Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: qn3k0T4McZC3448jgb3Bn85kWKj+WYspVgTcxZvDpdE=
Subject key identifier: DB:C3:E7:61:0F:A6:ED:C7:09:74:A9:2B:AB:1B:1A:12:CC:D8:3D:3F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 36965C13FB632E2EA06B17ED57108B07317A4408
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Mon 13 Apr 2026 02:30:41 +0000
ROA not before: Mon 13 Apr 2026 02:25:41 +0000
ROA not after: Mon 12 Apr 2027 02:30:41 +0000
asID: 21859
IP address blocks: 143.14.125.0/24 maxlen: 24
148.135.196.0/23 maxlen: 23
148.135.204.0/23 maxlen: 23
162.141.121.0/24 maxlen: 24
167.148.120.0/23 maxlen: 23
168.222.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:96:5c:13:fb:63:2e:2e:a0:6b:17:ed:57:10:8b:07:31:7a:44:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 02:25:41 2026 GMT
Not After : Apr 12 02:30:41 2027 GMT
Subject: CN=DBC3E7610FA6EDC70974A92BAB1B1A12CCD83D3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:26:4d:23:46:7b:62:1e:dd:fa:69:3e:4f:
5f:07:33:a0:d6:df:1b:4e:b3:26:17:f9:98:9f:a5:
47:2a:b1:99:61:66:6d:c3:7a:11:61:29:28:23:a1:
1b:bb:2f:b9:ca:9f:a8:d7:95:f9:a0:9e:4c:57:39:
14:84:6f:cc:42:00:76:06:9b:1d:4f:98:ec:44:08:
e6:d8:02:f7:8c:45:0c:30:f0:3b:50:1f:89:13:b7:
cf:5f:d3:91:11:05:65:44:5c:80:b2:42:6e:78:f3:
7d:d8:96:c1:1e:12:ca:39:b1:ba:d3:f1:9a:8f:83:
e3:2a:62:79:ce:e2:f2:ff:d2:69:80:1c:3d:84:bc:
3c:eb:26:80:23:2f:e1:5a:ba:21:13:ba:44:42:97:
e8:ec:90:b2:ec:55:6f:41:e6:e0:3f:fe:28:83:48:
3d:c1:8c:c6:77:e7:e4:54:ed:69:46:1a:02:5c:79:
d3:1c:07:52:2b:2d:41:eb:dd:c1:22:04:63:c9:94:
2e:ea:06:b2:ee:c8:80:ed:39:14:25:e0:e8:33:f0:
60:f5:ec:fe:da:5e:39:19:ca:03:c1:59:3e:57:e4:
45:da:7a:be:d3:18:03:ef:16:6a:f9:4d:5f:15:26:
12:89:28:0c:d3:c9:5f:f3:58:b7:89:b6:89:e3:2f:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C3:E7:61:0F:A6:ED:C7:09:74:A9:2B:AB:1B:1A:12:CC:D8:3D:3F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.125.0/24
148.135.196.0/23
148.135.204.0/23
162.141.121.0/24
167.148.120.0/23
168.222.4.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8f:ac:64:21:7a:6f:ff:81:12:32:87:57:a4:7f:7d:ef:fd:
f0:7f:91:2f:4b:52:9a:b6:77:8d:40:2c:7e:8a:6b:c8:1d:45:
fb:63:95:2e:c0:9e:48:c0:bf:26:4f:9c:a7:96:e9:05:0d:42:
00:cb:d2:ba:ed:b5:6c:ef:c4:4e:44:0b:1d:d3:03:af:a8:d9:
c9:68:2b:92:4a:fa:49:2b:a3:9d:05:9a:69:f0:4b:4b:39:7b:
71:64:3e:a4:9c:99:34:d3:61:cd:3b:9d:3d:57:05:d3:5b:44:
38:12:c1:e6:63:48:e6:16:d8:4b:9b:0c:73:76:78:56:ec:05:
a3:1b:93:10:d8:d4:f5:76:bb:bb:f7:2f:13:2b:d6:00:c7:a0:
fd:a0:d3:66:45:80:a9:de:3b:9a:8d:d9:58:ed:fb:1a:92:5e:
49:eb:4e:86:a7:5d:9d:d7:1a:97:16:cc:38:6d:38:5a:1a:9f:
1e:66:79:29:04:bb:2e:94:33:a2:54:40:b8:08:50:65:28:07:
50:6a:d1:6d:f0:b5:c7:43:6b:4d:08:7f:37:62:de:4c:ef:12:
87:2d:09:fb:70:4a:7d:b1:af:a0:09:bd:09:10:8c:ea:4f:a7:
89:b9:2f:0e:f5:9e:f1:da:91:1d:69:5f:ec:00:6f:c2:b5:bb:
5f:78:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:57 2026 by rpki-client