Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: ZsFpwTagIdAfG+DSc6fQKuZISwT33JJ/lInuwkNa31Y=
Subject key identifier: 08:83:ED:AD:43:8F:E3:A5:1A:03:A2:DD:0A:30:44:39:00:97:26:E8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 13FB07FFCD4022D4D788743DE49AF0DE2251D1CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21840.roa
Signing time: Fri 25 Sep 2026 00:06:54 +0000
ROA not before: Fri 25 Sep 2026 00:01:54 +0000
ROA not after: Fri 24 Sep 2027 00:06:54 +0000
asID: 21840
IP address blocks: 82.26.160.0/24 maxlen: 24
178.83.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fb:07:ff:cd:40:22:d4:d7:88:74:3d:e4:9a:f0:de:22:51:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 25 00:01:54 2026 GMT
Not After : Sep 24 00:06:54 2027 GMT
Subject: CN=0883EDAD438FE3A51A03A2DD0A304439009726E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:aa:35:66:35:a2:d9:17:48:a2:a4:ec:58:
d6:f9:34:d3:0b:00:0b:23:a6:c5:f6:01:ca:80:0c:
ab:af:40:3a:01:13:05:c4:c6:00:19:1b:3a:cc:46:
7a:b5:95:06:8d:a5:a2:8b:1f:0b:8e:f5:cc:ef:79:
d4:bc:43:2e:1e:19:b8:af:3e:a7:5b:41:b8:71:bd:
4d:50:7a:d4:80:58:f7:b1:41:64:ba:b5:3a:78:6b:
4c:04:3c:22:34:71:a6:96:65:c8:89:3c:b6:2b:4d:
c3:cc:7b:d0:85:87:55:11:33:ef:0c:7e:16:80:06:
0c:f3:33:70:35:37:28:79:5a:48:00:ef:67:47:cd:
58:11:c9:b6:b5:6a:86:b8:8b:c9:cd:ce:ef:c7:38:
a2:cb:f6:ea:00:f5:07:82:bc:71:e7:3b:1c:e1:35:
93:8e:8c:d8:58:4b:10:77:e8:9a:91:c3:dd:21:57:
4b:13:5c:23:0e:d7:8c:a9:e6:71:ae:a4:ea:7b:eb:
dd:f0:93:b9:80:96:2c:7c:a2:92:30:46:e1:f5:d5:
aa:5e:98:a0:48:da:37:3d:45:da:12:87:0f:ed:d5:
5c:c6:e2:eb:12:66:8d:1c:29:37:72:55:1a:1c:8e:
dd:4e:fb:df:c7:03:57:9b:92:09:81:d9:a0:2b:eb:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:ED:AD:43:8F:E3:A5:1A:03:A2:DD:0A:30:44:39:00:97:26:E8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.160.0/24
178.83.158.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:95:a7:a1:13:60:45:be:d5:3c:c6:90:c4:be:86:23:38:
b8:31:e4:ac:73:6d:ef:93:77:5d:32:ec:8a:2a:f9:65:ce:86:
a0:58:f8:ca:41:9b:62:89:c9:7e:d3:b1:bf:55:a1:a5:b4:3d:
2f:b5:76:8d:1c:dd:5e:6f:81:88:8f:3b:14:67:82:eb:be:04:
11:a0:04:59:d2:a3:61:a7:54:c3:c3:be:05:a7:7e:11:1c:1f:
b5:21:f6:9f:f8:08:40:27:05:42:8c:41:22:71:6b:f5:af:8b:
91:d9:a6:f6:65:28:ae:b2:98:8e:8f:5f:1a:d2:a8:4c:f9:6f:
3e:c4:c3:7b:62:21:e9:3f:da:e6:86:ad:1e:ed:45:91:7e:cf:
dd:a4:a7:b7:80:fd:7a:83:22:07:e6:fb:e1:87:7b:49:7f:0c:
e6:9f:99:d7:1f:5f:85:23:28:58:6c:be:40:ed:c3:d1:4c:be:
6c:54:6e:55:12:90:fa:7a:60:f1:b4:e4:d9:a7:5f:0c:fe:15:
b3:cd:75:79:41:28:de:70:de:02:a6:ae:c7:cb:04:51:77:4a:
e3:8f:ce:5e:00:ae:14:d1:e9:66:63:f4:cc:e0:c9:fb:75:a8:
d9:f8:07:89:85:c0:fc:76:2e:a6:fd:8d:49:a7:e9:aa:0d:02:
e8:96:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:41:52 2026 by rpki-client