Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: 0XUPHQMu+vlCMe9NUbfNII0jhDt9BTAs/IcQLSDIois=
Subject key identifier: 76:AF:EB:31:E2:2D:49:02:38:47:CA:40:DC:6B:53:AF:B5:76:89:18
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 068BC8FF467880E71C47AE596DF00995B36B6365
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS21859.roa
Signing time: Mon 05 Oct 2026 06:13:49 +0000
ROA not before: Mon 05 Oct 2026 06:08:49 +0000
ROA not after: Mon 04 Oct 2027 06:13:49 +0000
asID: 21859
IP address blocks: 79.176.19.0/24 maxlen: 24
79.176.20.0/24 maxlen: 24
79.176.22.0/24 maxlen: 24
79.176.32.0/24 maxlen: 24
79.176.34.0/24 maxlen: 24
79.176.43.0/24 maxlen: 24
79.176.52.0/24 maxlen: 24
79.176.54.0/24 maxlen: 24
79.176.58.0/24 maxlen: 24
79.176.60.0/24 maxlen: 24
79.176.66.0/24 maxlen: 24
79.176.68.0/24 maxlen: 24
79.176.71.0/24 maxlen: 24
79.176.72.0/24 maxlen: 24
79.176.73.0/24 maxlen: 24
79.176.74.0/24 maxlen: 24
79.176.75.0/24 maxlen: 24
79.176.76.0/24 maxlen: 24
79.176.81.0/24 maxlen: 24
79.176.82.0/24 maxlen: 24
79.176.85.0/24 maxlen: 24
79.176.86.0/24 maxlen: 24
79.176.88.0/24 maxlen: 24
79.176.89.0/24 maxlen: 24
79.176.90.0/24 maxlen: 24
79.176.91.0/24 maxlen: 24
79.176.93.0/24 maxlen: 24
79.176.95.0/24 maxlen: 24
79.176.97.0/24 maxlen: 24
79.176.98.0/24 maxlen: 24
109.66.62.0/23 maxlen: 24
109.66.64.0/23 maxlen: 24
109.66.82.0/23 maxlen: 24
109.66.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8b:c8:ff:46:78:80:e7:1c:47:ae:59:6d:f0:09:95:b3:6b:63:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:08:49 2026 GMT
Not After : Oct 4 06:13:49 2027 GMT
Subject: CN=76AFEB31E22D49023847CA40DC6B53AFB5768918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:54:a2:96:ec:1c:37:68:c3:f8:b6:cf:48:
a5:b8:8e:b9:4f:fd:02:d2:ab:c3:59:c0:ff:ce:a6:
2a:97:d2:6e:35:24:64:64:00:15:20:72:2b:55:de:
52:5d:87:2c:cf:89:a4:55:c6:c5:3f:2b:1f:9f:28:
77:aa:e8:00:b5:0e:59:e6:2e:57:7b:82:d8:b0:7f:
5b:69:67:aa:02:25:f2:4d:c8:76:69:c4:5f:0a:a4:
2c:b0:08:2c:8b:e7:3b:f3:55:35:c2:3c:b2:11:91:
de:26:b2:51:ab:b1:22:70:a7:ab:64:5e:28:e1:10:
5d:f6:2d:f1:5b:fc:06:ec:e6:4e:4f:76:84:46:e4:
93:64:b0:a4:fa:ea:4d:fb:87:1d:d9:12:ff:ab:38:
b6:6a:e5:f9:49:ea:91:a6:d0:8a:d0:06:98:5d:32:
e4:b0:f0:91:ce:a0:db:67:7c:a6:fa:4a:09:7e:cc:
0d:97:5d:44:97:38:5f:b3:3a:c6:9f:3c:3a:4b:d0:
8f:9e:19:81:88:3b:52:c2:a2:83:5f:45:d3:e9:22:
1a:3e:b7:4c:07:9b:0b:4e:50:4f:58:3f:9c:74:6f:
76:f3:07:64:40:b5:c8:93:d6:ef:b0:d4:51:b7:5a:
c3:a9:23:f9:dd:04:3f:73:36:78:9e:81:41:fb:9d:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:EB:31:E2:2D:49:02:38:47:CA:40:DC:6B:53:AF:B5:76:89:18
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.19.0-79.176.20.255
79.176.22.0/24
79.176.32.0/24
79.176.34.0/24
79.176.43.0/24
79.176.52.0/24
79.176.54.0/24
79.176.58.0/24
79.176.60.0/24
79.176.66.0/24
79.176.68.0/24
79.176.71.0-79.176.76.255
79.176.81.0-79.176.82.255
79.176.85.0-79.176.86.255
79.176.88.0/22
79.176.93.0/24
79.176.95.0/24
79.176.97.0-79.176.98.255
109.66.62.0-109.66.65.255
109.66.82.0/23
109.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:9d:08:9f:f7:a1:6a:d2:10:e7:ab:55:19:f2:f0:35:c1:2a:
b7:a6:1f:53:a6:11:dd:47:1f:09:ba:15:3a:51:f6:f1:ea:78:
dc:2a:4b:70:b6:fe:2d:7b:31:5e:5e:ed:db:ca:c8:f3:45:06:
fd:27:eb:34:98:9d:eb:47:d4:9b:19:f9:52:2c:2b:78:12:03:
1f:1e:08:a3:7e:a0:a0:76:63:e6:0a:b3:93:87:9b:22:00:6e:
2d:3d:5a:bb:0c:dc:b0:33:5b:87:29:4b:87:41:67:de:f4:05:
b0:f1:42:e8:33:dd:65:c5:b0:a9:d2:c1:02:e2:c6:63:66:71:
d8:bb:2a:5c:14:f5:b3:14:1e:9f:15:02:f8:24:eb:c8:e8:fd:
d3:00:44:90:ae:4c:06:c5:f6:d4:fe:fe:e5:88:09:d8:1c:29:
c7:c1:d5:3c:89:7a:8c:42:54:41:e3:9f:45:04:58:30:92:14:
8a:9f:3f:f8:c6:b7:d6:d6:28:0c:21:1a:6d:9e:93:99:cf:63:
cf:1c:bd:c7:8a:e2:84:c9:77:3a:11:7e:cb:ee:fb:b8:36:b5:
13:e4:40:d6:1f:c1:91:51:d5:31:d6:15:7c:0d:86:11:f6:4a:
70:0f:60:a2:66:de:59:e1:59:36:3f:91:cf:4a:32:96:8e:4c:
5d:79:c4:8f
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgIUBovI/0Z4gOccR65ZbfAJlbNrY2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDlaFw0yNzEwMDQwNjEzNDlaMDMxMTAvBgNV
BAMTKDc2QUZFQjMxRTIyRDQ5MDIzODQ3Q0E0MERDNkI1M0FGQjU3Njg5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYlSiluwcN2jD+LbPSKW4jrlP
/QLSq8NZwP/OpiqX0m41JGRkABUgcitV3lJdhyzPiaRVxsU/Kx+fKHeq6AC1Dlnm
Lld7gtiwf1tpZ6oCJfJNyHZpxF8KpCywCCyL5zvzVTXCPLIRkd4mslGrsSJwp6tk
XijhEF32LfFb/Abs5k5PdoRG5JNksKT66k37hx3ZEv+rOLZq5flJ6pGm0IrQBphd
MuSw8JHOoNtnfKb6Sgl+zA2XXUSXOF+zOsafPDpL0I+eGYGIO1LCooNfRdPpIho+
t0wHmwtOUE9YP5x0b3bzB2RAtciT1u+w1FG3WsOpI/ndBD9zNniegUH7nblZAgMB
AAGjggLxMIIC7TAdBgNVHQ4EFgQUdq/rMeItSQI4R8pA3GtTr7V2iRgwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG
XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg1OS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBywYIKwYBBQUHAQcBAf8Egbswgbgw
gbUEAgABMIGuMAwDBABPsBMDBABPsBQDBABPsBYDBABPsCADBABPsCIDBABPsCsD
BABPsDQDBABPsDYDBABPsDoDBABPsDwDBABPsEIDBABPsEQwDAMEAE+wRwMEAE+w
TDAMAwQAT7BRAwQAT7BSMAwDBABPsFUDBABPsFYDBAJPsFgDBABPsF0DBABPsF8w
DAMEAE+wYQMEAE+wYjAMAwQBbUI+AwQBbUJAAwQBbUJSAwQBbUJcMA0GCSqGSIb3
DQEBCwUAA4IBAQBtnQif96Fq0hDnq1UZ8vA1wSq3ph9TphHdRx8JuhU6Ufbx6njc
Kktwtv4tezFeXu3bysjzRQb9J+s0mJ3rR9SbGflSLCt4EgMfHgijfqCgdmPmCrOT
h5siAG4tPVq7DNywM1uHKUuHQWfe9AWw8ULoM91lxbCp0sEC4sZjZnHYuypcFPWz
FB6fFQL4JOvI6P3TAESQrkwGxfbU/v7liAnYHCnHwdU8iXqMQlRB459FBFgwkhSK
nz/4xrfW1igMIRptnpOZz2PPHL3HiuKEyXc6EX7L7vu4NrUT5EDWH8GRUdUx1hV8
DYYR9kpwD2CiZt5Z4Vk2P5HPSjKWjkxdecSP
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:56:00 2026 by rpki-client