Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: Bq46VzZ/MmVaGKocEpfHBCloGU1JdKdInhIURxxKulU=
Subject key identifier: 60:5A:F5:62:C7:3A:66:C4:48:B8:6F:99:EB:80:32:9E:38:F1:22:3D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D7287CE36E2E83F0DD5FCC1A1C9C43E67839E2F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
Signing time: Fri 28 Aug 2026 00:05:44 +0000
ROA not before: Fri 28 Aug 2026 00:00:44 +0000
ROA not after: Fri 27 Aug 2027 00:05:44 +0000
asID: 39521
IP address blocks: 82.21.58.0/24 maxlen: 24
82.21.116.0/24 maxlen: 24
82.21.126.0/24 maxlen: 24
82.21.165.0/24 maxlen: 24
82.22.143.0/24 maxlen: 24
82.22.157.0/24 maxlen: 24
82.22.186.0/24 maxlen: 24
82.23.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:72:87:ce:36:e2:e8:3f:0d:d5:fc:c1:a1:c9:c4:3e:67:83:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 28 00:00:44 2026 GMT
Not After : Aug 27 00:05:44 2027 GMT
Subject: CN=605AF562C73A66C448B86F99EB80329E38F1223D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:cb:95:5a:7c:78:b5:e0:79:05:17:7c:aa:
d4:28:8a:24:ab:fe:c9:0b:57:14:89:78:c6:0a:f8:
32:ad:2a:1a:2e:34:0c:98:98:8d:68:a8:72:ef:19:
ac:75:4d:4c:89:ff:5f:99:f5:da:ef:f1:a6:1f:21:
1f:49:a7:52:80:f6:eb:57:70:e4:4f:f5:a0:0e:9e:
7b:a5:d9:78:41:29:9c:ac:35:88:2e:f7:ea:8a:14:
4b:58:52:df:aa:1a:63:1c:a5:88:93:3e:4a:9c:6d:
bf:9b:8c:91:29:7a:6d:2b:6a:ab:e4:15:de:0d:74:
f2:ee:71:20:4c:a5:15:fa:54:ce:f5:dc:ea:bd:b2:
0a:db:c4:b8:09:91:d4:0d:e0:d5:dc:e8:db:de:91:
10:6d:64:53:71:d1:fb:54:93:f0:26:97:05:87:7b:
d8:51:54:7b:7e:c6:f5:84:e2:c3:0d:4a:57:b4:1f:
3a:37:61:d9:e3:5d:9e:ec:79:63:d5:d0:a6:e9:07:
b0:45:99:c6:3c:7e:ec:89:93:88:1f:be:f2:46:52:
4f:2b:4a:d7:85:ab:9d:1e:40:d7:7a:7f:05:b9:bf:
4e:f7:7f:7c:f3:b9:06:fa:85:38:0a:3b:3c:ff:fa:
ea:fc:1f:92:db:00:0c:3f:d9:93:92:55:63:90:3e:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5A:F5:62:C7:3A:66:C4:48:B8:6F:99:EB:80:32:9E:38:F1:22:3D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.58.0/24
82.21.116.0/24
82.21.126.0/24
82.21.165.0/24
82.22.143.0/24
82.22.157.0/24
82.22.186.0/24
82.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
53:87:c0:64:40:c5:ba:be:4f:0d:cd:ba:a9:77:86:b3:c6:75:
45:36:a1:fc:fe:72:c0:76:47:64:1b:fc:d0:d0:3a:49:b4:92:
8b:8b:25:8e:65:67:a2:f0:34:92:ef:17:59:c1:39:ee:77:d9:
8a:5c:51:1b:a6:3e:27:96:8a:02:2f:d0:6c:8a:d7:a8:b1:5a:
24:65:1c:23:c5:4a:78:07:a7:32:1c:0c:74:2c:37:76:66:f6:
d8:54:0f:cc:b3:e9:93:d8:a4:c8:3f:09:86:37:0d:b6:f9:c0:
63:06:ed:28:e0:eb:12:f9:2d:62:4d:a3:74:ed:fb:55:25:e4:
65:ee:b3:0b:2a:9a:cc:fb:88:cc:c8:fb:85:95:df:2f:fd:e0:
7c:0a:61:6a:d3:9f:7f:be:85:f8:6d:b9:ab:b1:b7:ab:64:31:
c5:02:78:c1:7b:bd:c4:71:28:ee:9e:8a:3a:85:db:dd:5e:45:
34:89:80:2a:af:fb:ab:53:08:86:8a:27:99:4d:dd:5e:cb:e9:
69:2c:45:57:b3:ce:1d:ae:32:cb:f0:bd:ad:ab:e6:aa:f4:0a:
02:b7:50:c1:52:63:6d:83:ba:d8:e9:92:be:79:0d:ec:9d:68:
c3:04:af:3a:5d:86:d5:b7:eb:6c:8c:36:ef:3f:cc:d0:f9:06:
04:6c:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:05:04 2026 by rpki-client