Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: U3qKUr9/fAOEyilBqGXNnQ7Yr03zTKz5fL6jcn23+k4=
Subject key identifier: A0:98:3D:2D:9D:35:01:F7:16:5C:B4:57:0C:EA:DD:3F:7E:37:15:9E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 62A42AE496AF502EC5EAC88C094DDC5AD8DF1E36
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Thu 03 Sep 2026 08:12:57 +0000
ROA not before: Thu 03 Sep 2026 08:07:57 +0000
ROA not after: Thu 02 Sep 2027 08:12:57 +0000
asID: 21859
IP address blocks: 143.14.125.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
155.117.76.0/24 maxlen: 24
155.117.221.0/24 maxlen: 24
162.141.121.0/24 maxlen: 24
167.148.120.0/23 maxlen: 23
168.222.32.0/24 maxlen: 24
168.222.75.0/24 maxlen: 24
168.222.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a4:2a:e4:96:af:50:2e:c5:ea:c8:8c:09:4d:dc:5a:d8:df:1e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 08:07:57 2026 GMT
Not After : Sep 2 08:12:57 2027 GMT
Subject: CN=A0983D2D9D3501F7165CB4570CEADD3F7E37159E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:e4:b1:d4:4f:6f:2f:b3:3c:22:c4:a5:dc:
11:50:1e:bc:0d:91:f0:7e:86:35:22:cb:b2:a6:8e:
11:a5:ad:2b:2b:0d:d4:ee:38:1a:91:c4:0d:50:5e:
2b:c7:2c:95:6f:ec:fb:3c:65:76:d2:0e:6d:1c:08:
a8:e0:c3:98:9b:00:12:2c:77:7c:1f:ca:9c:fa:a6:
09:63:5f:c2:89:2d:36:33:a3:cd:80:b8:98:c3:26:
e6:5d:b0:95:8c:28:a3:0e:32:7b:47:55:9a:fe:f2:
05:98:0d:f0:9b:bb:b5:92:c3:14:64:6c:3c:cf:1d:
1a:d3:14:6d:b4:f9:5c:da:67:21:eb:05:1b:56:39:
c7:29:fb:51:92:70:df:84:dd:cc:8a:21:db:83:57:
cc:bd:3f:6e:2a:50:45:81:1b:a7:46:01:c7:d3:69:
0e:82:7a:6c:5c:b9:69:a4:20:af:bd:c3:0c:9a:c0:
73:ad:b6:6d:ba:36:d0:7c:33:58:76:23:45:e5:15:
32:92:30:a3:ac:56:9f:50:bb:ca:9d:cf:96:ad:cb:
e7:18:ab:4b:0a:89:61:8d:c1:7d:52:bc:20:79:ce:
fd:49:ea:70:d0:63:81:0c:d8:06:15:b9:ee:bf:3e:
88:03:ee:b5:b9:a2:fb:9a:bc:b8:61:87:1f:66:d0:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:3D:2D:9D:35:01:F7:16:5C:B4:57:0C:EA:DD:3F:7E:37:15:9E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.125.0/24
150.241.131.0/24
155.117.76.0/24
155.117.221.0/24
162.141.121.0/24
167.148.120.0/23
168.222.32.0/24
168.222.75.0/24
168.222.93.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c1:18:ea:8c:97:8b:1c:1e:f6:8e:a5:8e:f3:a8:e4:8b:89:
83:71:a1:b8:ae:a8:13:e6:c3:ca:c5:ca:e2:4c:0c:22:cd:10:
a0:44:0b:56:28:81:3d:5b:84:10:ea:e7:4f:eb:54:ed:a7:bc:
c2:f2:81:8e:83:49:83:52:2b:1b:4c:e2:ad:96:05:cb:b0:67:
94:83:b0:46:1e:4b:6e:b9:7c:97:3b:f5:a6:3b:86:af:58:e3:
99:c8:d8:d9:3a:c9:00:23:29:be:03:c3:da:0f:b7:76:f2:de:
de:ee:64:5d:9f:9e:bf:95:21:15:d4:67:d2:21:97:76:3e:60:
46:d1:c4:cb:2a:2a:90:c6:f2:d7:46:85:3f:39:4f:6e:6d:04:
3a:2d:52:ad:06:72:9d:8a:f4:14:92:e7:60:bf:c3:6e:36:09:
4c:0a:31:21:84:54:cc:92:cf:c0:a1:09:44:36:78:a6:b9:82:
da:95:aa:66:a6:96:5c:a3:73:a7:64:12:53:76:3d:ae:6d:cf:
a0:4c:de:36:3d:4d:e8:d1:19:f5:aa:21:54:26:22:19:67:09:
c3:f9:06:3c:a6:e7:23:a3:d1:02:eb:b0:02:2c:68:93:79:1f:
91:c2:d5:23:ec:fe:f5:99:77:ae:7d:74:d4:c9:7f:d7:59:ed:
a3:a5:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:57:36 2026 by rpki-client