Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: LQEZrBbrbdXOQuZm2rh9Y8HtHM7FSgl1NJO2IeoxpUc=
Subject key identifier: 68:E9:BD:D5:C6:15:0B:65:56:38:B6:A7:36:0B:1D:C0:9E:C1:CE:51
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 472A15AFCF3E15135A23E5097E48F040E8E355AF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
Signing time: Thu 16 Jul 2026 00:01:23 +0000
ROA not before: Wed 15 Jul 2026 23:56:23 +0000
ROA not after: Thu 15 Jul 2027 00:01:23 +0000
asID: 39521
IP address blocks: 82.21.58.0/24 maxlen: 24
82.21.112.0/24 maxlen: 24
82.21.116.0/24 maxlen: 24
82.21.126.0/24 maxlen: 24
82.21.165.0/24 maxlen: 24
82.22.143.0/24 maxlen: 24
82.22.157.0/24 maxlen: 24
82.22.186.0/24 maxlen: 24
82.23.188.0/24 maxlen: 24
82.23.191.0/24 maxlen: 24
82.47.200.0/24 maxlen: 24
84.75.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2a:15:af:cf:3e:15:13:5a:23:e5:09:7e:48:f0:40:e8:e3:55:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 15 23:56:23 2026 GMT
Not After : Jul 15 00:01:23 2027 GMT
Subject: CN=68E9BDD5C6150B655638B6A7360B1DC09EC1CE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:73:a2:47:dc:2a:c1:e1:02:ff:94:61:7c:
84:fe:cd:3e:69:9f:88:49:ff:28:dd:63:e2:8b:da:
b1:96:96:fc:b3:14:3f:b2:6f:14:d8:6d:41:fc:3f:
56:3c:ec:bb:36:c6:58:82:55:ea:d4:02:bf:a0:0e:
a4:b1:1f:32:fb:3b:f2:f3:6f:ba:a9:89:4b:29:49:
f1:f1:5c:7d:cf:0e:0c:b9:a6:b8:9c:43:fe:c3:86:
8d:0b:8a:d8:c1:0a:cb:c9:b9:cb:dc:d4:ed:a2:d9:
ee:88:99:ae:16:e5:71:a7:79:7b:a8:30:6f:b3:ab:
50:67:7f:59:fc:61:c0:15:f3:1a:7c:45:0c:47:d8:
4a:66:2f:6b:23:1e:a4:c8:1d:02:39:13:c8:be:d8:
23:a4:e6:0d:f6:f7:e4:2f:e2:58:88:c8:8b:a1:c4:
d4:44:a6:4d:4d:c0:a6:49:e0:6d:0c:fb:bd:44:5c:
94:48:06:b7:b2:64:63:6d:b8:5f:da:6c:cf:85:18:
2e:9d:e7:0b:3b:9a:26:05:86:77:e5:ff:6c:77:d5:
d6:ff:3e:96:f4:54:47:c4:89:00:88:2b:eb:0d:0e:
dd:6f:2a:ec:0d:33:5a:ec:1b:a4:c0:76:3a:f8:35:
28:0a:e3:03:8e:dd:48:f4:64:b3:bc:ca:af:ec:72:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:BD:D5:C6:15:0B:65:56:38:B6:A7:36:0B:1D:C0:9E:C1:CE:51
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.58.0/24
82.21.112.0/24
82.21.116.0/24
82.21.126.0/24
82.21.165.0/24
82.22.143.0/24
82.22.157.0/24
82.22.186.0/24
82.23.188.0/24
82.23.191.0/24
82.47.200.0/24
84.75.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:1b:10:ae:65:0e:67:31:c8:4c:0a:be:75:3a:18:fa:93:
79:06:f2:a1:23:7e:b8:df:16:0b:14:ee:e6:32:f6:30:6b:a1:
c0:87:5a:f0:f5:1f:8c:f0:fd:2c:15:8b:e4:ba:e8:ea:b1:ce:
94:b8:e5:b7:63:d8:25:82:36:e5:97:6e:b7:f6:fa:ee:38:be:
11:1b:ce:59:f6:31:65:bb:6a:b8:54:e7:92:09:7c:76:d5:68:
dc:55:0f:96:2b:79:45:aa:5e:69:85:14:fe:32:85:1c:eb:a5:
7a:cf:5a:11:f6:65:2a:aa:4d:05:77:0e:8d:d9:36:79:a4:a3:
ba:7e:e8:d6:8c:75:79:d1:e4:1a:09:66:92:5e:b9:08:0c:ec:
cd:19:74:8c:3f:af:58:5d:5e:d0:53:94:d1:82:dd:d2:06:c5:
b6:fe:bd:7d:e8:48:bd:89:4a:db:4e:9b:54:4c:5b:03:cb:e5:
62:cc:bc:70:af:12:c9:a6:40:22:d3:7d:66:31:cd:19:96:6d:
03:82:e9:d3:af:4d:1c:1d:c2:45:41:99:9d:75:b7:45:bb:ff:
78:cd:ae:43:6a:9e:ae:09:18:13:ff:b9:de:6b:50:e8:34:e4:
86:60:f5:b3:0f:51:03:dc:18:99:dd:8a:f5:67:29:4a:bb:23:
ed:5c:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:18:36 2026 by rpki-client