Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: 3XYcWzfKu6UDAprvgOYU0vdtN5fF86RLAu8Ab2DA+lA=
Subject key identifier: 2B:E5:6B:E0:7E:EA:81:76:B3:1C:EB:C8:BE:5D:F1:6C:58:7C:9A:94
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 5BF9E7B7FB5E0113488BE31EF619A143BA8C9666
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS21840.roa
Signing time: Tue 01 Sep 2026 09:24:12 +0000
ROA not before: Tue 01 Sep 2026 09:19:12 +0000
ROA not after: Tue 31 Aug 2027 09:24:12 +0000
asID: 21840
IP address blocks: 201.4.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f9:e7:b7:fb:5e:01:13:48:8b:e3:1e:f6:19:a1:43:ba:8c:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Sep 1 09:19:12 2026 GMT
Not After : Aug 31 09:24:12 2027 GMT
Subject: CN=2BE56BE07EEA8176B31CEBC8BE5DF16C587C9A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:39:d4:6c:4e:58:c1:35:cd:ca:0d:9d:ec:
a9:28:3d:17:ee:5b:6c:8b:45:6c:ab:b8:13:b2:ba:
54:3e:91:c0:94:e6:ce:27:9e:a1:cc:93:1f:ec:97:
3b:75:e1:ec:c0:02:82:eb:7d:2f:db:80:d1:6b:ea:
39:1b:3c:6e:56:d4:8a:01:da:3a:8c:a7:00:33:31:
82:6c:29:b5:e0:cd:cc:f7:c8:ee:f4:47:64:11:c2:
fb:9b:34:2f:71:de:b3:06:64:ca:6d:dd:b2:52:cc:
39:ea:3b:00:1c:f4:55:41:cf:57:9c:db:38:cd:d8:
6a:fd:a9:fa:c7:b3:ab:fe:b8:62:27:75:05:c1:ab:
a9:3d:a4:be:85:45:60:b7:ee:58:97:46:b0:0b:62:
11:b4:8d:4c:0a:48:31:e2:0c:32:62:48:ea:51:06:
7e:23:52:88:cf:7e:00:9e:70:b8:95:08:a3:6d:a2:
0b:e0:9c:4f:62:4c:0c:71:b0:c9:71:e5:bd:2d:1a:
ae:ac:b8:44:c6:65:dc:b7:1e:b1:2e:0d:a2:8c:f8:
69:ec:cd:0e:24:92:a8:4a:18:e1:fc:88:db:7a:72:
7b:d5:1d:ca:f2:e7:e6:22:ea:d4:6c:74:37:b0:03:
f4:f6:c4:11:70:32:af:e2:ad:d3:7c:1c:d8:74:56:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:6B:E0:7E:EA:81:76:B3:1C:EB:C8:BE:5D:F1:6C:58:7C:9A:94
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.21.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e6:a4:11:9a:cc:c8:ac:46:21:0e:a0:ad:85:ac:d4:81:c7:
02:5d:7d:11:4c:6f:45:7b:7f:1b:bd:c9:f4:7d:4c:72:a4:a2:
3a:73:e2:4a:99:fe:91:61:85:68:18:d4:c9:fb:7e:d5:d6:b9:
4a:a0:7c:ab:da:ea:1c:0e:f8:a7:a9:46:31:9d:94:02:d7:f0:
5c:a7:99:52:1c:35:67:aa:11:da:37:a6:f5:f8:cd:49:d8:1f:
91:a8:1f:d9:14:eb:86:cc:82:87:75:9f:8a:79:65:bf:43:b7:
a6:ff:5e:9c:b1:03:6c:dd:cf:07:bc:a0:81:98:9c:00:d2:aa:
72:f8:72:12:65:ac:1d:47:63:86:35:66:71:5d:4e:ca:61:12:
c3:30:42:a1:7a:e5:02:86:c4:ce:2b:b7:5b:f6:1d:81:cf:44:
09:37:92:50:6d:29:db:45:ce:82:63:6f:96:da:95:fe:35:f6:
b4:64:42:07:af:05:52:25:c7:0d:b6:02:ba:74:08:cb:79:14:
b2:87:38:24:ef:25:64:9b:fb:f2:35:e7:15:22:3d:55:f7:15:
e3:be:8e:db:19:48:52:46:66:f5:c6:87:fa:e3:52:53:38:fb:
01:1a:1b:f8:c0:99:f2:32:43:d1:5f:b3:f0:1b:fc:f8:4f:32:
4e:b4:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:02 2026 by rpki-client