Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: nHWJMn+We4WzwIA+R9Uj/Z+KGHUCVyUQFCsE8rA6sos=
Subject key identifier: 3C:68:E6:0A:22:D3:CF:86:32:F3:84:52:51:5C:57:13:27:68:EE:20
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72E345A3B9A93AE3AA7C774E1EC5B120611D23A2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Wed 22 Jul 2026 09:19:07 +0000
ROA not before: Wed 22 Jul 2026 09:14:07 +0000
ROA not after: Wed 21 Jul 2027 09:19:07 +0000
asID: 21859
IP address blocks: 143.14.125.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
162.141.121.0/24 maxlen: 24
167.148.120.0/23 maxlen: 23
168.222.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e3:45:a3:b9:a9:3a:e3:aa:7c:77:4e:1e:c5:b1:20:61:1d:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 22 09:14:07 2026 GMT
Not After : Jul 21 09:19:07 2027 GMT
Subject: CN=3C68E60A22D3CF8632F38452515C57132768EE20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:eb:f7:a7:0e:f4:39:ed:40:fb:a8:a5:61:
a3:3d:78:d8:74:c6:44:da:74:4e:37:bb:fe:ce:c9:
12:83:e8:9e:d5:1d:d7:4c:05:ab:f2:09:7e:de:28:
f2:04:c6:d0:27:3b:5a:23:9b:4e:09:6b:f2:8b:9a:
72:c1:78:d8:39:62:93:c9:c1:0e:96:12:37:26:da:
67:c7:c0:41:03:a1:33:5a:b1:39:c1:5e:d5:b6:2e:
2b:b2:ff:3f:18:a6:3e:3e:ab:f7:4d:2e:ea:7b:9d:
de:c0:14:c4:89:d9:5d:df:e6:56:69:a3:90:77:10:
d9:49:b0:2e:8f:d2:ae:a3:c4:64:12:4f:73:b7:fa:
ec:b9:3d:8d:64:41:e1:68:18:0e:74:2c:96:31:4c:
4c:01:4a:da:3f:93:52:57:9a:31:46:ca:96:6d:cc:
5e:84:de:10:12:f7:52:26:b4:e3:6b:4d:3c:ea:70:
51:c2:ce:43:54:5e:79:31:23:15:25:52:20:94:2e:
07:02:57:47:e4:14:bb:77:0a:30:c9:55:f3:93:20:
48:29:4a:11:e7:1d:87:29:5e:17:42:21:ee:08:27:
c1:8e:bf:18:5d:b0:5e:70:a2:bd:4f:58:e4:97:e7:
1c:57:52:37:ba:26:62:74:2c:6a:c8:a8:74:68:d6:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:E6:0A:22:D3:CF:86:32:F3:84:52:51:5C:57:13:27:68:EE:20
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.125.0/24
150.241.131.0/24
162.141.121.0/24
167.148.120.0/23
168.222.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a4:9e:82:6a:85:24:61:9a:0f:59:38:18:37:35:54:be:6e:
c1:67:a7:bd:e4:86:14:47:7b:97:b5:cb:eb:0c:de:72:af:e8:
1b:e9:67:80:b5:f8:65:d7:39:52:4d:a2:78:53:08:61:9a:92:
6e:98:bd:5b:87:e9:2b:f8:71:ab:85:fa:74:5b:86:e8:69:af:
4f:a9:e5:76:8f:18:20:1f:5d:df:77:24:99:97:51:70:7d:a8:
f8:75:b4:51:1f:37:95:5e:36:f6:f4:1d:d3:54:cd:cb:85:49:
02:b1:5f:5b:bf:49:f2:db:0a:fd:cb:b1:7c:ed:aa:d1:23:54:
a5:81:a8:69:9c:c0:c9:28:21:29:22:58:2c:fa:6c:c4:6f:d2:
28:3b:dc:f2:be:49:3b:09:2c:cd:08:49:30:4c:9d:23:fb:63:
31:03:40:f5:df:4d:11:99:cc:25:28:d7:43:6f:ef:ff:68:e1:
ad:5b:64:30:82:e5:9d:11:19:41:81:90:42:ec:51:31:96:50:
ee:ec:fc:80:e8:7b:52:23:35:b3:33:0e:69:d4:2d:f9:50:9c:
1a:30:97:21:bc:cf:5a:e5:37:fa:fd:88:5b:c9:c7:9b:11:39:
a4:b3:aa:d4:d2:60:03:0f:ec:7d:4f:d6:20:2c:e4:0c:6e:ff:
7e:07:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:55:17 2026 by rpki-client