Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: s6sPnrB0ZtbTogY4Tpi3uJ2mlL9vu+Lwk5dEvQbbqEc=
Subject key identifier: 76:40:C6:0F:ED:DB:BA:D8:44:99:FE:06:07:E3:6F:85:A4:B4:83:38
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 39AA568C54DB28D0EDE5EDE68461E51D4A18217D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS21859.roa
Signing time: Mon 15 Sep 2025 06:07:16 +0000
ROA not before: Mon 15 Sep 2025 06:02:16 +0000
ROA not after: Mon 14 Sep 2026 06:07:16 +0000
asID: 21859
IP address blocks: 143.20.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:aa:56:8c:54:db:28:d0:ed:e5:ed:e6:84:61:e5:1d:4a:18:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 15 06:02:16 2025 GMT
Not After : Sep 14 06:07:16 2026 GMT
Subject: CN=7640C60FEDDBBAD84499FE0607E36F85A4B48338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:4e:1a:4b:a7:4a:95:d6:e8:6b:b1:d9:f1:
ab:75:97:10:a0:b4:d8:f5:c9:18:c8:3c:7e:3d:55:
c2:20:5b:82:c1:58:35:ed:84:64:16:87:3a:08:40:
41:35:6c:7d:c2:b4:2f:2a:7d:38:30:9c:71:51:6c:
2b:e5:f1:6a:1c:73:49:72:8a:53:c4:f6:bf:c0:81:
3b:d1:2e:76:2d:e4:d1:f1:d9:8f:2d:5d:eb:f4:27:
28:7d:87:9f:86:b4:c8:08:85:c3:f9:3f:0f:2f:ea:
5e:d5:64:7f:95:1a:89:a9:4d:d7:cf:a7:07:81:f6:
5f:0e:d0:ca:29:9c:28:94:38:2a:da:e8:c1:24:f6:
61:b4:52:96:57:26:61:2f:cf:6c:d6:bd:9e:38:d3:
3f:23:c1:66:44:14:cb:eb:da:57:09:25:75:84:d4:
d9:0e:4b:25:90:f0:91:07:98:c7:1f:ae:87:6d:69:
86:e3:1c:d6:56:c9:13:7c:23:eb:e6:40:2c:74:2d:
ae:31:5b:03:57:22:8a:ab:09:fa:33:43:ca:ae:01:
17:1e:88:1b:fc:0c:23:60:b0:1d:b9:27:76:72:cc:
64:c4:46:98:09:d4:05:e8:9f:6a:71:b3:2d:c1:54:
f5:ea:88:a6:99:cb:0c:dc:ca:0e:9c:2d:b4:11:0e:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:40:C6:0F:ED:DB:BA:D8:44:99:FE:06:07:E3:6F:85:A4:B4:83:38
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.193.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:b2:0e:5a:c5:fc:28:e6:39:8a:ce:79:cb:b1:16:06:9c:
e0:1a:32:02:83:72:2b:79:23:4e:74:74:4e:91:05:d4:6f:df:
94:60:8f:60:3e:74:63:42:c0:30:fc:b2:a7:4a:b9:3d:d6:38:
dc:bb:62:4c:a1:4b:91:36:53:9f:21:33:7e:1b:d2:17:cb:67:
5a:db:14:d6:7f:d2:f3:5d:05:36:25:de:d3:50:02:dd:f8:42:
67:5e:1d:56:a0:6c:22:94:ce:52:67:6f:ef:71:8b:93:95:89:
29:bb:d2:af:6f:57:25:34:6a:e8:bf:f6:f9:82:82:f0:07:24:
89:93:8b:e8:25:62:ac:06:79:fb:9a:95:23:69:f0:56:da:23:
d5:4e:59:f7:28:64:e7:2d:2c:a4:c5:b2:86:0c:bc:b4:87:c8:
ae:1e:04:9a:7b:5c:7e:fe:06:97:f7:19:6e:9c:ac:02:e1:fb:
35:f4:32:4c:3f:86:f7:79:0d:4d:50:76:c6:65:87:58:81:42:
d6:2e:08:4e:38:39:3e:a3:da:f9:4c:ec:4a:83:ca:d3:dc:72:
3f:46:80:9c:2a:61:c9:bd:ce:46:5c:ec:e0:e0:5f:b8:6a:b4:
51:9e:ca:31:84:98:dc:4c:0d:1f:ee:26:7b:8b:4a:a2:53:fd:
97:1a:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:38:15 2025 by rpki-client