Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: DWxph0zOGIhNvErv1yqHw9Gxw4hNktyQYg3xumh1+DY=
Subject key identifier: BD:ED:A9:58:69:98:4C:F3:69:6E:93:4D:AC:82:2E:B2:81:8B:63:96
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 602C5A47E242F047839FCC4229AE383DF57B6AAE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS21859.roa
Signing time: Sun 01 Nov 2026 00:15:33 +0000
ROA not before: Sun 01 Nov 2026 00:10:33 +0000
ROA not after: Sun 31 Oct 2027 00:15:33 +0000
asID: 21859
IP address blocks: 46.203.46.0/24 maxlen: 24
46.203.215.0/24 maxlen: 24
46.203.217.0/24 maxlen: 24
46.203.219.0/24 maxlen: 24
46.203.221.0/24 maxlen: 24
91.124.15.0/24 maxlen: 24
91.124.170.0/24 maxlen: 24
91.124.177.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.112.0/24 maxlen: 24
95.135.113.0/24 maxlen: 24
178.92.11.0/24 maxlen: 24
178.92.20.0/24 maxlen: 24
178.92.24.0/24 maxlen: 24
178.93.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2c:5a:47:e2:42:f0:47:83:9f:cc:42:29:ae:38:3d:f5:7b:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 00:10:33 2026 GMT
Not After : Oct 31 00:15:33 2027 GMT
Subject: CN=BDEDA95869984CF3696E934DAC822EB2818B6396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:e0:54:88:d9:97:2f:d1:d5:1f:f2:25:96:
25:9c:aa:e9:31:42:fe:8f:ca:45:eb:22:8f:1a:67:
d4:c4:42:83:23:41:88:0d:d3:e1:19:7c:b7:21:6c:
75:88:a9:97:bf:54:33:e9:06:56:e3:10:b7:57:4f:
11:d2:ff:2a:b5:51:59:a0:8d:6e:22:9e:fd:4d:e2:
16:f5:22:6d:6e:ff:27:32:42:49:f4:a7:12:ca:a4:
cd:0c:2f:50:d1:b0:ed:e5:dd:92:f0:10:a6:ed:ac:
68:f2:e9:3a:d3:09:6d:1e:79:e4:19:90:35:c5:3b:
98:19:24:ee:18:bf:aa:b6:fe:2d:86:2f:32:ea:26:
9c:9e:de:f9:c5:4e:5d:d5:9b:d4:d8:2b:9d:20:25:
e5:65:ff:66:88:02:b8:23:2c:40:7e:ba:fe:23:45:
a3:56:57:6d:c9:8b:d6:93:b7:88:a9:69:c7:ea:e5:
f3:d4:6d:46:7b:d0:64:7a:a5:a8:e5:a5:81:ce:f0:
01:82:06:ee:a1:5a:1f:30:f6:b5:7e:87:c9:4c:97:
ad:b2:0c:a1:af:85:b3:0d:f2:7c:53:b2:77:2b:b0:
31:e7:5e:ab:3f:a6:00:8a:32:19:66:34:37:18:ef:
b1:ee:9c:02:42:a2:6a:9c:23:c8:91:b1:e8:12:1f:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:A9:58:69:98:4C:F3:69:6E:93:4D:AC:82:2E:B2:81:8B:63:96
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.46.0/24
46.203.215.0/24
46.203.217.0/24
46.203.219.0/24
46.203.221.0/24
91.124.15.0/24
91.124.170.0/24
91.124.177.0/24
95.135.111.0-95.135.113.255
178.92.11.0/24
178.92.20.0/24
178.92.24.0/24
178.93.178.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f8:77:e5:cf:e0:9a:94:1f:f8:a7:2c:4f:88:d3:a8:95:00:
58:7d:29:3d:3e:a1:31:11:e5:71:0e:36:8b:f5:95:f7:87:7d:
bd:b0:6e:e8:0c:d6:4a:38:fa:fa:6c:ad:05:c7:e6:e9:67:da:
02:20:31:6b:ee:d1:46:ca:c6:91:dc:d2:8a:ea:ff:12:15:00:
e7:85:b7:75:28:f3:65:cc:2e:44:fb:60:51:1f:23:e7:f0:be:
d9:76:be:c2:d9:d2:ce:7a:5b:1b:08:37:7b:70:83:8c:c1:dc:
04:dc:1b:14:5b:68:cb:68:b7:41:48:42:6d:b8:20:03:3d:9d:
31:81:2f:8e:57:08:22:96:ee:5a:3a:0f:b0:f6:91:cc:3d:2c:
92:fe:c6:34:46:99:2b:2a:c9:5a:1b:99:4e:f5:34:b7:df:99:
92:46:5b:9e:77:8d:07:76:da:92:7e:29:d8:c2:c3:01:c6:71:
56:f0:ee:d6:d6:f7:96:b5:37:56:80:57:f4:06:f9:19:c6:aa:
69:e9:d4:25:11:aa:cf:80:b6:9c:db:5f:d7:da:09:b4:01:0a:
91:a3:f7:02:3e:4d:ee:f9:ac:a5:8b:11:f9:16:de:f8:cb:93:
ea:f7:71:e8:77:86:de:bd:3d:a0:52:cc:80:ee:24:a6:9b:2b:
69:5e:78:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYCxaR+JC8EeDn8xCKa44PfV7aq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjExMDEwMDEwMzNaFw0yNzEwMzEwMDE1MzNaMDMxMTAvBgNV
BAMTKEJERURBOTU4Njk5ODRDRjM2OTZFOTM0REFDODIyRUIyODE4QjYzOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwouBUiNmXL9HVH/IlliWcqukx
Qv6PykXrIo8aZ9TEQoMjQYgN0+EZfLchbHWIqZe/VDPpBlbjELdXTxHS/yq1UVmg
jW4inv1N4hb1Im1u/ycyQkn0pxLKpM0ML1DRsO3l3ZLwEKbtrGjy6TrTCW0eeeQZ
kDXFO5gZJO4Yv6q2/i2GLzLqJpye3vnFTl3Vm9TYK50gJeVl/2aIArgjLEB+uv4j
RaNWV23Ji9aTt4ipacfq5fPUbUZ70GR6pajlpYHO8AGCBu6hWh8w9rV+h8lMl62y
DKGvhbMN8nxTsncrsDHnXqs/pgCKMhlmNDcY77HunAJComqcI8iRsegSHzphAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUve2pWGmYTPNpbpNNrIIusoGLY5YwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE4NTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwbwYIKwYBBQUHAQcBAf8EYDBeMFwEAgABMFYDBAAuyy4D
BAAuy9cDBAAuy9kDBAAuy9sDBAAuy90DBABbfA8DBABbfKoDBABbfLEwDAMEAF+H
bwMEAV+HcAMEALJcCwMEALJcFAMEALJcGAMEALJdsjANBgkqhkiG9w0BAQsFAAOC
AQEAAvh35c/gmpQf+KcsT4jTqJUAWH0pPT6hMRHlcQ42i/WV94d9vbBu6AzWSjj6
+mytBcfm6WfaAiAxa+7RRsrGkdzSiur/EhUA54W3dSjzZcwuRPtgUR8j5/C+2Xa+
wtnSznpbGwg3e3CDjMHcBNwbFFtoy2i3QUhCbbggAz2dMYEvjlcIIpbuWjoPsPaR
zD0skv7GNEaZKyrJWhuZTvU0t9+ZkkZbnneNB3bakn4p2MLDAcZxVvDu1tb3lrU3
VoBX9Ab5GcaqaenUJRGqz4C2nNtf19oJtAEKkaP3Aj5N7vmspYsR+Rbe+MuT6vdx
6HeG3r09oFLMgO4kppsraV54TA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:42 2026 by rpki-client