Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21641.roa
File: AS21641.roa (raw, json)
Hash identifier: t0+anItprDDKpik8aJQ5PsQIRYXxP9M+yfVqPcqg0JM=
Subject key identifier: 6E:F3:66:28:38:A1:8B:E2:F6:A7:14:E4:0E:67:91:74:DE:C9:0D:8F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1BCE4E387024D7F00F9F4E19CF11CE4333DA7215
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21641.roa
Signing time: Tue 21 Apr 2026 06:02:48 +0000
ROA not before: Tue 21 Apr 2026 05:57:48 +0000
ROA not after: Tue 20 Apr 2027 06:02:48 +0000
asID: 21641
IP address blocks: 84.75.44.0/22 maxlen: 22
84.75.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ce:4e:38:70:24:d7:f0:0f:9f:4e:19:cf:11:ce:43:33:da:72:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 05:57:48 2026 GMT
Not After : Apr 20 06:02:48 2027 GMT
Subject: CN=6EF3662838A18BE2F6A714E40E679174DEC90D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:ba:61:ea:a3:40:ca:15:36:67:df:fd:20:
96:df:db:11:99:d3:44:40:3d:cf:6d:30:98:fe:66:
2d:af:87:7d:eb:a6:d8:a2:7a:ae:c1:a8:69:40:2d:
01:24:82:8c:37:3b:6d:19:80:0f:44:4e:07:34:19:
c6:19:9f:74:9b:51:28:50:3a:ba:49:1c:47:9c:e7:
78:4d:b9:ba:3c:46:46:18:1c:01:84:47:40:9f:af:
33:29:40:ac:27:91:ec:31:5a:6e:fc:90:84:97:33:
d8:63:61:73:75:8c:85:32:ec:0e:d7:eb:a2:88:b1:
f5:8c:84:fb:47:fc:ac:50:f5:38:5b:a3:7a:72:f3:
35:ac:6c:f5:07:4e:8b:24:bc:65:37:c6:78:1d:36:
fe:17:83:6f:aa:c0:f3:6a:cf:56:de:86:9f:e8:b5:
5f:85:3b:68:97:14:d8:1c:0d:77:e4:e6:08:58:60:
ff:0d:a0:50:69:7d:65:5a:fb:e2:91:8b:12:c4:cb:
63:8f:f7:5c:2b:a1:1c:d8:a3:97:05:5d:81:99:1e:
a1:d3:4d:59:fe:3c:60:c7:f9:ff:f6:8c:47:92:e7:
3b:c4:6a:08:66:bd:a5:70:f5:b1:79:cb:d5:47:ed:
e8:96:e7:94:70:4d:c7:7e:24:ad:d4:53:0f:2b:5b:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F3:66:28:38:A1:8B:E2:F6:A7:14:E4:0E:67:91:74:DE:C9:0D:8F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.44.0/22
84.75.56.0/22
Signature Algorithm: sha256WithRSAEncryption
89:03:23:d9:cd:4e:7e:8e:00:06:48:2b:7e:3f:91:d1:f3:b0:
c8:22:17:ce:84:bc:ae:63:b1:31:b9:da:f3:d1:54:3e:82:0f:
45:40:f0:c2:dd:ed:78:13:3f:66:32:28:13:de:2e:d4:4b:e0:
54:54:97:54:ac:1a:63:6e:3f:2d:27:c7:8b:5c:8d:89:51:29:
d9:cb:52:b2:e2:f3:f7:70:b0:0e:f5:05:fe:ff:1d:b7:8c:97:
e6:4c:03:5b:76:d1:fb:f3:37:79:18:5d:f0:ef:71:70:a8:78:
e9:81:f8:1b:d4:3d:43:fd:1d:c6:97:9c:0b:31:b8:6c:9e:c9:
6d:c5:00:3a:4e:c5:33:94:d2:b5:91:01:7b:6b:bf:2d:5d:ee:
3b:ed:76:52:b1:7b:21:15:eb:38:b9:c3:92:f9:1c:2c:54:2b:
f5:a1:71:87:ce:e2:93:77:8d:eb:8c:66:8f:a6:7a:d4:0d:aa:
93:14:33:9f:62:e4:8e:a4:f8:9f:3d:8f:b8:b5:cc:a1:21:64:
a2:9f:0e:1b:41:84:ef:1c:ac:6b:f1:5b:03:3e:62:38:bb:26:
2f:11:19:09:2f:0f:b9:35:57:e5:7d:0e:8d:83:c3:af:d9:1c:
1d:ab:af:bd:2c:74:bd:cd:50:7c:2d:63:b5:e0:18:16:ec:6f:
bd:58:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:39:05 2026 by rpki-client