Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: tcQzbDRoEnuaYAXrdJnlqpv0xx6G0uOeGd15k0hVByQ=
Subject key identifier: 0B:F1:7E:E2:0A:58:9A:14:4E:ED:E9:D3:AC:1A:F8:41:44:B0:E6:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 74B0F214D37605FFF9A5866E4AA62FE3633C759B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
Signing time: Thu 03 Sep 2026 08:12:55 +0000
ROA not before: Thu 03 Sep 2026 08:07:55 +0000
ROA not after: Thu 02 Sep 2027 08:12:55 +0000
asID: 21859
IP address blocks: 82.21.111.0/24 maxlen: 24
82.22.162.0/24 maxlen: 24
82.22.193.0/24 maxlen: 24
82.22.196.0/24 maxlen: 24
82.23.171.0/24 maxlen: 24
82.24.115.0/24 maxlen: 24
82.25.35.0/24 maxlen: 24
82.25.52.0/24 maxlen: 24
82.26.87.0/24 maxlen: 24
82.26.196.0/24 maxlen: 24
82.27.108.0/24 maxlen: 24
82.27.124.0/24 maxlen: 24
82.27.129.0/24 maxlen: 24
82.27.134.0/24 maxlen: 24
82.27.197.0/24 maxlen: 24
82.29.41.0/24 maxlen: 24
82.38.100.0/24 maxlen: 24
82.38.103.0/24 maxlen: 24
82.38.180.0/24 maxlen: 24
82.38.200.0/24 maxlen: 24
82.38.201.0/24 maxlen: 24
82.39.114.0/24 maxlen: 24
82.39.146.0/24 maxlen: 24
82.39.148.0/24 maxlen: 24
82.39.188.0/24 maxlen: 24
82.39.208.0/24 maxlen: 24
82.40.48.0/24 maxlen: 24
82.40.59.0/24 maxlen: 24
82.41.99.0/24 maxlen: 24
82.41.130.0/24 maxlen: 24
82.47.29.0/24 maxlen: 24
82.47.50.0/24 maxlen: 24
82.47.187.0/24 maxlen: 24
84.75.215.0/24 maxlen: 24
84.75.216.0/24 maxlen: 24
178.83.18.0/24 maxlen: 24
178.83.58.0/24 maxlen: 24
178.83.100.0/24 maxlen: 24
178.83.199.0/24 maxlen: 24
178.83.222.0/24 maxlen: 24
2a13:9500:aa::/48 maxlen: 48
2a13:9500:13f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b0:f2:14:d3:76:05:ff:f9:a5:86:6e:4a:a6:2f:e3:63:3c:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 3 08:07:55 2026 GMT
Not After : Sep 2 08:12:55 2027 GMT
Subject: CN=0BF17EE20A589A144EEDE9D3AC1AF84144B0E620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:bb:2f:a3:c5:d6:eb:12:51:9e:b4:cf:d5:
18:79:c3:23:a9:e9:db:69:c6:f5:e6:08:2e:d3:09:
09:f9:21:52:08:d5:25:b8:73:19:4b:0a:87:e7:9a:
07:35:3a:04:55:a8:0b:79:ca:49:d6:51:16:cb:59:
40:36:8a:4d:ea:84:59:51:db:03:37:43:e6:70:f0:
dd:b3:7c:2a:63:b9:24:81:d6:91:be:2e:e2:fa:0e:
e3:76:e8:8d:02:32:37:7a:38:9f:eb:df:39:3b:b2:
29:12:75:a2:cb:6d:40:da:48:0d:62:0d:f6:98:85:
bb:71:89:42:3f:2b:3b:80:09:6c:fd:d9:40:2e:65:
c7:40:6e:72:d6:23:5d:0d:89:b2:ed:d1:07:7d:6d:
0a:85:60:0c:12:28:e7:a6:d6:9d:7d:6a:4d:e3:66:
43:a1:c1:b4:43:da:d0:13:f4:b8:ee:fe:21:41:81:
85:c9:8d:10:95:38:8a:81:a3:ce:75:fe:a8:45:fc:
e2:0a:cc:15:e2:ab:2f:5e:af:c9:2f:3b:20:c0:11:
a0:0c:e9:d8:59:01:5c:8e:bb:30:69:53:b1:52:6d:
82:24:a2:50:5b:fd:b2:b6:07:81:4c:63:c0:0a:13:
c2:12:ba:4e:2b:11:54:ee:ec:ba:af:2e:80:15:04:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:7E:E2:0A:58:9A:14:4E:ED:E9:D3:AC:1A:F8:41:44:B0:E6:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.111.0/24
82.22.162.0/24
82.22.193.0/24
82.22.196.0/24
82.23.171.0/24
82.24.115.0/24
82.25.35.0/24
82.25.52.0/24
82.26.87.0/24
82.26.196.0/24
82.27.108.0/24
82.27.124.0/24
82.27.129.0/24
82.27.134.0/24
82.27.197.0/24
82.29.41.0/24
82.38.100.0/24
82.38.103.0/24
82.38.180.0/24
82.38.200.0/23
82.39.114.0/24
82.39.146.0/24
82.39.148.0/24
82.39.188.0/24
82.39.208.0/24
82.40.48.0/24
82.40.59.0/24
82.41.99.0/24
82.41.130.0/24
82.47.29.0/24
82.47.50.0/24
82.47.187.0/24
84.75.215.0-84.75.216.255
178.83.18.0/24
178.83.58.0/24
178.83.100.0/24
178.83.199.0/24
178.83.222.0/24
IPv6:
2a13:9500:aa::/48
2a13:9500:13f::/48
Signature Algorithm: sha256WithRSAEncryption
0a:31:f2:12:c7:11:81:4b:5b:8c:65:83:d3:e5:58:d1:96:46:
ba:fd:b0:7b:1e:e9:bf:a3:4b:2b:5b:4a:e5:e3:61:4c:0c:f6:
58:b5:96:5f:5d:29:45:a6:ad:95:63:51:92:64:30:88:10:51:
75:7a:6f:ff:4d:50:17:3d:7b:ee:41:4a:7b:c1:d2:25:2e:39:
95:2e:38:8a:ff:04:2f:51:70:08:c1:e7:12:ce:4b:b9:d0:13:
ad:c3:61:eb:67:f5:df:7f:1b:67:05:1b:81:e9:5a:bc:90:13:
ab:b2:74:a2:10:b1:cf:fb:68:bb:21:59:65:d1:91:68:03:5a:
00:09:3e:0a:72:5d:bd:4c:90:cc:17:dc:5a:dc:a5:ad:7c:6e:
a4:f8:b9:67:17:31:33:55:53:57:fb:8c:6e:cf:86:6e:13:38:
d6:c0:11:11:74:6a:04:cf:78:7b:89:4f:fa:41:0a:73:12:71:
9f:7e:4f:22:ba:42:ea:c1:09:b9:e2:59:92:8d:84:52:21:f9:
da:fb:53:0e:8d:25:58:29:94:18:3d:bf:22:88:ba:f6:bf:b8:
26:d9:a1:63:6e:10:18:b4:17:fd:70:fa:3a:78:6f:9f:3c:57:
fd:dc:46:d8:65:e1:b8:9c:62:1c:95:e8:d3:26:9b:74:03:fd:
37:a4:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:30:29 2026 by rpki-client