Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21245.roa
File: AS21245.roa (raw, json)
Hash identifier: VQl32/ins23cfrw3UDMQLwlhKoCcb1hW54kWHOPMWcQ=
Subject key identifier: 3B:E0:FA:2B:B7:F5:A4:84:15:55:BE:1E:B8:50:90:46:11:2F:6D:72
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 055C8650D7DFBAA136C7E5266F92317F4609227C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21245.roa
Signing time: Tue 30 Jun 2026 12:34:29 +0000
ROA not before: Tue 30 Jun 2026 12:29:29 +0000
ROA not after: Tue 29 Jun 2027 12:34:29 +0000
asID: 21245
IP address blocks: 82.24.16.0/24 maxlen: 24
82.24.107.0/24 maxlen: 24
82.25.140.0/24 maxlen: 24
82.25.204.0/24 maxlen: 24
82.26.124.0/24 maxlen: 24
82.38.196.0/24 maxlen: 24
82.38.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5c:86:50:d7:df:ba:a1:36:c7:e5:26:6f:92:31:7f:46:09:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 30 12:29:29 2026 GMT
Not After : Jun 29 12:34:29 2027 GMT
Subject: CN=3BE0FA2BB7F5A4841555BE1EB8509046112F6D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d8:34:0e:c2:4b:56:e4:22:97:ff:5d:71:7f:
ba:72:3a:30:b9:e1:ab:d4:c8:7e:07:cb:a6:11:22:
bd:3e:3c:19:0b:b7:d0:e3:89:6c:18:57:de:41:60:
4d:98:48:e5:22:49:aa:fb:59:76:0d:fe:f8:6c:5c:
fc:75:2f:58:e3:37:91:d4:5a:b9:10:c3:28:08:55:
8d:a2:b9:02:05:40:f3:6c:7e:ee:a1:d6:77:e2:55:
b9:da:f8:57:b8:06:b4:da:e5:bc:22:8c:04:8a:1b:
4a:9b:33:5a:29:42:76:3f:fd:7b:ff:8a:19:64:c1:
71:05:a5:ba:d7:96:5d:84:56:2c:0b:90:ec:8a:ff:
52:c8:4b:0c:0f:7a:ee:90:e9:ec:2a:75:f9:b2:e4:
ec:19:98:26:c9:74:d5:df:de:ff:17:80:b8:06:8d:
39:0e:76:2a:c3:f3:f5:7b:bb:e7:32:95:9f:99:25:
3e:74:37:0e:32:6a:a9:b5:48:f4:1d:e5:3f:41:fe:
94:96:0f:d0:17:ac:bb:8e:e2:75:a7:75:5b:7b:cd:
0b:d8:b1:25:fc:17:1a:d4:0e:cb:89:2e:e9:5f:9d:
ac:d0:70:21:d5:77:0b:cb:8d:21:52:19:7e:79:9f:
30:a3:93:a3:75:6e:ea:ef:5d:9f:d8:1e:a8:78:df:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:FA:2B:B7:F5:A4:84:15:55:BE:1E:B8:50:90:46:11:2F:6D:72
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.16.0/24
82.24.107.0/24
82.25.140.0/24
82.25.204.0/24
82.26.124.0/24
82.38.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:55:b4:d4:7b:27:15:af:5f:2f:f2:b7:2a:57:a7:30:c5:25:
13:93:61:92:ab:9a:4f:ba:ec:ef:a1:e7:dc:0d:e3:c6:b9:fb:
eb:3b:fc:0c:63:25:9e:62:a4:16:51:45:78:1c:e2:5f:ac:31:
e1:d3:39:0c:3b:f6:91:4a:cc:02:ea:11:8c:76:ac:f8:ac:bf:
6d:7d:0f:7d:86:bc:24:56:52:fb:0c:52:3b:af:1b:14:a7:0a:
8d:ba:fc:ec:dc:c0:c0:c9:4a:7f:15:bf:79:b3:8e:51:af:0e:
5c:8b:cd:98:34:df:fa:dc:2d:f2:d6:5e:05:9a:72:7b:fb:84:
97:35:48:63:b6:9a:ec:dc:8e:79:7d:75:f1:ca:8d:48:23:90:
13:54:04:8d:ac:03:e4:b6:23:04:ea:32:68:d0:0e:1c:87:4b:
8e:e5:e2:66:a9:4a:af:9e:78:15:7a:f7:bc:2f:44:d9:20:01:
61:70:c4:ab:9b:90:cf:b6:7b:6b:94:44:f1:f1:fc:b7:45:9b:
bb:c6:de:ec:11:17:98:12:e4:0d:de:8b:91:28:54:1c:b4:0b:
8a:22:52:b2:bf:e2:4e:04:ce:de:3d:57:29:ac:66:2b:0b:bb:
e4:18:bd:a8:69:9d:c4:16:93:0c:91:04:85:3a:3f:2f:ed:5d:
6d:20:59:ac
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUBVyGUNffuqE2x+Umb5Ixf0YJInwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MzAxMjI5MjlaFw0yNzA2MjkxMjM0MjlaMDMxMTAvBgNV
BAMTKDNCRTBGQTJCQjdGNUE0ODQxNTU1QkUxRUI4NTA5MDQ2MTEyRjZENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD62DQOwktW5CKX/11xf7pyOjC5
4avUyH4Hy6YRIr0+PBkLt9DjiWwYV95BYE2YSOUiSar7WXYN/vhsXPx1L1jjN5HU
WrkQwygIVY2iuQIFQPNsfu6h1nfiVbna+Fe4BrTa5bwijASKG0qbM1opQnY//Xv/
ihlkwXEFpbrXll2EViwLkOyK/1LISwwPeu6Q6ewqdfmy5OwZmCbJdNXf3v8XgLgG
jTkOdirD8/V7u+cylZ+ZJT50Nw4yaqm1SPQd5T9B/pSWD9AXrLuO4nWndVt7zQvY
sSX8FxrUDsuJLulfnazQcCHVdwvLjSFSGX55nzCjk6N1burvXZ/YHqh43yVRAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUO+D6K7f1pIQVVb4euFCQRhEvbXIwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyNDUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABSGBAD
BABSGGsDBABSGYwDBABSGcwDBABSGnwDBAFSJsQwDQYJKoZIhvcNAQELBQADggEB
AB5VtNR7JxWvXy/ytypXpzDFJROTYZKrmk+67O+h59wN48a5++s7/AxjJZ5ipBZR
RXgc4l+sMeHTOQw79pFKzALqEYx2rPisv219D32GvCRWUvsMUjuvGxSnCo26/Ozc
wMDJSn8Vv3mzjlGvDlyLzZg03/rcLfLWXgWacnv7hJc1SGO2muzcjnl9dfHKjUgj
kBNUBI2sA+S2IwTqMmjQDhyHS47l4mapSq+eeBV697wvRNkgAWFwxKubkM+2e2uU
RPHx/LdFm7vG3uwRF5gS5A3ei5EoVBy0C4oiUrK/4k4Ezt49VymsZisLu+QYvahp
ncQWkwyRBIU6Py/tXW0gWaw=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:06:54 2026 by rpki-client