Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: znXp+83mdvf2Wb/Z2w39C9TAI1pEA9pevau8InVWtyE=
Subject key identifier: 59:C9:6E:B7:E0:2E:C0:BF:30:B9:68:13:D1:3E:A8:F8:5F:2E:28:1A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 674FE95346686E3B3E11AB68445A1C7ADB28FBBC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22773.roa
Signing time: Tue 08 Sep 2026 00:07:34 +0000
ROA not before: Tue 08 Sep 2026 00:02:34 +0000
ROA not after: Tue 07 Sep 2027 00:07:34 +0000
asID: 22773
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4f:e9:53:46:68:6e:3b:3e:11:ab:68:44:5a:1c:7a:db:28:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:02:34 2026 GMT
Not After : Sep 7 00:07:34 2027 GMT
Subject: CN=59C96EB7E02EC0BF30B96813D13EA8F85F2E281A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:07:88:1d:72:4c:4a:90:5c:db:3e:a4:66:
b8:c4:3c:5e:77:be:d4:e1:81:d2:4c:0f:4e:7d:59:
b0:a2:ea:4e:b5:ce:69:96:52:30:43:7e:55:09:a5:
c8:c7:6d:a1:d2:00:b2:e2:69:c8:16:8a:b0:fa:36:
69:4b:e6:bb:09:bf:13:39:6d:e0:a7:be:31:90:9f:
58:3e:94:86:83:ca:be:0a:d7:31:58:45:26:d9:cb:
2d:9e:6f:6c:4f:aa:a1:02:bb:dc:f2:e4:cc:d8:45:
da:84:7c:fc:06:bb:75:65:86:c9:71:51:78:fc:14:
d1:8a:b9:93:e8:8f:4f:7d:09:dd:85:aa:ec:8a:9e:
66:3d:51:5c:19:24:45:51:51:1e:98:8f:95:af:a1:
3c:07:39:ae:ac:e4:48:f3:89:c9:ee:f6:b9:27:a2:
d3:de:e5:0f:b3:68:d7:f2:29:63:2a:71:b3:b4:3c:
58:91:4b:c3:5b:ee:6c:f8:e6:63:b0:aa:3a:68:e1:
b3:72:74:34:46:bb:97:bd:f8:87:84:42:8b:70:35:
30:8a:11:0c:9d:78:93:42:e6:94:24:83:15:7f:9c:
0e:8e:32:87:3a:5f:ff:be:67:ad:04:68:6e:b4:f3:
cc:16:c7:e2:03:75:d5:37:92:f2:4f:6b:48:ce:f7:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C9:6E:B7:E0:2E:C0:BF:30:B9:68:13:D1:3E:A8:F8:5F:2E:28:1A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.192.0/20
162.141.216.0-162.141.255.255
167.148.16.0/21
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:6d:90:7e:a1:bc:1a:02:d8:eb:89:91:9c:e5:5a:08:e5:5f:
4a:f8:c1:c7:fb:a0:ff:62:36:b5:01:3b:37:64:d6:75:3f:07:
84:e4:3f:c1:57:d2:57:d4:70:9b:c1:a3:4b:80:7b:96:b7:10:
81:55:c6:4f:5c:3d:a8:79:f1:7a:de:9e:70:94:72:a7:ef:59:
52:9e:c4:66:b8:53:2b:e7:d4:dc:c8:6a:21:33:a3:4f:70:a4:
28:11:02:c5:94:8b:61:2a:68:fd:ae:8d:f2:ca:d9:cf:49:a6:
42:91:f8:ed:dd:b5:ce:15:da:e2:7f:6a:d8:02:a1:9c:2f:33:
e7:0a:6b:87:af:8c:5d:21:96:1b:d1:83:f0:e9:38:b3:0b:20:
94:e4:5a:02:d0:7e:39:75:53:a8:1c:22:8d:e6:4e:fd:e1:2a:
90:50:aa:54:64:37:56:2f:a8:dc:ee:37:a2:a7:44:3d:5e:a1:
60:ec:70:85:9c:47:79:92:93:c2:bf:6f:63:de:7b:b0:e4:a0:
1a:45:75:5c:bc:56:e5:b4:4f:c2:ba:48:af:80:ad:b0:59:f3:
23:d0:21:f9:91:e3:eb:71:0e:91:19:d5:fe:ee:44:af:2e:58:
f5:e6:ac:c8:42:d8:cd:b6:dc:4f:44:bc:2d:e1:c9:23:2a:1d:
9a:e3:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:59:15 2026 by rpki-client