Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: gG3UoIKR+1DTJaQJbzMQsy9/vVdRZXpegzll2uQy1p0=
Subject key identifier: 3C:54:78:39:38:28:B5:03:1D:33:63:89:34:42:CC:65:9B:F3:EF:DF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 241480AA6F34D6A5B8683461F59C83363C216106
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21859.roa
Signing time: Tue 03 Nov 2026 14:13:21 +0000
ROA not before: Tue 03 Nov 2026 14:08:21 +0000
ROA not after: Tue 02 Nov 2027 14:13:21 +0000
asID: 21859
IP address blocks: 141.11.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 07:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:14:80:aa:6f:34:d6:a5:b8:68:34:61:f5:9c:83:36:3c:21:61:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 3 14:08:21 2026 GMT
Not After : Nov 2 14:13:21 2027 GMT
Subject: CN=3C5478393828B5031D3363893442CC659BF3EFDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:37:b0:94:45:bf:ee:52:c4:83:9f:02:d3:
58:52:de:92:f0:8d:8b:cc:50:f1:d6:b0:3b:4f:7b:
df:53:79:72:25:c3:d2:57:83:d7:33:0f:59:32:81:
ac:ff:d3:89:16:9e:09:db:9e:87:83:ee:a9:ec:9a:
df:2b:00:d7:4d:1b:c3:c9:af:26:50:3c:ee:fd:34:
93:47:c7:59:08:55:d2:20:6f:80:e2:43:70:00:36:
5f:bc:8c:b9:b2:3f:1d:f6:a6:a4:ac:9a:b1:dd:9f:
07:ff:73:7f:12:20:36:81:8c:dd:7c:07:c0:d9:60:
0f:11:a6:14:30:32:ad:c3:c1:f1:99:51:02:ad:a9:
c7:a3:22:85:8f:ad:4c:6f:b3:44:71:e2:e7:0e:45:
c4:99:bc:1f:38:8a:2d:70:57:a5:d3:ca:1e:61:d9:
64:d4:3b:b6:14:e9:c7:14:6b:e8:5f:7d:94:11:c0:
05:2f:76:ed:a6:c5:e2:1e:b8:a8:c4:ed:c9:c8:60:
34:9f:76:b1:19:db:70:8b:8d:25:51:93:a4:ed:0a:
fe:8a:86:67:73:33:b7:b9:c1:64:5c:b1:d9:e7:a1:
be:22:18:23:12:90:a2:3d:f9:e6:d0:9b:76:24:cf:
59:af:cb:24:05:c6:bf:7b:1b:a2:a6:d6:8d:89:9d:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:78:39:38:28:B5:03:1D:33:63:89:34:42:CC:65:9B:F3:EF:DF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.157.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7b:7d:71:fb:d1:1e:e3:75:35:b8:01:ee:28:bc:5a:35:67:
77:1c:df:e1:aa:0e:da:b1:83:4d:1f:54:4a:da:44:44:9d:52:
70:ef:43:91:8c:58:2c:f2:57:96:fd:0a:72:d0:95:91:e4:6b:
b9:67:0e:14:e9:39:ed:1f:8c:37:9d:f0:68:ca:71:a0:72:9c:
6f:e3:91:69:a9:2c:94:9b:e1:fa:45:c9:ff:79:02:02:5a:46:
09:c6:91:2a:dc:b8:e3:4e:1e:56:1d:ec:d8:32:c2:7a:22:ae:
a1:01:45:74:b3:de:91:00:a4:a5:40:ef:51:c1:b7:11:61:9a:
02:33:b4:7e:05:bc:4b:4b:cc:a4:77:9d:79:2a:e2:0c:75:be:
21:b8:a6:bc:4a:b0:77:bb:e0:31:d0:90:d5:25:11:d7:91:b8:
2c:55:19:e3:fa:a9:08:07:e3:7f:ed:24:42:4e:87:96:84:bb:
e7:2b:a2:e3:5a:21:56:1c:ec:42:14:02:27:59:28:5a:c4:0a:
be:cb:29:b8:e8:11:ed:a1:96:bf:85:f1:6a:c6:a8:15:4e:70:
ed:45:e1:c3:dc:b1:0c:ff:f4:fc:0a:b3:f7:30:c5:54:1a:33:
49:5b:65:d8:af:a1:4d:ea:39:80:5b:35:1a:6d:d9:5f:a4:fb:
46:6e:a5:e9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJBSAqm801qW4aDRh9ZyDNjwhYQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjExMDMxNDA4MjFaFw0yNzExMDIxNDEzMjFaMDMxMTAvBgNV
BAMTKDNDNTQ3ODM5MzgyOEI1MDMxRDMzNjM4OTM0NDJDQzY1OUJGM0VGREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qDewlEW/7lLEg58C01hS3pLw
jYvMUPHWsDtPe99TeXIlw9JXg9czD1kygaz/04kWngnbnoeD7qnsmt8rANdNG8PJ
ryZQPO79NJNHx1kIVdIgb4DiQ3AANl+8jLmyPx32pqSsmrHdnwf/c38SIDaBjN18
B8DZYA8RphQwMq3DwfGZUQKtqcejIoWPrUxvs0Rx4ucORcSZvB84ii1wV6XTyh5h
2WTUO7YU6ccUa+hffZQRwAUvdu2mxeIeuKjE7cnIYDSfdrEZ23CLjSVRk6TtCv6K
hmdzM7e5wWRcsdnnob4iGCMSkKI9+ebQm3Ykz1mvyyQFxr97G6Km1o2JnW4/AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUPFR4OTgotQMdM2OJNELMZZvz798wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE4NTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC50w
DQYJKoZIhvcNAQELBQADggEBAFJ7fXH70R7jdTW4Ae4ovFo1Z3cc3+GqDtqxg00f
VEraRESdUnDvQ5GMWCzyV5b9CnLQlZHka7lnDhTpOe0fjDed8GjKcaBynG/jkWmp
LJSb4fpFyf95AgJaRgnGkSrcuONOHlYd7NgywnoirqEBRXSz3pEApKVA71HBtxFh
mgIztH4FvEtLzKR3nXkq4gx1viG4prxKsHe74DHQkNUlEdeRuCxVGeP6qQgH43/t
JEJOh5aEu+crouNaIVYc7EIUAidZKFrECr7LKbjoEe2hlr+F8WrGqBVOcO1F4cPc
sQz/9PwKs/cwxVQaM0lbZdivoU3qOYBbNRpt2V+k+0Zupek=
-----END CERTIFICATE-----
Generated at Sun Nov 8 00:53:54 2026 by rpki-client