Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: 0xI2xpLQRyyMzej/EY/Ox50NrmjTsxGTlupGKSvQiMU=
Subject key identifier: DD:58:B2:F8:D2:D0:A0:B8:21:AD:F7:5D:D1:A9:6B:40:61:1E:E8:98
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 49575FCE3CACF9107A82554DAE8369B0FED05FE2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
Signing time: Sun 09 Aug 2026 00:00:29 +0000
ROA not before: Sat 08 Aug 2026 23:55:29 +0000
ROA not after: Sun 08 Aug 2027 00:00:29 +0000
asID: 21859
IP address blocks: 91.206.2.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:57:5f:ce:3c:ac:f9:10:7a:82:55:4d:ae:83:69:b0:fe:d0:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 8 23:55:29 2026 GMT
Not After : Aug 8 00:00:29 2027 GMT
Subject: CN=DD58B2F8D2D0A0B821ADF75DD1A96B40611EE898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:52:27:d5:68:99:8a:47:d7:17:2d:3e:3e:
2c:14:5e:de:e8:ff:3a:59:c2:0a:9c:89:9a:f4:91:
34:51:6d:78:38:10:37:db:b9:01:27:9c:16:21:b4:
b9:5c:9a:da:c5:be:f1:c0:92:32:cb:eb:e2:c0:52:
b3:57:13:81:77:90:87:bf:16:15:ec:35:39:db:51:
91:7c:c7:60:79:62:1a:f0:90:b9:ea:8b:6f:3f:8b:
ad:1e:17:c3:c7:36:49:41:b6:08:00:22:e7:aa:88:
04:8c:fd:56:b7:e3:a5:de:ac:3e:d4:9f:66:51:3a:
ce:4d:01:0a:a8:23:ad:8a:e2:14:cd:4e:ef:b7:22:
cb:94:83:e8:ab:bc:d5:d5:d4:34:6a:79:39:8e:a0:
16:b1:89:00:4f:80:56:7d:2a:f5:79:52:57:b7:dd:
24:58:55:da:cc:79:f1:42:c5:c5:ce:82:a3:56:d2:
5a:4d:63:4d:13:c9:b0:5b:f5:dd:48:90:ce:85:94:
09:0e:19:d1:12:75:17:a2:6f:ef:e6:d6:6e:92:9c:
97:7d:65:97:f1:c7:4a:75:74:28:fb:3f:bf:91:45:
2a:51:8c:e1:7d:8f:34:24:5a:33:88:25:d7:c1:4f:
f8:1c:59:dd:af:cc:c3:b7:78:e3:37:33:4b:ef:79:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:B2:F8:D2:D0:A0:B8:21:AD:F7:5D:D1:A9:6B:40:61:1E:E8:98
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:31:6d:35:15:d9:c8:69:95:d8:fa:3a:e5:d2:89:8d:b4:20:
7b:5f:f6:d4:7b:32:34:24:33:b6:17:7e:6b:e5:56:72:b7:90:
1e:48:c0:f1:20:1f:f9:59:1c:43:93:fa:4d:f3:d2:f7:78:ca:
fd:4c:7c:58:2b:19:40:bd:f0:08:85:3f:b8:fd:dd:1c:11:eb:
ec:02:8d:cc:93:a5:59:60:4b:74:a9:96:af:e7:db:43:c9:ef:
63:dc:b4:4f:77:96:79:13:0b:e5:f9:9a:ef:2e:dd:6a:12:c4:
d7:f9:ee:3e:e6:aa:06:41:48:54:a1:66:a7:3b:92:f2:60:cc:
66:e2:00:5e:b4:6b:f1:2a:c1:77:32:9d:d0:98:16:b5:3f:76:
67:00:e7:9d:61:dd:da:76:72:a1:8a:bf:43:f9:95:f0:c5:4f:
74:41:4e:41:a8:3a:8c:23:3d:45:27:ca:3e:18:4d:63:10:d6:
af:35:89:07:83:4f:8f:33:4b:13:36:9f:b5:69:25:2b:30:3e:
60:50:f8:ab:73:06:99:e8:5f:ad:d7:7f:2e:3a:33:ad:86:cf:
5b:ac:5d:85:78:1f:f4:d3:a3:1e:0a:3e:43:02:f8:72:fd:62:
2c:8f:6b:0d:cb:bd:26:1a:ac:3c:40:05:41:4b:5c:b6:cc:4e:
fd:53:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:48:28 2026 by rpki-client