Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: 2+nZLFL46zId3qbkqGy1LIPAjE/wv3uTcm6Kz+nr+Mk=
Subject key identifier: F6:52:BA:47:99:4B:C5:4C:A2:EA:FB:8B:4B:DA:04:F5:4E:C9:50:85
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3362D8AD35F08445B0913069682F59351C175D5D
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
Signing time: Tue 15 Sep 2026 12:46:48 +0000
ROA not before: Tue 15 Sep 2026 12:41:48 +0000
ROA not after: Tue 14 Sep 2027 12:46:48 +0000
asID: 21859
IP address blocks: 91.206.2.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
2a07:fc40::/29 maxlen: 29
2a09:40::/29 maxlen: 29
2a0c:2cc0::/29 maxlen: 29
2a0c:43c0::/29 maxlen: 29
2a0c:4e00::/29 maxlen: 29
2a10:8740::/29 maxlen: 29
2a10:e180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:62:d8:ad:35:f0:84:45:b0:91:30:69:68:2f:59:35:1c:17:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 15 12:41:48 2026 GMT
Not After : Sep 14 12:46:48 2027 GMT
Subject: CN=F652BA47994BC54CA2EAFB8B4BDA04F54EC95085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:e5:cf:cc:a3:67:cc:38:2f:3b:ce:75:db:
c3:d0:bd:d6:44:7b:52:95:41:86:8a:c8:ef:cc:58:
76:ab:02:5f:04:2c:e4:26:bd:2f:5f:f4:92:58:97:
8c:be:f7:e8:1a:44:49:f0:65:99:4d:2f:92:48:10:
2c:51:e1:2b:37:51:b1:d9:6f:a2:f8:5b:70:3d:9a:
e0:6d:71:e2:9a:9b:7c:a1:50:d6:9d:ba:ae:56:ab:
0d:ac:b1:07:bd:33:09:8f:94:f6:b4:53:d5:ec:07:
82:bc:87:ef:a0:4c:9e:18:f6:2f:50:bf:c0:9b:4f:
6d:ca:e4:e8:40:13:b6:fb:0d:97:81:3a:59:83:97:
99:45:e1:4b:17:e4:5c:d8:a1:c1:b6:bb:6b:23:7a:
5f:39:12:5c:8f:3c:fc:52:53:46:73:ff:ac:06:f3:
e8:d3:db:d3:6d:92:ba:98:31:ba:8b:d7:bd:b7:90:
a0:7f:55:5d:0a:b5:fb:f0:2c:dd:61:96:76:51:dc:
10:38:79:8b:84:53:f8:73:a0:c8:73:56:72:5b:30:
d3:c5:4e:2c:f2:6d:49:e5:6d:07:74:72:1f:4c:73:
92:b2:fc:3e:30:98:d1:aa:d2:19:76:c8:05:28:5e:
72:d3:6c:96:16:58:96:94:f1:20:86:71:2e:a3:68:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:52:BA:47:99:4B:C5:4C:A2:EA:FB:8B:4B:DA:04:F5:4E:C9:50:85
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
194.147.4.0/24
IPv6:
2a07:fc40::/29
2a09:40::/29
2a0c:2cc0::/29
2a0c:43c0::/29
2a0c:4e00::/29
2a10:8740::/29
2a10:e180::/29
Signature Algorithm: sha256WithRSAEncryption
c9:3a:72:30:21:c1:23:cc:5b:14:70:e0:98:a4:d6:4a:32:f8:
ba:55:be:eb:59:0c:d0:17:3b:8e:52:b7:ec:03:69:34:42:a5:
5e:3c:19:82:03:9e:0e:99:e7:e1:1b:3c:06:7e:43:2b:9e:27:
b5:8a:34:39:f6:73:b2:37:0c:b6:d7:45:57:f3:dd:b4:06:92:
6f:3a:d8:bd:55:bf:6a:7b:a0:fe:d3:cf:4b:f0:42:33:0b:d5:
18:f6:69:68:66:83:ff:49:85:14:cd:26:44:9b:17:0a:43:78:
3c:fd:b2:06:94:8c:21:e7:34:b1:00:5c:cd:c9:ab:41:be:72:
95:df:a5:65:0a:56:39:5f:43:1c:ad:56:8e:bd:dd:ff:fd:fd:
26:b6:50:e9:33:be:f3:8c:ad:75:75:5a:8c:42:b1:2e:f6:44:
9b:b4:27:0c:8f:b4:bf:1b:c3:30:57:1b:3a:a3:29:95:f5:35:
08:20:4d:5f:e4:ac:38:4c:d0:16:8a:4b:70:88:a7:1c:0c:13:
87:9d:ad:45:43:ee:1c:cd:82:75:cb:f3:59:d8:f2:d4:70:c3:
92:01:47:27:4f:17:01:97:93:fb:90:df:ea:e3:ea:4c:f8:28:
02:84:36:c8:72:4b:23:f0:00:2b:28:6b:dc:dc:22:0b:ab:f6:
d1:ae:46:27
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUM2LYrTXwhEWwkTBpaC9ZNRwXXV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA5MTUxMjQxNDhaFw0yNzA5MTQxMjQ2NDhaMDMxMTAvBgNV
BAMTKEY2NTJCQTQ3OTk0QkM1NENBMkVBRkI4QjRCREEwNEY1NEVDOTUwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVuXPzKNnzDgvO85128PQvdZE
e1KVQYaKyO/MWHarAl8ELOQmvS9f9JJYl4y+9+gaREnwZZlNL5JIECxR4Ss3UbHZ
b6L4W3A9muBtceKam3yhUNaduq5Wqw2ssQe9MwmPlPa0U9XsB4K8h++gTJ4Y9i9Q
v8CbT23K5OhAE7b7DZeBOlmDl5lF4UsX5FzYocG2u2sjel85ElyPPPxSU0Zz/6wG
8+jT29NtkrqYMbqL1723kKB/VV0KtfvwLN1hlnZR3BA4eYuEU/hzoMhzVnJbMNPF
TizybUnlbQd0ch9Mc5Ky/D4wmNGq0hl2yAUoXnLTbJYWWJaU8SCGcS6jaHNjAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQU9lK6R5lLxUyi6vuLS9oE9U7JUIUwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE4NTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwXgYIKwYBBQUHAQcBAf8ETzBNMBIEAgABMAwDBABbzgID
BADCkwQwNwQCAAIwMQMFAyoH/EADBQMqCQBAAwUDKgwswAMFAyoMQ8ADBQMqDE4A
AwUDKhCHQAMFAyoQ4YAwDQYJKoZIhvcNAQELBQADggEBAMk6cjAhwSPMWxRw4Jik
1koy+LpVvutZDNAXO45St+wDaTRCpV48GYIDng6Z5+EbPAZ+QyueJ7WKNDn2c7I3
DLbXRVfz3bQGkm862L1Vv2p7oP7Tz0vwQjML1Rj2aWhmg/9JhRTNJkSbFwpDeDz9
sgaUjCHnNLEAXM3Jq0G+cpXfpWUKVjlfQxytVo693f/9/Sa2UOkzvvOMrXV1WoxC
sS72RJu0JwyPtL8bwzBXGzqjKZX1NQggTV/krDhM0BaKS3CIpxwME4edrUVD7hzN
gnXL81nY8tRww5IBRydPFwGXk/uQ3+rj6kz4KAKENshySyPwACsoa9zcIgur9tGu
Ric=
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:22:33 2026 by rpki-client