Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: UP0CrwGQBoOQ2pGJtRnTZVyuxYNbur6mu6xbNsre3xk=
Subject key identifier: 14:38:D9:BD:E4:65:F0:25:1B:4F:59:0C:42:C1:9A:33:2E:27:B0:9B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 229D1CE4802D88AF0DAB590B141AB438E88AF064
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
Signing time: Tue 08 Sep 2026 06:27:59 +0000
ROA not before: Tue 08 Sep 2026 06:22:59 +0000
ROA not after: Tue 07 Sep 2027 06:27:59 +0000
asID: 21859
IP address blocks: 5.252.82.0/24 maxlen: 24
45.133.176.0/24 maxlen: 24
179.61.228.0/24 maxlen: 24
181.214.100.0/24 maxlen: 24
181.215.205.0/24 maxlen: 24
191.101.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9d:1c:e4:80:2d:88:af:0d:ab:59:0b:14:1a:b4:38:e8:8a:f0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 06:22:59 2026 GMT
Not After : Sep 7 06:27:59 2027 GMT
Subject: CN=1438D9BDE465F0251B4F590C42C19A332E27B09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:84:2b:61:de:07:44:93:d5:74:30:62:eb:
8d:9c:db:8a:61:33:b2:6b:17:4e:05:e9:a3:43:7a:
a2:f6:89:f1:fd:1f:67:86:d5:da:59:57:38:62:ed:
50:96:55:3f:87:1d:68:9e:0e:d4:9a:64:16:ca:a7:
10:3b:cc:f0:e5:ff:2e:0b:33:a9:f7:fb:54:40:42:
12:2c:d6:59:42:93:be:0d:bc:de:a2:61:5e:38:56:
7d:d6:eb:00:d4:5e:64:92:1e:4b:97:a3:80:10:18:
b7:a2:67:09:05:4f:e1:b0:06:aa:cd:c6:86:bd:5b:
37:11:d9:5f:fd:e2:10:2e:52:7f:42:be:aa:26:16:
3c:74:26:c0:07:a9:8f:27:4d:02:aa:14:40:d2:5c:
ca:5a:b3:3d:6d:c1:6a:1d:51:63:54:6c:5d:ff:b5:
f2:3d:54:76:2e:5e:79:24:d6:11:1d:64:f6:af:ab:
db:d5:28:48:6c:69:e0:87:d9:b8:af:7b:b2:fd:87:
2b:a4:5b:4a:cc:5a:08:da:3d:96:a3:15:54:81:22:
25:05:7e:ac:51:28:a5:f8:6f:61:74:2b:33:28:d6:
95:65:81:d8:cc:dd:04:16:0e:e6:09:5a:60:cd:14:
d4:fb:bc:68:38:70:28:68:57:dd:2b:12:d6:f7:a1:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:D9:BD:E4:65:F0:25:1B:4F:59:0C:42:C1:9A:33:2E:27:B0:9B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.82.0/24
45.133.176.0/24
179.61.228.0/24
181.214.100.0/24
181.215.205.0/24
191.101.148.0/24
Signature Algorithm: sha256WithRSAEncryption
41:62:3b:2d:52:89:3d:ff:fa:4b:c3:8c:15:ce:a5:6f:92:fe:
9b:91:a1:c6:7f:dc:e7:13:2f:86:06:dc:87:33:92:30:b0:d2:
bb:98:63:d5:ba:dc:46:cf:4f:9f:25:f6:44:4b:f6:f7:d4:c3:
e2:8f:2e:d6:f1:43:0f:4b:97:53:01:c2:2d:85:93:16:21:39:
de:98:37:fe:5c:75:dc:c3:b7:c4:45:cc:6a:9a:e2:bd:34:22:
9f:2a:0f:5f:3b:9b:a0:1a:3c:ad:91:83:e2:ca:bc:0f:d2:df:
aa:59:17:78:95:1b:49:e8:52:a4:04:db:a6:55:4f:fa:4b:2b:
b0:99:d4:b4:11:08:8a:86:74:e3:26:43:ef:0f:d3:25:73:66:
25:9b:20:9e:18:dd:41:83:9d:5f:b9:30:d6:45:61:f0:60:7e:
e5:96:1b:9b:17:5f:8f:8d:c5:f8:49:82:9b:f3:23:26:3c:16:
7f:23:bd:bf:9c:a7:69:9f:8c:9f:c5:16:c6:dc:90:d6:41:06:
15:2c:60:5c:2b:38:9a:8e:24:68:c8:5f:1a:c5:6a:93:a6:28:
61:16:25:31:90:11:05:ba:28:13:00:7f:39:df:5f:cb:33:8e:
2c:98:00:2e:8c:25:3b:5a:da:e4:36:5e:c6:65:07:99:a8:0c:
00:57:02:d6
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUIp0c5IAtiK8Nq1kLFBq0OOiK8GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MDgwNjIyNTlaFw0yNzA5MDcwNjI3NTlaMDMxMTAvBgNV
BAMTKDE0MzhEOUJERTQ2NUYwMjUxQjRGNTkwQzQyQzE5QTMzMkUyN0IwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/oQrYd4HRJPVdDBi642c24ph
M7JrF04F6aNDeqL2ifH9H2eG1dpZVzhi7VCWVT+HHWieDtSaZBbKpxA7zPDl/y4L
M6n3+1RAQhIs1llCk74NvN6iYV44Vn3W6wDUXmSSHkuXo4AQGLeiZwkFT+GwBqrN
xoa9WzcR2V/94hAuUn9CvqomFjx0JsAHqY8nTQKqFEDSXMpasz1twWodUWNUbF3/
tfI9VHYuXnkk1hEdZPavq9vVKEhsaeCH2bive7L9hyukW0rMWgjaPZajFVSBIiUF
fqxRKKX4b2F0KzMo1pVlgdjM3QQWDuYJWmDNFNT7vGg4cChoV90rEtb3oUTpAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUFDjZveRl8CUbT1kMQsGaMy4nsJswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE4NTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAAF/FID
BAAthbADBACzPeQDBAC11mQDBAC1180DBAC/ZZQwDQYJKoZIhvcNAQELBQADggEB
AEFiOy1SiT3/+kvDjBXOpW+S/puRocZ/3OcTL4YG3IczkjCw0ruYY9W63EbPT58l
9kRL9vfUw+KPLtbxQw9Ll1MBwi2FkxYhOd6YN/5cddzDt8RFzGqa4r00Ip8qD187
m6AaPK2Rg+LKvA/S36pZF3iVG0noUqQE26ZVT/pLK7CZ1LQRCIqGdOMmQ+8P0yVz
ZiWbIJ4Y3UGDnV+5MNZFYfBgfuWWG5sXX4+NxfhJgpvzIyY8Fn8jvb+cp2mfjJ/F
FsbckNZBBhUsYFwrOJqOJGjIXxrFapOmKGEWJTGQEQW6KBMAfznfX8szjiyYAC6M
JTta2uQ2XsZlB5moDABXAtY=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:03:53 2026 by rpki-client