Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: +Sye2U70GLtBiCqFWWS1ou4bwmAXKH8RyZ4XkfypB5Y=
Subject key identifier: 52:35:B9:F1:77:09:5C:39:35:88:7C:B3:59:D4:2F:02:C2:1D:3B:49
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 771A231724525EF1E04CBA1B2904FF9436850F0C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21840.roa
Signing time: Mon 14 Jul 2025 09:26:30 +0000
ROA not before: Mon 14 Jul 2025 09:21:30 +0000
ROA not after: Mon 13 Jul 2026 09:26:30 +0000
asID: 21840
IP address blocks: 96.62.247.0/24 maxlen: 24
143.14.132.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
150.241.198.0/24 maxlen: 24
155.117.60.0/24 maxlen: 24
167.148.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 07:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1a:23:17:24:52:5e:f1:e0:4c:ba:1b:29:04:ff:94:36:85:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 14 09:21:30 2025 GMT
Not After : Jul 13 09:26:30 2026 GMT
Subject: CN=5235B9F177095C3935887CB359D42F02C21D3B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:f4:5c:08:31:e9:2c:ac:c9:d4:6d:f1:74:
3b:27:2e:73:d6:7d:6e:c9:9e:d2:8a:80:6f:da:c0:
f4:94:5e:28:f7:32:8c:13:6f:9f:a2:6c:e1:40:c4:
f0:ac:28:f0:53:2f:4d:55:41:78:d9:1e:78:f9:f1:
02:1c:27:c5:f0:3c:e3:14:92:64:20:28:b2:f8:80:
f2:5f:3e:26:f3:5d:5a:f0:69:3e:7a:e1:89:9a:85:
37:3f:c6:a0:25:fd:10:23:78:b2:6a:77:2e:53:43:
7f:d7:11:01:54:b1:81:47:0a:83:69:6e:d8:ac:fd:
85:40:99:9d:79:bb:66:77:1c:7b:f8:59:56:2c:32:
ee:14:2d:4a:a1:b2:5d:15:7d:bd:73:7e:01:c8:62:
35:96:57:b1:d4:20:1b:09:fa:09:22:60:ef:5a:88:
80:38:d8:f6:b0:16:72:c5:d5:d4:6e:14:c3:2d:e7:
fb:c8:65:b4:dc:00:82:55:9f:ce:b9:ba:0d:27:6f:
39:b3:93:0f:63:6d:31:80:e8:43:69:41:19:8d:7d:
19:a8:8f:57:82:e1:9b:c8:aa:1e:43:1f:99:b2:b9:
ba:c4:6a:cd:4e:de:3c:56:f2:b1:e3:d7:bb:91:3e:
af:f0:54:e0:77:9e:34:02:9d:52:23:0d:de:87:97:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:35:B9:F1:77:09:5C:39:35:88:7C:B3:59:D4:2F:02:C2:1D:3B:49
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.247.0/24
143.14.132.0/24
148.135.173.0/24
150.241.198.0/24
155.117.60.0/24
167.148.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a6:40:68:48:99:c4:12:99:14:de:05:02:be:31:b2:49:69:
a1:e6:a1:9a:0e:35:fd:b6:e6:ff:74:31:10:a8:99:45:8a:47:
a2:08:e2:c6:05:0a:0e:b3:a5:be:b0:6e:bc:1d:b9:a8:1e:74:
77:6f:70:db:68:8b:f7:ab:67:71:74:4e:bf:f1:4a:fe:7d:8a:
00:95:70:50:21:18:a7:46:52:fe:29:9d:dd:3c:0d:be:c9:32:
5f:09:4c:7a:45:d2:92:1c:e8:b7:2f:96:df:c9:98:78:3c:d2:
1b:e8:bd:03:03:17:2e:bd:a4:0c:23:46:74:0c:4a:71:7e:7e:
89:b0:b0:21:9c:86:10:72:be:99:3c:f2:e4:01:6d:5f:09:be:
47:ee:bd:47:df:12:5f:33:d3:cc:c8:26:5d:d2:56:26:31:62:
25:c6:9c:80:68:fe:46:54:a6:5b:6e:47:c7:62:1f:8e:a5:f9:
30:10:44:34:a2:43:c1:31:b8:ef:aa:86:db:81:03:80:d7:69:
15:0e:2e:30:13:03:a8:70:1f:a9:8e:e0:38:99:0b:47:77:c4:
ac:cd:2a:15:da:df:9d:8c:f6:cb:74:61:a2:4c:a8:f7:4f:fb:
7b:ab:d7:87:fc:0b:04:12:12:d0:61:84:76:4b:83:f7:e6:b5:
62:81:52:f4
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUdxojFyRSXvHgTLobKQT/lDaFDwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MTQwOTIxMzBaFw0yNjA3MTMwOTI2MzBaMDMxMTAvBgNV
BAMTKDUyMzVCOUYxNzcwOTVDMzkzNTg4N0NCMzU5RDQyRjAyQzIxRDNCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJfRcCDHpLKzJ1G3xdDsnLnPW
fW7JntKKgG/awPSUXij3MowTb5+ibOFAxPCsKPBTL01VQXjZHnj58QIcJ8XwPOMU
kmQgKLL4gPJfPibzXVrwaT564YmahTc/xqAl/RAjeLJqdy5TQ3/XEQFUsYFHCoNp
btis/YVAmZ15u2Z3HHv4WVYsMu4ULUqhsl0Vfb1zfgHIYjWWV7HUIBsJ+gkiYO9a
iIA42PawFnLF1dRuFMMt5/vIZbTcAIJVn865ug0nbzmzkw9jbTGA6ENpQRmNfRmo
j1eC4ZvIqh5DH5myubrEas1O3jxW8rHj17uRPq/wVOB3njQCnVIjDd6Hl3EdAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUUjW58XcJXDk1iHyzWdQvAsIdO0kwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE4NDAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABgPvcD
BACPDoQDBACUh60DBACW8cYDBACbdTwDBACnlMQwDQYJKoZIhvcNAQELBQADggEB
AK2mQGhImcQSmRTeBQK+MbJJaaHmoZoONf225v90MRComUWKR6II4sYFCg6zpb6w
brwduagedHdvcNtoi/erZ3F0Tr/xSv59igCVcFAhGKdGUv4pnd08Db7JMl8JTHpF
0pIc6Lcvlt/JmHg80hvovQMDFy69pAwjRnQMSnF+fomwsCGchhByvpk88uQBbV8J
vkfuvUffEl8z08zIJl3SViYxYiXGnIBo/kZUpltuR8diH46l+TAQRDSiQ8ExuO+q
htuBA4DXaRUOLjATA6hwH6mO4DiZC0d3xKzNKhXa352M9st0YaJMqPdP+3ur14f8
CwQSEtBhhHZLg/fmtWKBUvQ=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:46:09 2025 by rpki-client