Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: DrkZRkoUv0lvIeB8yBdcIXDNi6VEenLSHPQvmA8qzvE=
Subject key identifier: 3A:A9:5E:A5:E2:31:53:14:F1:EE:13:6D:44:2A:2B:6C:B1:74:87:A5
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 2F75000903845F68E94D11D6B32FCE95EE4B7E19
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS21859.roa
Signing time: Tue 03 Nov 2026 14:13:22 +0000
ROA not before: Tue 03 Nov 2026 14:08:22 +0000
ROA not after: Tue 02 Nov 2027 14:13:22 +0000
asID: 21859
IP address blocks: 79.176.19.0/24 maxlen: 24
79.176.20.0/24 maxlen: 24
79.176.22.0/24 maxlen: 24
79.176.32.0/24 maxlen: 24
79.176.34.0/24 maxlen: 24
79.176.43.0/24 maxlen: 24
79.176.52.0/24 maxlen: 24
79.176.54.0/24 maxlen: 24
79.176.58.0/24 maxlen: 24
79.176.60.0/24 maxlen: 24
79.176.66.0/24 maxlen: 24
79.176.68.0/24 maxlen: 24
79.176.71.0/24 maxlen: 24
79.176.72.0/24 maxlen: 24
79.176.73.0/24 maxlen: 24
79.176.74.0/24 maxlen: 24
79.176.75.0/24 maxlen: 24
79.176.76.0/24 maxlen: 24
79.176.81.0/24 maxlen: 24
79.176.82.0/24 maxlen: 24
79.176.85.0/24 maxlen: 24
79.176.86.0/24 maxlen: 24
79.176.88.0/24 maxlen: 24
79.176.89.0/24 maxlen: 24
79.176.90.0/24 maxlen: 24
79.176.91.0/24 maxlen: 24
79.176.93.0/24 maxlen: 24
79.176.95.0/24 maxlen: 24
79.176.97.0/24 maxlen: 24
79.176.98.0/24 maxlen: 24
79.182.129.0/24 maxlen: 24
109.65.28.0/24 maxlen: 24
109.66.62.0/23 maxlen: 24
109.66.64.0/23 maxlen: 24
109.66.82.0/23 maxlen: 24
109.66.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:75:00:09:03:84:5f:68:e9:4d:11:d6:b3:2f:ce:95:ee:4b:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Nov 3 14:08:22 2026 GMT
Not After : Nov 2 14:13:22 2027 GMT
Subject: CN=3AA95EA5E2315314F1EE136D442A2B6CB17487A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:2a:0f:fa:7b:09:5c:b1:d1:aa:3f:9e:4a:
8a:ec:1f:27:05:db:cd:99:fa:03:7a:72:a9:c0:23:
2a:73:db:7a:0c:6f:f9:d5:08:46:44:5a:31:fb:d3:
e2:f3:7c:09:f5:1e:94:16:58:37:7f:32:9a:d1:ed:
ad:7c:bc:db:5b:78:5a:04:09:fb:08:76:2f:72:dd:
ea:79:88:bd:61:07:b7:74:6f:58:b2:0a:e8:2b:9f:
39:5e:2c:ef:d3:7d:0c:c4:2c:db:15:37:43:1c:2e:
f5:e0:f8:18:9e:b3:4f:18:e7:63:19:13:ff:14:8a:
12:0b:57:71:f7:5a:f9:c4:bb:f1:9c:09:3c:ea:2f:
05:01:bc:1b:f3:d5:a0:53:b8:21:b5:b7:ce:47:1c:
d2:58:cd:7c:75:34:fa:ce:0f:53:a8:56:6f:7a:8b:
c9:a7:af:3f:5f:18:84:49:c0:e3:d0:79:78:90:3e:
d4:c7:22:6b:57:b0:52:4e:b5:e8:01:8b:7e:bf:09:
6a:18:cc:25:7d:be:3c:bc:fd:90:c6:d0:5d:5c:f2:
ff:65:8b:d1:2a:8b:5c:9f:28:d5:da:63:bc:70:96:
4c:8b:cd:1c:9b:4d:21:c3:72:6d:2f:15:0b:22:e6:
db:8d:ab:8e:9e:1e:35:be:24:65:61:ef:30:48:73:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:5E:A5:E2:31:53:14:F1:EE:13:6D:44:2A:2B:6C:B1:74:87:A5
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.19.0-79.176.20.255
79.176.22.0/24
79.176.32.0/24
79.176.34.0/24
79.176.43.0/24
79.176.52.0/24
79.176.54.0/24
79.176.58.0/24
79.176.60.0/24
79.176.66.0/24
79.176.68.0/24
79.176.71.0-79.176.76.255
79.176.81.0-79.176.82.255
79.176.85.0-79.176.86.255
79.176.88.0/22
79.176.93.0/24
79.176.95.0/24
79.176.97.0-79.176.98.255
79.182.129.0/24
109.65.28.0/24
109.66.62.0-109.66.65.255
109.66.82.0/23
109.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
e2:14:aa:49:5b:f0:96:b7:38:2d:b1:37:34:58:d8:0d:2c:08:
f7:ab:58:8b:00:a7:cd:6d:a1:a1:e1:7f:4a:d7:77:8f:60:5e:
6a:d5:22:3a:66:9d:21:51:3b:61:37:4e:5a:d9:1c:b6:94:0d:
ab:64:e8:1e:4a:1d:b5:58:a7:7f:7a:35:78:32:e9:05:6a:f8:
2d:8a:e9:55:f2:c0:54:63:92:be:13:fb:29:a6:38:7c:06:bc:
d4:d1:b4:26:91:c2:0b:2c:9c:ba:23:b1:98:fd:29:04:4b:f8:
5e:75:e6:c9:56:ae:f5:f8:f8:88:99:48:d3:6c:52:b0:62:7a:
e8:01:92:d8:a7:78:88:1e:cd:3f:51:1c:e5:bf:aa:b7:1e:e3:
b7:43:4e:04:be:a4:ad:d2:48:59:ce:10:9c:2a:f9:01:a2:89:
9b:48:65:f9:5d:03:54:c5:a3:c9:c9:d0:c3:66:44:2c:ac:be:
aa:db:39:12:31:d0:5e:f2:27:4d:07:30:2d:a9:24:51:cc:63:
9c:08:9e:5d:b7:b8:53:42:0a:4a:16:7c:30:fe:e9:7c:e4:ef:
cc:6f:d2:34:08:6d:79:f8:2a:c0:89:77:55:20:f9:af:1a:f6:
eb:45:85:d0:e2:b1:0d:aa:54:b8:08:e5:83:79:b6:fe:de:55:
f4:21:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 09:06:35 2026 by rpki-client