Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: o+6VabCojz20y8hcpDiBQ/sObpmlJZs+Jo2J87iPDC4=
Subject key identifier: 80:55:35:C7:E7:5A:B2:5F:6F:69:45:C2:68:00:87:E2:07:77:76:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A60ABB367188C3BC5299102D40A4FF42E3806CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
Signing time: Sun 26 Jul 2026 10:55:21 +0000
ROA not before: Sun 26 Jul 2026 10:50:21 +0000
ROA not after: Sun 25 Jul 2027 10:55:21 +0000
asID: 21859
IP address blocks: 82.21.111.0/24 maxlen: 24
82.22.162.0/24 maxlen: 24
82.22.193.0/24 maxlen: 24
82.22.196.0/24 maxlen: 24
82.23.171.0/24 maxlen: 24
82.25.35.0/24 maxlen: 24
82.26.87.0/24 maxlen: 24
82.26.196.0/24 maxlen: 24
82.27.108.0/24 maxlen: 24
82.27.124.0/24 maxlen: 24
82.27.129.0/24 maxlen: 24
82.27.197.0/24 maxlen: 24
82.29.41.0/24 maxlen: 24
82.38.100.0/24 maxlen: 24
82.38.180.0/24 maxlen: 24
82.38.200.0/24 maxlen: 24
82.39.114.0/24 maxlen: 24
82.39.146.0/24 maxlen: 24
82.39.148.0/24 maxlen: 24
82.39.188.0/24 maxlen: 24
82.39.208.0/24 maxlen: 24
82.40.48.0/24 maxlen: 24
82.40.59.0/24 maxlen: 24
82.41.99.0/24 maxlen: 24
82.41.130.0/24 maxlen: 24
82.47.29.0/24 maxlen: 24
84.75.215.0/24 maxlen: 24
84.75.216.0/24 maxlen: 24
178.83.18.0/24 maxlen: 24
178.83.58.0/24 maxlen: 24
178.83.100.0/24 maxlen: 24
178.83.199.0/24 maxlen: 24
178.83.222.0/24 maxlen: 24
2a13:9500:aa::/48 maxlen: 48
2a13:9500:13f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:60:ab:b3:67:18:8c:3b:c5:29:91:02:d4:0a:4f:f4:2e:38:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 26 10:50:21 2026 GMT
Not After : Jul 25 10:55:21 2027 GMT
Subject: CN=805535C7E75AB25F6F6945C2680087E2077776B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:a0:2a:59:4d:3d:d3:0d:d8:6f:96:46:3e:
38:6b:ac:24:76:a3:3f:4e:03:29:d6:f9:8c:73:20:
83:3d:95:35:81:85:49:c6:74:0d:79:2e:c6:e2:1c:
09:de:32:b0:9f:ec:a3:45:ba:e9:96:9a:9d:5b:e1:
7c:70:7b:ca:ba:e6:2c:73:9e:0d:4e:ce:67:43:1e:
89:8d:c9:e8:df:ba:f5:91:b4:70:fe:69:5a:6c:14:
c5:a1:18:2b:8c:76:32:87:4f:08:a8:41:89:60:13:
5c:63:b9:6b:8f:6d:43:f2:2e:1c:a4:44:e7:72:eb:
81:2c:84:b0:62:fb:24:96:82:07:79:fd:4a:fe:16:
9f:21:16:5f:b3:6a:73:df:06:66:95:e5:9e:b4:95:
b7:56:06:8e:77:f0:e1:a4:f0:8d:80:41:b3:1a:47:
53:02:fe:f9:01:ae:00:d1:b1:f3:a2:fa:55:e7:9b:
f6:ec:e2:9d:34:cf:b8:6a:75:47:0f:84:96:58:a3:
8a:d1:0a:4e:c5:e6:72:3c:75:fb:5a:9c:6d:58:73:
19:f5:76:c6:42:9c:50:3d:75:89:5d:34:ec:87:17:
07:fa:b2:38:27:e5:0d:95:fc:40:34:2b:87:0b:c4:
03:01:65:a7:b1:20:03:7c:6e:8c:ac:f7:5b:cc:39:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:35:C7:E7:5A:B2:5F:6F:69:45:C2:68:00:87:E2:07:77:76:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.111.0/24
82.22.162.0/24
82.22.193.0/24
82.22.196.0/24
82.23.171.0/24
82.25.35.0/24
82.26.87.0/24
82.26.196.0/24
82.27.108.0/24
82.27.124.0/24
82.27.129.0/24
82.27.197.0/24
82.29.41.0/24
82.38.100.0/24
82.38.180.0/24
82.38.200.0/24
82.39.114.0/24
82.39.146.0/24
82.39.148.0/24
82.39.188.0/24
82.39.208.0/24
82.40.48.0/24
82.40.59.0/24
82.41.99.0/24
82.41.130.0/24
82.47.29.0/24
84.75.215.0-84.75.216.255
178.83.18.0/24
178.83.58.0/24
178.83.100.0/24
178.83.199.0/24
178.83.222.0/24
IPv6:
2a13:9500:aa::/48
2a13:9500:13f::/48
Signature Algorithm: sha256WithRSAEncryption
10:6c:67:9b:0d:d7:f0:74:f5:e1:d9:0e:e0:4f:fb:09:2a:5b:
90:9d:f8:0b:47:b3:a0:b8:ba:7c:50:cf:29:bf:8a:e8:dd:c0:
a5:9b:a3:0c:e2:f3:77:a4:5e:8e:ca:da:c8:42:65:ab:f8:db:
41:49:8f:c7:2b:18:75:e1:e4:f7:98:e0:19:bc:bd:21:87:f3:
04:5f:2e:ed:8a:d0:e3:43:fe:a3:06:8f:53:7b:16:2e:9e:8e:
b8:42:f6:9c:fc:31:f7:23:d3:87:b6:9e:2b:a8:65:07:ef:e7:
ee:97:ac:96:10:e3:14:b4:29:9a:89:26:47:95:08:f3:aa:9b:
8b:0b:ac:e1:b5:71:26:1a:3b:e5:e7:28:e6:de:81:bd:38:42:
17:ab:91:bb:97:59:0b:19:8d:fb:18:f6:cb:8f:42:fb:e4:94:
9f:a8:e4:85:f1:5d:20:7e:d9:b9:02:b6:d0:70:75:2e:64:15:
d2:5a:20:17:89:24:fa:05:8c:ec:5f:27:26:a1:0c:77:50:ff:
3c:eb:31:96:e5:3c:b2:bd:37:12:27:59:76:15:5c:4b:63:2d:
b4:68:91:84:87:db:24:04:5e:f3:25:fd:dc:ef:c1:24:55:18:
0e:aa:af:ee:5c:ed:36:5b:78:c2:9d:12:30:07:66:cf:eb:02:
e4:7e:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:29:12 2026 by rpki-client