Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: Lpj0b3OlNbZfujWX8tbQH0ICWsl6Q/+FiB3CE8xmrWk=
Subject key identifier: 61:42:DB:44:DB:D6:30:B2:BD:04:E8:35:67:2F:96:13:BC:2B:BF:23
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 39568EA0568AE1B0C903847A5F8D70927BDE7624
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS21859.roa
Signing time: Wed 30 Sep 2026 12:05:55 +0000
ROA not before: Wed 30 Sep 2026 12:00:55 +0000
ROA not after: Wed 29 Sep 2027 12:05:55 +0000
asID: 21859
IP address blocks: 51.194.215.0/24 maxlen: 24
51.241.127.0/24 maxlen: 24
94.118.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:56:8e:a0:56:8a:e1:b0:c9:03:84:7a:5f:8d:70:92:7b:de:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 30 12:00:55 2026 GMT
Not After : Sep 29 12:05:55 2027 GMT
Subject: CN=6142DB44DBD630B2BD04E835672F9613BC2BBF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:2d:ec:9e:60:2e:b0:c6:40:d6:c9:d9:6d:
77:53:3a:ff:8b:bc:49:33:a8:17:07:ed:e5:c3:11:
e6:70:bf:35:c4:a4:9b:ae:1f:75:b0:67:fd:16:3e:
e4:49:d1:d7:0f:3d:cb:d4:89:27:fa:c6:3d:69:45:
5d:05:15:ab:bd:f3:b1:d0:c9:4e:24:8a:4a:c3:93:
81:83:e7:a7:e2:23:22:fb:f8:bb:4f:36:33:a5:d3:
c1:28:2e:ce:fb:81:2f:f7:6d:72:0b:7d:d1:a3:53:
aa:3f:92:8c:6b:35:60:a4:4b:2e:de:a5:ff:ca:95:
a7:34:0b:de:63:0e:06:53:99:f8:57:41:7a:fe:a9:
73:35:cc:47:27:d1:93:ca:cc:f3:6d:be:05:d4:b0:
b4:19:8a:c3:9b:51:68:10:f0:27:32:da:ca:c0:f1:
82:67:40:6c:e3:ba:2c:10:4f:c6:19:f4:b0:45:1b:
ea:87:4d:c7:ec:dc:98:be:fc:f6:ba:cd:d6:a3:ce:
f3:43:8c:cf:ce:67:a5:23:1c:d4:1b:ba:33:e0:c6:
7b:45:65:1c:af:3a:12:cc:1a:9a:90:a9:40:76:f8:
7f:6d:51:61:09:8d:70:e1:e1:e4:04:f6:f8:54:15:
d8:8f:80:b7:78:10:6b:97:5b:2d:be:87:c6:c1:8e:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:DB:44:DB:D6:30:B2:BD:04:E8:35:67:2F:96:13:BC:2B:BF:23
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.215.0/24
51.241.127.0/24
94.118.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:08:d4:9e:98:64:29:78:9d:00:71:91:b0:7e:0a:54:c3:5c:
36:e1:4a:b2:20:e0:37:4d:df:2c:90:a1:68:a5:14:ba:76:67:
4d:1e:aa:2d:e0:e7:43:b1:cd:bb:85:5f:87:79:1f:91:47:09:
23:73:ee:9d:b3:50:42:cd:7f:67:9c:9a:64:c5:a1:14:31:2a:
e0:f2:b6:bf:e6:66:f0:a7:96:c5:0f:bd:02:21:16:0d:3b:9b:
be:73:72:e2:68:0f:1b:44:b8:d8:64:f8:bd:f5:ac:f0:a4:39:
a2:6b:8c:e6:9a:d1:20:24:1f:13:5a:07:1d:cd:23:52:03:c0:
34:2c:8f:49:74:1c:4d:a5:97:5b:f5:f6:db:5a:76:9c:2a:c9:
ad:5e:46:75:54:70:41:36:a6:86:a8:22:5b:9f:9e:d3:6a:40:
c4:94:9f:6f:23:4a:1c:a8:18:56:df:c6:c2:ae:1a:e7:b0:ca:
fa:6e:a2:d1:4b:9a:8e:5b:aa:8a:46:f2:dc:16:b2:a7:49:4c:
a2:85:f8:82:50:e8:99:a9:62:5d:24:ea:d2:dc:7d:19:e9:f6:
63:87:8c:d3:40:74:95:8c:58:60:73:d7:e5:89:12:ff:7a:e1:
cd:4d:8a:b2:f3:42:c1:25:c1:c2:59:7b:a6:39:db:8f:b5:15:
b5:0d:34:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 17:45:15 2026 by rpki-client