Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: z82YZx/a1/SLb5hUSoZNb1nqRyfUYcn0hI/37vI50Gg=
Subject key identifier: 18:04:89:07:2E:3A:CA:2E:CD:37:24:0E:06:1A:BA:FA:DD:8E:D9:21
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6F1909728322DBE7C3524D958AF9522C2DF10F49
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
Signing time: Mon 13 Jul 2026 02:28:39 +0000
ROA not before: Mon 13 Jul 2026 02:23:39 +0000
ROA not after: Mon 12 Jul 2027 02:28:39 +0000
asID: 21859
IP address blocks: 91.206.2.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:19:09:72:83:22:db:e7:c3:52:4d:95:8a:f9:52:2c:2d:f1:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 13 02:23:39 2026 GMT
Not After : Jul 12 02:28:39 2027 GMT
Subject: CN=180489072E3ACA2ECD37240E061ABAFADD8ED921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:6c:74:e8:31:19:38:00:cc:9e:a4:78:1b:
10:ca:f4:34:00:1f:09:02:3f:14:a1:11:eb:66:9c:
48:20:39:4f:ce:29:2b:0f:84:a8:55:15:3d:97:b9:
d8:e2:06:6d:6e:2f:8f:70:f7:cd:e8:3a:b7:95:f6:
7f:05:e1:1e:35:0f:b4:3b:d6:15:2a:fb:80:39:88:
61:09:dd:71:94:14:ee:07:d3:71:64:de:ce:28:f8:
e7:b7:e3:4c:86:38:7b:ce:a6:43:27:e2:4d:21:b0:
7c:38:d7:bd:f2:5d:56:da:a4:15:c0:ff:08:bc:4d:
6f:d0:32:62:9b:e9:fb:3e:ef:c7:06:3d:06:8a:a2:
ac:24:60:56:b1:60:ca:53:72:11:a2:77:6f:f0:45:
0b:e5:86:6f:1b:97:13:dd:d2:7f:0d:72:7d:7e:9e:
95:2f:39:be:4a:fb:16:71:b0:35:7c:13:e2:57:4b:
a9:09:b2:23:fb:b7:f5:dd:c8:51:e5:60:6e:2d:6c:
16:c1:90:aa:4c:85:95:6f:6e:54:b6:a3:bd:fb:92:
06:68:81:b1:d2:5b:3a:e9:0f:9b:57:ce:2b:a4:bf:
1f:3f:ea:71:b4:53:cf:6b:e0:8b:43:c2:3d:6d:89:
40:e5:ef:f9:87:fe:58:37:71:24:24:4b:3c:83:19:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:89:07:2E:3A:CA:2E:CD:37:24:0E:06:1A:BA:FA:DD:8E:D9:21
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
194.104.156.0/24
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ec:a4:f6:3e:54:cd:06:68:52:69:47:93:30:64:ea:1a:87:
d3:5a:6a:2a:2b:ac:7e:e0:28:9f:b2:6a:19:07:76:8f:46:32:
d7:c3:6d:01:cf:06:53:3d:a6:30:c2:fb:63:79:41:18:86:2c:
b7:a7:50:e1:6c:ee:b7:52:a2:04:70:62:a3:8d:4b:00:59:dc:
68:af:98:ee:75:f4:13:18:44:c2:50:d8:b9:9c:9e:1a:36:fd:
42:bf:02:7e:6a:4e:19:43:a2:27:7e:db:5b:4f:b0:25:26:40:
20:62:62:e9:54:49:01:b6:13:c7:47:31:e4:04:bc:f7:4a:df:
dd:bc:5c:34:fe:6c:3d:7d:04:b9:6f:1b:40:ff:ef:0a:b4:5d:
30:c5:f4:d8:c5:67:bd:39:bc:ae:35:f3:0b:0c:a7:9a:a7:9e:
00:53:f0:f3:67:0b:b7:b9:b9:56:83:3c:a7:66:ca:dc:99:2b:
22:c2:47:42:50:ba:e4:31:60:eb:94:2a:33:8b:5a:19:8f:69:
f5:89:9f:7c:12:0f:dc:55:95:4d:d8:c4:35:7d:c7:28:2f:71:
a7:c2:97:d1:4b:87:6a:38:58:e4:b1:76:95:4c:31:ae:d0:3d:
f6:fe:11:b6:a1:75:a3:b8:67:0b:24:75:25:f7:21:23:a0:ce:
7a:91:ff:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:40:51 2026 by rpki-client