Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: KSUncFwmlvYQLwZBW7+JNiVX9uNtfU6X47PR2VuuA48=
Subject key identifier: 35:F1:7E:5E:4E:3F:D8:49:E6:AE:56:CC:A3:63:DC:CA:CF:C6:EF:54
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 16ED35C2947E97D620985A36F9585B49722E1092
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa
Signing time: Sun 15 Feb 2026 02:31:31 +0000
ROA not before: Sun 15 Feb 2026 02:26:31 +0000
ROA not after: Sun 14 Feb 2027 02:31:31 +0000
asID: 22427
IP address blocks: 141.11.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ed:35:c2:94:7e:97:d6:20:98:5a:36:f9:58:5b:49:72:2e:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 15 02:26:31 2026 GMT
Not After : Feb 14 02:31:31 2027 GMT
Subject: CN=35F17E5E4E3FD849E6AE56CCA363DCCACFC6EF54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:6b:e9:a0:f3:68:d9:f0:29:bc:5e:c5:e4:
69:60:82:3c:e9:c7:4e:d9:62:e4:47:f8:92:b0:0f:
f7:bb:d4:a0:43:de:ab:ba:7c:83:c8:ba:ce:c2:2f:
1a:76:5e:48:0d:50:9d:dc:cf:78:a3:e9:45:00:bd:
55:42:04:35:40:18:5e:74:a6:cd:03:62:5c:71:77:
a4:e3:5f:e1:ff:fc:13:74:73:db:f5:a6:2b:87:eb:
41:72:9b:6e:14:c9:bb:51:ce:6f:a1:41:87:7e:76:
78:5d:ca:6d:94:91:e0:cc:69:22:c7:70:4a:9b:0d:
49:65:99:b4:f9:1b:ab:6e:86:48:b5:d3:76:37:d5:
0a:fc:34:7e:cf:b6:0f:cc:64:79:bf:a7:a5:21:55:
5b:fd:f8:75:88:78:cc:c9:86:ba:1d:3c:29:90:fd:
7b:15:63:08:ae:84:a6:c5:7c:0c:a5:65:4e:ce:28:
79:de:c4:f5:fb:65:aa:9e:82:be:9d:2d:d2:87:6e:
9d:09:b6:a1:90:98:6d:82:6f:00:f2:8f:14:c4:2f:
24:5d:5d:a2:c0:e6:83:13:9b:7c:d3:81:89:c0:69:
b2:cb:9e:d1:d9:19:68:4c:94:1a:62:07:69:74:6c:
17:b6:5e:02:f2:e8:69:fc:6e:67:40:05:41:72:b5:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F1:7E:5E:4E:3F:D8:49:E6:AE:56:CC:A3:63:DC:CA:CF:C6:EF:54
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c6:32:0d:5f:7f:e2:8f:d1:74:4c:4c:16:6a:22:48:d9:1a:
fd:fb:9b:db:35:b8:f1:98:84:80:53:b0:44:ea:e3:07:0d:c8:
bc:db:69:0f:9f:41:1c:53:33:51:0f:23:eb:ad:64:82:88:72:
6a:7a:d7:7a:0a:9d:9b:c4:4b:f7:30:60:14:64:2a:90:47:4f:
19:f2:b9:ba:2d:5f:13:4b:8e:f0:0e:8d:76:4c:c7:65:d1:6b:
b4:0c:03:08:56:5b:e3:10:d3:d2:05:84:8d:4d:2f:b3:75:5d:
68:8f:1d:5d:0e:1e:85:ce:36:20:70:56:00:bc:2b:44:6d:a7:
c7:27:b0:88:4c:04:92:60:3d:7f:ea:35:bd:74:34:91:6a:8e:
ef:bb:cc:49:5b:03:ff:01:85:68:d1:41:3f:c3:2d:6e:48:81:
4b:6d:77:77:0f:29:a5:53:3c:46:12:66:e3:ea:d2:a7:ee:bb:
c3:07:71:81:ce:96:a6:96:89:27:bc:d3:f7:22:ed:94:02:59:
91:fb:26:9e:d7:8d:0d:aa:cc:b3:6c:b2:7a:6d:44:e8:c3:f9:
8e:cd:2f:f2:0c:b6:22:b8:16:69:7d:b8:81:11:7b:31:dd:ac:
6f:74:87:f1:21:67:53:2b:d2:fb:8b:82:89:6c:f3:92:2b:36:
3d:70:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:28 2026 by rpki-client