Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: YjbvKKw6Hmd42cpqvrZdMV4aGSOEnMD2LZeHe6oemDU=
Subject key identifier: B2:E0:71:F8:91:84:B0:70:26:46:09:EF:11:EE:2B:32:E9:F3:1A:95
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 02FB6643489C7660094DA709599E5EB88DFF5C34
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Fri 01 Aug 2025 10:17:48 +0000
ROA not before: Fri 01 Aug 2025 10:12:48 +0000
ROA not after: Fri 31 Jul 2026 10:17:48 +0000
asID: 21859
IP address blocks: 140.150.235.0/24 maxlen: 24
140.233.177.0/24 maxlen: 24
143.14.223.0/24 maxlen: 24
146.103.30.0/24 maxlen: 24
148.135.196.0/23 maxlen: 23
148.135.204.0/23 maxlen: 23
150.241.229.0/24 maxlen: 24
155.117.99.0/24 maxlen: 24
155.117.103.0/24 maxlen: 24
155.117.163.0/24 maxlen: 24
155.117.197.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
167.148.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fb:66:43:48:9c:76:60:09:4d:a7:09:59:9e:5e:b8:8d:ff:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 1 10:12:48 2025 GMT
Not After : Jul 31 10:17:48 2026 GMT
Subject: CN=B2E071F89184B070264609EF11EE2B32E9F31A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:69:d7:d1:79:b5:04:c7:12:ab:1c:91:c0:
09:b4:39:72:7c:41:fb:7c:d4:20:65:09:2c:9f:4c:
be:1f:f0:1d:8a:6f:0d:32:94:4f:d6:2b:72:44:dd:
0b:da:d8:25:2e:fc:d5:b9:04:af:fb:0c:2d:97:19:
3f:2f:29:06:5d:ba:f1:55:eb:85:27:d0:33:79:cf:
4b:a9:cc:85:e2:90:7e:b1:1d:64:e5:b1:fd:4f:54:
7e:a9:94:2b:2f:38:31:40:ee:a4:b3:70:ff:6a:1f:
f1:ef:fd:3a:0b:05:29:be:44:a3:85:43:ac:58:cf:
6d:14:2c:ab:de:b3:5d:19:f4:9b:33:a2:26:60:7b:
3a:03:c5:05:b3:e5:0c:54:80:10:91:72:91:a9:2c:
6b:fd:a1:f0:2a:8e:83:8a:46:2c:cf:a7:67:5e:26:
e6:a2:13:66:5e:e9:b1:36:db:89:1d:d4:3c:52:c1:
dd:df:6b:1c:9c:3b:23:e4:26:fe:6e:96:ab:91:6a:
d4:ae:f4:5a:e8:55:c2:e8:b9:8f:25:a8:ea:9d:00:
77:1a:35:f1:ce:f8:d7:ad:ff:e0:7d:1d:76:5c:d1:
1f:a2:78:09:59:11:c1:6d:76:3a:4f:15:3a:ef:3c:
99:9b:53:33:13:e7:cc:67:81:11:d0:e1:9b:49:a3:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:71:F8:91:84:B0:70:26:46:09:EF:11:EE:2B:32:E9:F3:1A:95
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.235.0/24
140.233.177.0/24
143.14.223.0/24
146.103.30.0/24
148.135.196.0/23
148.135.204.0/23
150.241.229.0/24
155.117.99.0/24
155.117.103.0/24
155.117.163.0/24
155.117.197.0/24
155.117.240.0/24
167.148.198.0/24
Signature Algorithm: sha256WithRSAEncryption
89:13:3f:8c:08:78:e3:c5:ca:f0:52:d6:22:62:c3:c3:58:08:
02:de:75:b3:7b:c9:2d:33:eb:de:bb:e4:bf:01:58:0c:f3:cb:
03:d8:27:eb:76:e6:6d:f5:ea:5d:9a:c9:ed:40:82:26:17:18:
6f:22:c8:03:34:ea:e3:06:05:a8:9e:35:e5:08:b7:7e:19:0f:
78:d6:9f:58:d6:bf:f4:58:ce:09:20:39:e1:54:4c:d2:d6:3f:
ab:aa:fa:f8:79:70:e1:95:af:94:7a:5f:3d:78:de:bd:aa:40:
cd:45:74:21:e2:7d:13:d1:97:d7:e8:1a:ce:c8:9b:e3:d6:3a:
02:dd:39:cb:f6:38:04:32:94:a1:50:0d:96:f4:0c:c8:8b:23:
ba:77:67:a5:1f:1a:3c:05:d1:21:92:0a:ad:91:8a:b9:46:f7:
47:d2:b8:2c:23:09:b1:83:8e:ec:5c:1b:77:bc:0b:8a:4b:54:
21:d3:a3:e0:97:41:11:bd:6e:38:9d:2e:b3:6a:51:2a:f2:39:
fc:1a:06:a1:db:04:3d:de:43:f8:1b:cc:38:85:fe:b7:87:89:
cd:c2:2b:fe:d0:a6:9d:40:17:c9:51:f9:40:b7:2d:57:9d:2d:
7b:49:44:c6:48:ea:af:7d:fd:23:74:7f:94:0f:40:77:d1:54:
eb:fd:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:46 2025 by rpki-client