Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: 9/iPwX9KlR3/K0Cb6db2z/IUaa97+7/ft1s39LC8OKw=
Subject key identifier: B3:09:D1:1C:3C:57:7F:84:10:71:28:5C:55:0C:BF:7A:E2:10:CC:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5EEC23188DC8DDA2ADA9A3FF90092607B46F4FED
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
Signing time: Fri 14 Aug 2026 09:43:17 +0000
ROA not before: Fri 14 Aug 2026 09:38:17 +0000
ROA not after: Fri 13 Aug 2027 09:43:17 +0000
asID: 21859
IP address blocks: 82.21.111.0/24 maxlen: 24
82.22.162.0/24 maxlen: 24
82.22.193.0/24 maxlen: 24
82.22.196.0/24 maxlen: 24
82.23.171.0/24 maxlen: 24
82.24.115.0/24 maxlen: 24
82.25.35.0/24 maxlen: 24
82.25.52.0/24 maxlen: 24
82.26.87.0/24 maxlen: 24
82.26.196.0/24 maxlen: 24
82.27.108.0/24 maxlen: 24
82.27.124.0/24 maxlen: 24
82.27.129.0/24 maxlen: 24
82.27.197.0/24 maxlen: 24
82.29.41.0/24 maxlen: 24
82.38.100.0/24 maxlen: 24
82.38.180.0/24 maxlen: 24
82.38.200.0/24 maxlen: 24
82.39.114.0/24 maxlen: 24
82.39.146.0/24 maxlen: 24
82.39.148.0/24 maxlen: 24
82.39.188.0/24 maxlen: 24
82.39.208.0/24 maxlen: 24
82.40.48.0/24 maxlen: 24
82.40.59.0/24 maxlen: 24
82.41.99.0/24 maxlen: 24
82.41.130.0/24 maxlen: 24
82.47.29.0/24 maxlen: 24
82.47.187.0/24 maxlen: 24
84.75.215.0/24 maxlen: 24
84.75.216.0/24 maxlen: 24
178.83.18.0/24 maxlen: 24
178.83.58.0/24 maxlen: 24
178.83.100.0/24 maxlen: 24
178.83.199.0/24 maxlen: 24
178.83.222.0/24 maxlen: 24
2a13:9500:aa::/48 maxlen: 48
2a13:9500:13f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ec:23:18:8d:c8:dd:a2:ad:a9:a3:ff:90:09:26:07:b4:6f:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 14 09:38:17 2026 GMT
Not After : Aug 13 09:43:17 2027 GMT
Subject: CN=B309D11C3C577F841071285C550CBF7AE210CCF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:e2:a7:ed:7d:3d:71:2f:1f:05:23:7f:e3:
d8:63:ab:21:4c:64:90:81:d5:07:1c:2b:73:86:4c:
33:d4:a5:fd:34:9b:d9:1b:d4:dd:59:1c:af:a6:a1:
1c:c8:99:db:1e:94:25:d4:44:c4:4c:ed:75:68:12:
79:09:dd:59:0b:d5:a3:dd:a3:59:de:d0:84:27:e5:
4e:3f:bb:8c:c8:75:49:ac:e4:79:4c:63:72:ec:99:
a7:9e:92:62:bb:7b:d3:bb:25:4b:bf:38:a6:54:dc:
4b:e5:e8:82:55:6e:eb:42:b8:8d:c9:75:d9:61:ac:
a6:11:59:44:a8:1c:ae:e9:d2:77:fc:5a:0f:05:f6:
62:29:84:b2:e5:e1:f4:8c:90:99:6c:51:f6:67:c1:
cf:45:c4:d4:72:1f:6d:d8:5a:1e:f9:7b:e9:29:8a:
38:9b:12:1e:e0:ce:2b:8a:e9:35:3e:4d:93:c4:28:
8b:08:bc:83:95:f8:19:5b:45:07:aa:be:e4:d9:2a:
66:a6:4e:a0:8d:1b:25:af:dc:4d:e3:03:41:13:4b:
95:6a:dd:8b:ae:6b:7c:a8:94:7f:ad:5a:66:25:93:
fe:3b:d7:b0:5a:4d:20:40:08:3e:b3:4d:42:64:a6:
76:2e:4c:7a:04:11:42:96:90:7a:79:02:89:cc:a8:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:D1:1C:3C:57:7F:84:10:71:28:5C:55:0C:BF:7A:E2:10:CC:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.111.0/24
82.22.162.0/24
82.22.193.0/24
82.22.196.0/24
82.23.171.0/24
82.24.115.0/24
82.25.35.0/24
82.25.52.0/24
82.26.87.0/24
82.26.196.0/24
82.27.108.0/24
82.27.124.0/24
82.27.129.0/24
82.27.197.0/24
82.29.41.0/24
82.38.100.0/24
82.38.180.0/24
82.38.200.0/24
82.39.114.0/24
82.39.146.0/24
82.39.148.0/24
82.39.188.0/24
82.39.208.0/24
82.40.48.0/24
82.40.59.0/24
82.41.99.0/24
82.41.130.0/24
82.47.29.0/24
82.47.187.0/24
84.75.215.0-84.75.216.255
178.83.18.0/24
178.83.58.0/24
178.83.100.0/24
178.83.199.0/24
178.83.222.0/24
IPv6:
2a13:9500:aa::/48
2a13:9500:13f::/48
Signature Algorithm: sha256WithRSAEncryption
3d:43:ae:d5:de:31:89:14:bc:7d:36:0c:d6:5e:fd:34:3a:d2:
06:61:1b:14:f4:73:00:2f:fb:5f:80:10:54:bc:f8:3a:41:6a:
eb:46:d9:d5:7c:87:db:0f:29:9d:22:e8:7e:56:b2:8d:77:ce:
f9:c6:77:be:c7:5f:22:7a:03:7e:a6:07:a3:24:c4:44:f9:1a:
91:b7:cb:cb:94:29:71:f7:1d:4f:d1:78:2b:74:e7:8c:98:5d:
c3:a0:0a:1e:51:98:13:6d:20:5d:f7:e3:19:d0:4b:ce:66:bf:
ce:cb:d7:54:1b:e2:62:e0:e7:1c:47:b3:81:f8:a8:54:d4:84:
d1:59:12:f6:36:a4:ed:eb:55:fc:41:51:32:00:f5:a8:63:f1:
fb:dc:4a:85:43:49:ea:7a:61:a8:a1:f1:51:a9:8f:c2:d6:fe:
b1:3f:23:ab:a0:80:4e:61:6b:4b:3d:bf:19:62:c8:1c:7d:25:
88:7e:95:05:e6:15:71:2a:22:fc:90:6d:12:21:b6:c9:85:71:
8c:56:17:f7:4c:82:bf:a2:c5:fb:c5:34:70:23:d7:56:6a:21:
85:03:8f:5f:3f:0c:28:28:65:46:22:cb:c5:5b:a1:3d:b8:19:
4d:6a:3a:1a:06:ed:dc:c2:1d:84:0d:b1:2d:26:f1:87:f8:4c:
00:e2:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:30:41 2026 by rpki-client