5f:
64:b2:e5:a7:f5:b5:93:0a:6f:fc:93:41:40:a0:e6:
97:d8:98:51:f8:93:18:2a:fb:f3:59:02:e9:32:c3:
63:f9:04:da:40:12:16:62:75:51:d9:f1:fc:e6:79:
f9:3a:24:8f:be:2b:e5:27:ce:56:10:f5:56:db:42:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1E:9D:E2:75:47:6E:3F:C5:99:24:7A:05:AB:FC:DE:6E:DE:F1:D7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.32.0/22
95.135.204.0/22
178.93.48.0/22
178.94.224.0/22
178.95.180.0/22
Signature Algorithm: sha256WithRSAEncryption
66:e8:9f:3b:f2:85:32:56:07:51:35:b1:a5:5b:48:99:1b:7c:
68:d5:71:8c:0e:ba:bf:f1:2b:6b:a8:03:a2:51:66:36:da:e9:
f9:28:95:f8:ea:8b:eb:8e:a2:f9:fc:14:54:b7:07:63:8b:68:
b5:f1:67:96:19:62:bc:8c:c5:b5:e3:a0:c7:96:ab:3a:3b:e8:
42:a5:02:ad:7f:0e:68:ab:2e:3b:9b:6c:77:da:73:04:ae:a1:
ed:bc:61:fe:73:74:a1:96:90:e8:c7:43:92:44:c3:a3:c2:5b:
05:10:8e:c2:77:69:b6:55:7d:6f:61:83:e3:6a:2d:07:65:d6:
0f:b0:5c:b9:eb:b9:29:1b:41:de:00:db:b2:0b:cf:28:ed:36:
64:9a:ec:b8:03:a0:71:f5:4b:52:4f:7b:55:70:79:8d:58:30:
de:7f:7b:e1:1d:09:23:4f:13:8c:02:ff:8e:5b:17:3b:f5:c2:
15:43:53:e7:6d:9d:b1:f2:74:d7:c7:30:a5:c8:09:46:44:80:
44:0d:14:53:11:52:f1:28:fd:49:bf:89:39:81:d4:a2:5f:b5:
a0:d4:ab:da:e4:1b:e1:ce:f1:29:a8:88:31:6c:58:19:5b:a8:
f0:e4:25:da:61:06:d8:d0:df:de:68:5e:b5:31:3e:52:ef:e5:
0e:1c:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:21:45 2026 by rpki-client