Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22168.roa
File: AS22168.roa (raw, json)
Hash identifier: oU3KzBMOhbJqUC01BzpaN/ZdlXLd0V8cvp6w8DcNqus=
Subject key identifier: 21:9D:02:E2:D5:F3:AA:A4:0B:EE:0E:20:36:0E:5A:35:1F:3D:98:F2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2C185F47D7C579614D460465163EB16993F7090C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22168.roa
Signing time: Thu 26 Feb 2026 13:46:29 +0000
ROA not before: Thu 26 Feb 2026 13:41:29 +0000
ROA not after: Thu 25 Feb 2027 13:46:29 +0000
asID: 22168
IP address blocks: 179.61.168.0/24 maxlen: 24
181.41.192.0/24 maxlen: 24
181.214.62.0/24 maxlen: 24
181.214.90.0/24 maxlen: 24
181.214.234.0/24 maxlen: 24
181.214.245.0/24 maxlen: 24
181.215.138.0/24 maxlen: 24
181.215.145.0/24 maxlen: 24
181.215.208.0/24 maxlen: 24
191.96.20.0/24 maxlen: 24
191.96.22.0/24 maxlen: 24
191.96.127.0/24 maxlen: 24
191.101.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:18:5f:47:d7:c5:79:61:4d:46:04:65:16:3e:b1:69:93:f7:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 26 13:41:29 2026 GMT
Not After : Feb 25 13:46:29 2027 GMT
Subject: CN=219D02E2D5F3AAA40BEE0E20360E5A351F3D98F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:d1:77:0d:88:68:4e:db:e9:31:d0:b4:ba:
01:5b:23:d6:d6:1e:72:55:47:86:6a:8b:c0:4a:9e:
ed:b5:9a:d0:17:12:b6:04:5d:38:20:62:86:fe:ed:
35:b3:c2:6d:16:a0:60:d4:95:27:99:a7:59:f6:6d:
35:cd:04:24:c0:00:b7:ed:e4:0f:d2:ca:01:3e:ab:
25:0b:59:37:7a:06:e8:22:26:bc:d2:49:b5:57:d3:
4a:ad:f1:b2:ad:e9:c2:a9:0c:54:87:2a:5d:d1:fa:
21:b4:26:86:10:de:83:f9:46:d2:f2:fe:30:97:80:
0c:f4:d8:06:37:6c:47:9a:c7:2f:6e:2b:96:d0:1c:
6f:ce:72:25:12:6e:96:e7:76:e2:c9:8a:47:fe:98:
35:3c:24:ea:3e:76:76:9f:e1:e3:26:f7:73:1b:fd:
16:09:e1:b7:74:54:59:46:65:26:13:7b:49:2f:43:
91:e3:74:ce:6a:db:9e:3b:0b:a8:a5:69:0f:0e:4c:
f0:a7:47:61:d8:aa:24:57:78:28:87:4d:e5:d9:6b:
87:06:62:75:1d:c7:09:da:20:71:8c:33:b6:d7:42:
4b:f1:8c:a2:0b:e9:9d:df:93:5a:58:db:d8:5f:22:
d6:9e:11:25:f1:63:a8:30:58:5f:eb:28:49:13:83:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:02:E2:D5:F3:AA:A4:0B:EE:0E:20:36:0E:5A:35:1F:3D:98:F2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22168.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.168.0/24
181.41.192.0/24
181.214.62.0/24
181.214.90.0/24
181.214.234.0/24
181.214.245.0/24
181.215.138.0/24
181.215.145.0/24
181.215.208.0/24
191.96.20.0/24
191.96.22.0/24
191.96.127.0/24
191.101.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a7:0c:58:25:5f:3c:59:79:91:d6:f4:a1:1d:40:3e:c4:e8:
63:54:3e:a1:02:23:e6:b6:8d:47:63:0a:09:80:96:3c:f4:09:
15:19:f6:a6:a1:56:55:f7:67:13:10:66:0a:a3:0e:69:82:0d:
48:71:8d:5e:1b:a2:60:18:c2:58:5c:40:54:a4:f5:a5:b0:1f:
18:75:8f:3e:43:3c:9b:46:b9:f8:8a:8f:6c:f7:0c:b2:96:59:
20:e1:fa:31:e7:80:40:6f:e6:20:c8:c2:66:92:87:2c:fe:5a:
a6:f8:bc:22:48:bb:0b:1a:ac:d6:75:9a:a1:84:90:ce:68:56:
76:33:d4:00:48:88:26:fd:e2:65:6a:07:e4:b9:82:34:5a:5b:
a1:50:ad:b6:0c:a8:5b:a2:bd:5f:98:4f:49:39:89:44:75:5b:
4b:81:83:f3:62:a8:4c:94:9b:12:33:73:ea:a5:46:b3:76:91:
d9:99:ae:c5:52:a2:2b:93:21:30:9a:80:bf:da:da:05:a3:cf:
4a:b3:0c:32:be:79:a5:0f:88:c8:c1:73:8b:32:f7:06:92:7d:
f6:82:b6:2f:9a:3f:87:92:46:68:f9:9b:3d:4d:f5:31:54:c4:
9a:77:d4:aa:fc:81:d3:7c:9c:68:6a:c1:5c:1b:87:dd:35:34:
af:c3:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:35 2026 by rpki-client