Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: 4aWuRifoTk3U+Kk5cyAghaAqaubtzlKwLgYNilINJTY=
Subject key identifier: 45:24:E6:4B:83:96:C7:D2:57:9D:1E:D9:AB:4A:82:4C:16:3C:7C:32
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0A15F947189DAFC1331C830FF61951073914EFBF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21840.roa
Signing time: Mon 15 Jun 2026 02:31:34 +0000
ROA not before: Mon 15 Jun 2026 02:26:34 +0000
ROA not after: Mon 14 Jun 2027 02:31:34 +0000
asID: 21840
IP address blocks: 141.11.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:15:f9:47:18:9d:af:c1:33:1c:83:0f:f6:19:51:07:39:14:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 15 02:26:34 2026 GMT
Not After : Jun 14 02:31:34 2027 GMT
Subject: CN=4524E64B8396C7D2579D1ED9AB4A824C163C7C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:a4:b5:54:02:67:c3:87:b7:37:fe:af:2b:
f9:23:8a:49:4f:2c:cb:44:12:7f:2c:5d:85:dc:67:
56:72:dd:ff:eb:6a:8a:0c:ed:ed:4a:cb:6d:d8:26:
32:f8:06:81:38:d0:ea:40:81:8f:19:e3:56:ba:ac:
f4:ef:83:45:5e:9c:52:ef:d6:c4:a0:d5:e3:6d:fe:
13:63:90:03:d3:32:1c:44:e6:cc:c5:2c:fa:f1:14:
56:85:bf:f0:39:17:a4:cd:09:d2:56:68:4c:04:d1:
54:72:ef:a3:15:33:11:36:1c:9e:c8:3c:38:5b:e7:
a1:88:51:a9:ef:ce:96:74:75:4d:03:c5:3a:46:e0:
b0:f2:a9:f6:59:9f:ed:4f:a1:0e:49:bd:df:35:7b:
ad:f0:a5:73:d6:92:9e:70:3a:db:a7:8d:e4:f1:7b:
88:aa:0c:d8:a0:43:f2:f7:8b:c2:33:f9:b5:34:f6:
d6:7c:6f:5d:77:bc:7d:73:16:2c:79:43:41:fd:4c:
bb:d2:fb:b8:8c:17:1a:18:8f:64:5f:61:8d:59:50:
d4:8e:2b:3e:7e:d4:13:9e:91:53:46:de:5f:85:9a:
e6:19:3b:7c:9a:44:7b:bd:43:5f:ff:83:e5:9d:76:
7a:a1:46:46:7e:bb:a4:89:7c:25:39:75:f7:0c:c1:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:E6:4B:83:96:C7:D2:57:9D:1E:D9:AB:4A:82:4C:16:3C:7C:32
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.123.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:71:96:34:e6:9d:3d:95:de:a4:41:d9:e1:c6:3e:b1:46:4c:
ab:2d:b1:71:51:07:13:80:b7:a3:a3:5a:94:46:b0:83:86:ae:
51:3e:c1:10:b5:92:12:f4:11:51:0d:e8:2d:ba:e2:47:ad:59:
b0:c8:bf:d8:15:21:f8:06:11:ec:c8:f0:98:3b:28:f7:a3:fb:
21:6d:d1:b9:39:8c:27:cc:a3:e1:d9:df:be:60:61:ff:48:95:
ad:b0:7d:fa:7b:99:be:68:b6:56:c1:e4:c3:62:73:e7:13:8e:
26:9a:33:a9:05:ec:3a:56:0b:65:59:62:01:75:e4:5a:53:4c:
7a:59:a6:a8:ac:d2:a0:95:aa:8b:2f:7f:ae:53:f7:8f:05:ad:
cd:88:d0:c9:ab:46:2d:87:9c:0b:32:82:5c:12:cf:5d:a0:9a:
4f:65:5c:69:c8:24:af:95:6f:b1:3c:ed:9b:15:6f:ba:ab:75:
f3:f7:3a:51:13:ac:69:c8:c9:a6:f0:2c:f2:47:23:c1:86:8b:
2f:30:1f:a3:25:c5:c1:d4:73:79:34:c9:cd:1a:21:15:11:f0:
c6:a7:2e:b2:dd:e3:4a:98:20:1c:64:3d:8c:94:5b:7d:b6:45:
25:1d:e4:4b:49:52:2f:6c:c3:3d:07:48:0e:e4:a3:71:7e:b2:
58:df:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:33 2026 by rpki-client