Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: dd/jsP6s2BgK4b7pp4/qhgw5oXvaNJQCPg9ZqxbLpl4=
Subject key identifier: 81:BA:86:3E:A8:64:16:3B:55:45:1B:96:E2:7B:FA:68:D5:AB:4B:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 68992DF87A96A2836D02F5993C19BC2DE30AD73A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
Signing time: Wed 28 Oct 2026 00:06:09 +0000
ROA not before: Wed 28 Oct 2026 00:01:09 +0000
ROA not after: Wed 27 Oct 2027 00:06:09 +0000
asID: 39521
IP address blocks: 82.21.58.0/24 maxlen: 24
82.22.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:99:2d:f8:7a:96:a2:83:6d:02:f5:99:3c:19:bc:2d:e3:0a:d7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 28 00:01:09 2026 GMT
Not After : Oct 27 00:06:09 2027 GMT
Subject: CN=81BA863EA864163B55451B96E27BFA68D5AB4BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:5c:f8:ee:05:fb:e7:68:32:d8:c1:b8:dc:
cc:c7:21:3b:4c:7f:d7:38:f9:b7:eb:07:ba:da:7b:
7e:c1:30:cd:28:fc:33:b0:03:c4:57:86:17:1d:13:
6c:af:86:cf:16:c1:18:5e:0c:6c:f2:07:8b:ce:af:
87:97:7d:ae:82:67:08:23:cb:a6:d9:14:fc:4d:b1:
f4:3b:d2:60:fc:56:5e:b7:6d:0b:5c:47:d6:8b:7d:
5d:9a:83:30:a6:d8:30:83:2e:02:bc:5d:8a:42:3e:
bf:b7:9f:29:74:36:fa:de:97:6b:8d:15:18:dd:6e:
38:13:3b:50:b2:4e:9f:0a:a7:36:79:84:4f:47:c3:
5d:aa:db:c6:82:9b:cc:37:3f:2c:db:2a:ad:f4:70:
31:71:26:24:39:59:51:55:a0:f9:ab:2a:4d:ec:15:
18:ce:c9:8f:da:39:dc:8b:e6:bd:b8:77:01:55:2d:
62:32:5b:fd:91:b7:ac:0a:97:a9:df:ca:a7:fa:c0:
95:02:09:f7:08:26:49:a3:30:e0:06:41:5f:e5:a0:
d2:85:d0:fa:da:b5:82:dc:43:c7:ad:af:5a:d5:06:
97:2a:13:13:41:0a:0d:fd:cc:8d:c3:bc:f5:8e:f3:
96:68:7f:58:80:5e:a4:f6:90:45:93:47:b6:60:92:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BA:86:3E:A8:64:16:3B:55:45:1B:96:E2:7B:FA:68:D5:AB:4B:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.58.0/24
82.22.186.0/24
Signature Algorithm: sha256WithRSAEncryption
26:de:7d:0f:b9:2c:b0:bf:2d:04:e6:d6:fd:bc:24:4f:84:52:
48:19:29:6b:23:6a:ea:bb:74:01:49:70:cf:78:2e:ae:ff:86:
97:d3:04:80:1e:a2:3d:81:11:7a:7d:e1:f9:29:c5:7d:2b:3a:
16:81:97:2f:52:5d:c6:25:ab:52:ce:ca:4e:47:47:5d:f9:c9:
ef:f3:7d:f1:65:65:79:a1:d8:60:d2:04:f3:2b:61:83:72:84:
c7:3d:89:1e:fc:35:f2:4f:07:1f:e7:0d:df:a1:00:42:66:95:
5f:51:ee:1d:9f:7e:7d:ec:7c:c3:bd:4f:9e:1c:3e:e4:0f:24:
e1:1d:f1:9e:ec:38:29:99:9d:fd:5e:f0:cb:fa:bf:79:46:84:
7c:e2:f2:71:e4:03:a9:19:4c:94:10:b0:00:cb:e9:6a:03:24:
7e:95:2d:65:f0:e3:17:35:ca:dd:aa:81:ae:cf:ba:70:0b:4c:
e5:14:69:a8:aa:06:1a:08:1f:96:8e:c7:d2:d8:02:8c:f6:54:
80:f5:c8:45:66:d1:d0:0b:bf:e5:3c:00:5b:2b:cc:1c:ba:4a:
2a:80:d1:ca:80:02:35:d8:e5:df:04:2d:29:cd:62:6a:7e:49:
07:60:07:97:b4:dd:94:cb:65:9b:ae:e5:ed:eb:c7:f4:43:92:
68:fb:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:39:28 2026 by rpki-client