Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: UnoFWAHUe7vogCBr2Vk+32NGP0ZPqQWQVYnn2p7IYpM=
Subject key identifier: D9:B3:A1:4D:42:3B:8F:AA:5F:05:29:20:A6:28:D0:2D:BB:4B:3E:83
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26BE3619EEF927213423B1AB65897703F1CDAAE3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
Signing time: Thu 11 Jun 2026 00:37:22 +0000
ROA not before: Thu 11 Jun 2026 00:32:22 +0000
ROA not after: Thu 10 Jun 2027 00:37:22 +0000
asID: 39521
IP address blocks: 82.21.58.0/24 maxlen: 24
82.21.112.0/24 maxlen: 24
82.21.116.0/24 maxlen: 24
82.21.126.0/24 maxlen: 24
82.21.165.0/24 maxlen: 24
82.22.143.0/24 maxlen: 24
82.22.157.0/24 maxlen: 24
82.22.186.0/24 maxlen: 24
82.23.188.0/24 maxlen: 24
82.23.191.0/24 maxlen: 24
82.47.198.0/24 maxlen: 24
82.47.199.0/24 maxlen: 24
82.47.200.0/24 maxlen: 24
82.47.201.0/24 maxlen: 24
82.47.203.0/24 maxlen: 24
82.47.204.0/24 maxlen: 24
82.47.205.0/24 maxlen: 24
84.75.189.0/24 maxlen: 24
84.75.190.0/24 maxlen: 24
84.75.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:be:36:19:ee:f9:27:21:34:23:b1:ab:65:89:77:03:f1:cd:aa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 11 00:32:22 2026 GMT
Not After : Jun 10 00:37:22 2027 GMT
Subject: CN=D9B3A14D423B8FAA5F052920A628D02DBB4B3E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:b7:8e:3d:03:c0:80:be:2f:fa:fb:8b:1c:
2a:30:a1:da:2c:4d:ca:da:7e:92:32:af:9d:9a:87:
7e:ab:be:65:db:72:f4:05:c9:6d:b1:ec:aa:08:bb:
9b:9d:52:ba:99:a1:33:a5:f0:10:1e:7b:ad:ba:b7:
01:d9:8b:85:37:7d:63:da:8a:a5:54:e9:e2:3d:b6:
25:ad:26:21:3b:e6:08:fc:99:70:e1:ff:de:c1:61:
ef:f4:19:bf:33:61:55:0e:d8:03:07:fe:2f:9d:a2:
dc:95:b8:af:47:c5:1c:b2:ca:a5:08:15:db:26:30:
26:a2:54:71:4f:ce:37:8b:cd:e9:84:9a:09:66:56:
76:73:e9:2e:9b:7b:3a:6d:9e:0a:32:fb:32:1d:0f:
84:19:a8:39:f6:3f:68:e6:90:c1:d8:95:7f:38:05:
4c:4b:91:ce:fd:9f:d5:68:44:e3:6e:2f:05:dc:34:
f7:46:e9:43:2d:6e:93:3d:97:7c:16:79:c1:16:9e:
9c:34:73:22:f8:c4:e0:ce:8c:ca:5e:ec:cf:2b:ae:
ba:b7:56:5f:ff:94:97:77:ef:6e:98:e2:cb:3e:2d:
5e:27:1f:c1:f1:64:10:c6:87:f7:10:50:89:7a:42:
dd:57:f2:a5:40:a7:32:50:cf:33:2b:4a:49:7c:a5:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:A1:4D:42:3B:8F:AA:5F:05:29:20:A6:28:D0:2D:BB:4B:3E:83
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.58.0/24
82.21.112.0/24
82.21.116.0/24
82.21.126.0/24
82.21.165.0/24
82.22.143.0/24
82.22.157.0/24
82.22.186.0/24
82.23.188.0/24
82.23.191.0/24
82.47.198.0-82.47.201.255
82.47.203.0-82.47.205.255
84.75.189.0-84.75.191.255
Signature Algorithm: sha256WithRSAEncryption
88:14:77:52:ac:d8:a3:04:7f:91:71:d8:60:0c:cd:1d:e8:29:
2d:1a:8f:57:a6:1c:ce:bc:72:04:f3:e9:58:11:1c:ac:d1:47:
21:a7:4f:62:f5:53:da:bf:f3:22:e6:a3:45:65:d7:a8:1e:f5:
2a:75:95:5a:88:1d:60:68:86:39:3a:9e:e0:27:27:57:b7:70:
64:f5:10:31:75:31:a5:b3:09:30:6b:4f:88:ae:95:d8:40:8a:
b9:6d:58:73:52:e4:be:92:63:e5:57:3d:14:bd:11:bf:d4:40:
a4:84:28:05:78:9b:b8:9d:f0:44:a7:f0:b0:05:8e:a0:8c:b8:
db:f7:c4:a6:61:bc:fc:8c:27:38:40:ac:3e:b2:de:66:da:88:
56:e7:5a:f3:cf:20:48:7e:15:fb:10:c2:93:bf:b0:67:38:08:
28:0d:73:48:1a:1c:93:ee:54:80:56:ac:c5:83:24:4f:55:83:
0d:e2:ac:73:9c:b9:78:ed:49:5e:19:8d:ea:96:c2:33:e2:95:
07:48:9b:db:34:8d:66:8d:aa:37:e1:50:c9:25:90:7e:21:2e:
ee:84:c3:a6:21:79:62:e7:66:09:e0:c5:20:82:41:50:2d:14:
85:77:f0:fa:3a:cc:93:a6:4d:61:4f:89:32:d7:37:17:ef:94:
9d:4d:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:26:55 2026 by rpki-client