Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: nuwyqAfXhuLQHde0wELZEyNgPeQ0ZHg5C7zLe2IfDgs=
Subject key identifier: 11:F2:54:C5:C5:25:21:38:92:89:22:B6:0D:0D:70:7E:AD:C4:98:0E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 72388F111BC43845591A956E7315477CFE1DEF15
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
Signing time: Thu 24 Sep 2026 06:04:48 +0000
ROA not before: Thu 24 Sep 2026 05:59:48 +0000
ROA not after: Thu 23 Sep 2027 06:04:48 +0000
asID: 21859
IP address blocks: 5.252.82.0/24 maxlen: 24
45.133.176.0/24 maxlen: 24
179.61.228.0/24 maxlen: 24
181.214.100.0/24 maxlen: 24
181.214.165.0/24 maxlen: 24
181.215.205.0/24 maxlen: 24
191.101.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:38:8f:11:1b:c4:38:45:59:1a:95:6e:73:15:47:7c:fe:1d:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 24 05:59:48 2026 GMT
Not After : Sep 23 06:04:48 2027 GMT
Subject: CN=11F254C5C5252138928922B60D0D707EADC4980E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:ed:e1:88:ee:81:af:00:5e:6c:83:50:1d:
36:b4:94:42:a7:c7:9e:33:29:68:17:30:15:02:cb:
a6:41:f3:88:14:1a:07:03:9f:0b:19:d9:27:d6:83:
d3:bc:ff:69:1e:cb:e6:fc:b7:ae:fa:33:be:c7:ca:
03:62:79:c9:98:6f:1c:ca:5b:49:38:bc:bd:88:d6:
3a:6b:ac:72:1d:f6:bd:13:a3:80:6e:58:8b:a1:d1:
77:54:1a:a9:ad:a1:62:6e:bd:36:64:35:26:04:48:
99:3a:3e:09:0f:46:3e:20:a1:17:35:5c:ae:33:19:
bc:9f:a3:53:0c:ab:b0:09:09:1c:72:2c:e3:59:ec:
7a:2a:e0:48:73:ee:03:20:59:bf:3c:56:d5:7a:7f:
77:0c:81:64:17:80:0e:92:42:7d:22:78:4b:8c:15:
9c:bf:13:93:2f:93:5a:1d:aa:eb:18:37:8e:31:8e:
e7:6e:00:e2:44:df:ba:98:29:ab:91:81:e7:3d:9e:
ae:5a:b4:69:37:7e:43:5e:2c:72:a3:1c:e7:61:f8:
83:c3:02:9b:18:5f:f9:4c:af:77:32:01:d8:72:66:
4d:a2:6a:05:14:4a:6c:8b:87:60:c9:eb:b5:89:fd:
d8:3b:d3:ad:ba:92:50:ad:f7:44:15:9e:df:87:16:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:54:C5:C5:25:21:38:92:89:22:B6:0D:0D:70:7E:AD:C4:98:0E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.82.0/24
45.133.176.0/24
179.61.228.0/24
181.214.100.0/24
181.214.165.0/24
181.215.205.0/24
191.101.148.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8a:ba:b0:7e:b3:1d:a3:91:8a:1a:c6:83:73:76:84:e5:92:
f1:8a:26:b2:39:46:0a:58:c0:48:63:89:6a:30:50:de:53:8b:
64:20:b1:41:35:ae:63:44:58:2a:1b:02:b1:8d:c1:3f:24:d6:
59:ed:64:35:6f:58:7e:f9:0d:26:1d:fd:f5:b7:e2:69:b8:ec:
e6:aa:dc:ad:f7:e1:a0:1a:a0:49:c3:7a:f4:77:87:40:16:6a:
50:47:8a:5b:44:73:92:81:dc:35:18:15:e9:44:7c:8a:4c:86:
a8:2a:7e:76:b9:88:13:83:77:a4:27:24:7d:7b:51:fc:f1:ae:
43:45:17:1a:bb:06:65:03:83:6c:94:f8:e4:f6:22:b2:4e:82:
5e:09:cd:b9:a5:f9:73:60:7d:cc:b7:4c:5a:ad:9d:7b:5a:38:
82:44:ea:66:ab:52:59:d2:11:63:b1:93:6f:a3:14:45:e0:c2:
5f:ea:c6:c2:9d:c4:06:61:c9:53:b7:81:3d:6e:58:f7:6e:33:
08:15:d5:f7:62:71:a1:53:4e:a6:ae:2a:55:de:9a:17:3f:04:
6d:50:86:9a:0f:21:cb:2c:33:08:16:92:2d:e0:17:ce:13:ab:
e5:06:c0:0c:29:55:a0:9d:7b:93:3f:2f:10:a3:33:9b:76:c4:
85:49:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:28:23 2026 by rpki-client