Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: wgYU1CYgOHS5Inml3kdf3JcvcX03DuLezSnTzSPBxlE=
Subject key identifier: 23:42:27:5A:7A:EF:5E:3E:DF:37:BC:A0:7A:FA:64:47:1C:3E:E5:18
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 49220D9C9012692A1042F74644B31F52950CFE87
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS21859.roa
Signing time: Sun 04 Oct 2026 00:51:37 +0000
ROA not before: Sun 04 Oct 2026 00:46:37 +0000
ROA not after: Sun 03 Oct 2027 00:51:37 +0000
asID: 21859
IP address blocks: 79.176.19.0/24 maxlen: 24
79.176.20.0/24 maxlen: 24
79.176.22.0/24 maxlen: 24
79.176.32.0/24 maxlen: 24
79.176.34.0/24 maxlen: 24
79.176.43.0/24 maxlen: 24
79.176.52.0/24 maxlen: 24
79.176.54.0/24 maxlen: 24
79.176.58.0/24 maxlen: 24
79.176.60.0/24 maxlen: 24
79.176.66.0/24 maxlen: 24
79.176.68.0/24 maxlen: 24
79.176.71.0/24 maxlen: 24
79.176.72.0/24 maxlen: 24
79.176.73.0/24 maxlen: 24
79.176.74.0/24 maxlen: 24
79.176.75.0/24 maxlen: 24
79.176.76.0/24 maxlen: 24
79.176.81.0/24 maxlen: 24
79.176.82.0/24 maxlen: 24
79.176.85.0/24 maxlen: 24
79.176.86.0/24 maxlen: 24
79.176.88.0/24 maxlen: 24
79.176.89.0/24 maxlen: 24
79.176.90.0/24 maxlen: 24
79.176.91.0/24 maxlen: 24
79.176.93.0/24 maxlen: 24
79.176.95.0/24 maxlen: 24
79.176.97.0/24 maxlen: 24
79.176.98.0/24 maxlen: 24
109.66.62.0/23 maxlen: 24
109.66.64.0/23 maxlen: 24
109.66.82.0/23 maxlen: 24
109.66.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:22:0d:9c:90:12:69:2a:10:42:f7:46:44:b3:1f:52:95:0c:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:37 2026 GMT
Not After : Oct 3 00:51:37 2027 GMT
Subject: CN=2342275A7AEF5E3EDF37BCA07AFA64471C3EE518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:4a:49:f6:01:f4:b4:ed:5d:22:82:87:04:
dd:56:2c:b8:b0:82:c7:63:4e:20:5f:ca:e3:bc:37:
61:10:79:1b:91:a4:79:73:b9:ef:16:72:ff:3c:e6:
a7:f0:01:2b:2d:ca:f9:98:ac:a2:37:8a:b8:7a:1e:
8b:65:61:0a:57:18:1b:bb:84:d8:68:32:91:c7:9b:
eb:22:41:58:2a:c7:d2:7c:bd:01:e3:d4:55:09:82:
eb:8d:a3:78:b9:ce:6b:86:d6:e0:4f:e2:75:3b:09:
40:dc:f3:ba:d7:20:69:53:a4:fb:e1:dd:02:fb:4e:
65:59:e9:f6:5c:14:5f:78:d6:99:d4:50:b4:29:6a:
4d:b9:b0:7b:08:42:66:81:45:13:1b:77:36:59:cb:
7f:da:6b:3d:ce:6e:08:17:12:46:c8:35:5a:4c:a7:
f1:36:07:66:56:92:e2:b8:ef:9d:30:58:89:c0:38:
81:e4:ea:c6:c0:15:03:5f:98:af:8a:ea:5e:b9:d2:
8d:65:59:5d:18:88:39:33:e0:63:5a:8c:38:08:3d:
36:b1:90:4c:59:2c:c4:1b:09:ae:e7:67:95:a8:fe:
8f:28:eb:ec:e7:41:48:64:0d:79:5d:32:92:2a:fd:
22:25:7b:1a:75:a1:3f:3c:83:14:e1:08:15:1a:2d:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:27:5A:7A:EF:5E:3E:DF:37:BC:A0:7A:FA:64:47:1C:3E:E5:18
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.19.0-79.176.20.255
79.176.22.0/24
79.176.32.0/24
79.176.34.0/24
79.176.43.0/24
79.176.52.0/24
79.176.54.0/24
79.176.58.0/24
79.176.60.0/24
79.176.66.0/24
79.176.68.0/24
79.176.71.0-79.176.76.255
79.176.81.0-79.176.82.255
79.176.85.0-79.176.86.255
79.176.88.0/22
79.176.93.0/24
79.176.95.0/24
79.176.97.0-79.176.98.255
109.66.62.0-109.66.65.255
109.66.82.0/23
109.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
70:cb:06:54:1d:2e:4e:db:18:23:02:2c:6f:f0:50:b1:a2:c7:
8e:95:ed:e0:53:94:e4:6a:03:2d:a7:d6:cf:97:ec:0b:c2:87:
71:bb:51:07:f7:b7:5b:1d:ba:5a:0c:68:c9:74:28:28:1f:80:
12:4d:09:87:0d:ba:c1:c7:64:33:7d:b2:23:ba:bd:4e:08:1f:
c4:29:aa:4e:81:4b:a7:47:f8:66:a3:2b:c9:56:dd:97:aa:2e:
fe:c0:47:ad:70:9c:74:8b:bf:a9:87:0d:79:a1:28:89:96:71:
24:2c:f3:26:41:39:18:ea:79:7b:20:dd:0d:cb:71:6d:3e:57:
17:3f:1b:0e:08:99:b6:36:e6:78:b0:69:25:fb:b5:a0:f2:2f:
71:75:8e:ec:2b:3b:9c:3b:c6:eb:7d:33:2d:15:f5:29:c0:a0:
44:e7:10:ab:50:1f:49:f4:14:34:ec:09:df:72:d8:fe:cc:c2:
1f:50:3a:dd:90:eb:27:18:83:92:9c:03:7f:e2:3c:2c:52:16:
88:01:74:9c:96:b4:ce:56:f2:24:57:24:40:21:37:08:d9:f6:
71:35:ef:6f:e6:ed:09:23:1f:f3:43:38:88:8c:ac:c5:4f:37:
17:e2:65:95:71:87:2a:53:3d:5b:85:b0:3a:e0:17:2d:e0:4f:
70:1c:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:13:35 2026 by rpki-client