Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: TZUdRFU2+OZLOn6lEdEefmXYLIdxdgtPxEZjX76GVC0=
Subject key identifier: D7:20:AA:53:EF:B9:12:E1:76:AA:F0:DE:81:13:F1:B8:46:98:F7:5D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0A5F41511F79DCA4ED105321BF91341983200954
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11426.roa
Signing time: Fri 19 Jun 2026 13:47:47 +0000
ROA not before: Fri 19 Jun 2026 13:42:47 +0000
ROA not after: Fri 18 Jun 2027 13:47:47 +0000
asID: 11426
IP address blocks: 143.14.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5f:41:51:1f:79:dc:a4:ed:10:53:21:bf:91:34:19:83:20:09:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 19 13:42:47 2026 GMT
Not After : Jun 18 13:47:47 2027 GMT
Subject: CN=D720AA53EFB912E176AAF0DE8113F1B84698F75D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:94:b7:e9:a2:e1:49:62:58:ec:f3:5a:6a:
69:9e:40:9a:b1:5b:ba:ed:c0:2c:a7:10:8d:ec:94:
b7:64:33:6d:2d:0a:ba:f4:d3:cb:43:21:e0:ec:da:
5b:c9:f9:ad:37:7b:74:dd:85:ce:b4:d3:bb:e9:37:
84:31:3c:fc:5b:05:e0:42:1e:51:df:51:47:13:39:
4a:d6:8b:d1:ed:4c:e3:ef:46:cf:64:76:a0:6e:72:
82:10:e1:52:b0:9f:1c:87:be:df:4b:02:c2:59:73:
25:d9:12:86:32:a5:f6:fb:13:99:15:cc:ed:d6:c2:
09:b2:9f:0a:bf:8b:1b:86:3b:ef:37:2c:cc:36:70:
c7:3a:d6:8d:9d:56:46:34:6f:2e:9c:6a:32:12:6a:
41:68:01:94:21:65:1b:d1:d7:1c:b2:62:dc:ec:77:
1b:51:bf:ec:4f:b1:c1:7f:f5:75:45:2c:b8:e8:f3:
2d:1b:81:4f:3d:ce:58:2e:ef:8a:ce:1b:dc:86:c8:
a8:c0:a7:a1:c1:ae:2b:f2:35:9b:a1:2f:db:80:12:
97:a1:eb:70:fc:3c:62:a1:c0:3d:1b:82:3a:13:73:
5e:7a:f3:61:17:05:75:e6:de:fd:44:45:f5:b6:f2:
b3:be:ce:18:fb:fe:b2:83:36:d9:ef:22:08:c8:63:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:AA:53:EF:B9:12:E1:76:AA:F0:DE:81:13:F1:B8:46:98:F7:5D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:51:bb:d4:38:ed:89:97:6a:dc:78:c3:ef:b0:39:2e:38:d9:
4b:e4:b9:3d:79:d6:57:0a:47:16:57:25:e2:9b:d8:d8:e5:01:
85:45:4f:b7:9a:9f:61:9e:d6:f5:ef:3d:60:f6:be:65:74:ba:
18:3e:ea:82:e5:75:b3:14:b5:23:53:bd:a7:c8:fb:f5:28:32:
d7:f0:8c:a2:27:68:7b:5b:fb:d0:af:c7:cb:2b:90:f8:65:f6:
57:38:b0:ee:47:99:cc:22:ce:56:3c:54:a2:3d:90:ae:2c:af:
49:dc:22:ce:ed:7f:7c:6c:82:a9:22:58:e9:45:c3:65:a7:fd:
ae:d3:78:3d:ce:b6:11:2f:eb:91:c4:53:9c:e4:a1:d5:27:5a:
8a:ec:00:91:75:61:1a:9a:aa:32:b1:80:80:7b:af:1e:fc:3c:
1e:82:93:7f:d3:69:e1:c7:24:38:ff:10:94:9c:72:83:5d:8b:
56:e2:73:3c:56:57:cf:fc:60:10:b2:32:09:84:1e:f0:20:6d:
f8:3c:b9:20:14:57:16:a1:97:08:44:4b:fa:ce:20:0e:fd:cf:
12:3d:47:60:dc:ed:c3:6d:84:eb:35:b6:85:da:78:f4:c2:bf:
20:49:a0:31:7e:4a:6c:28:ee:58:6e:e9:d7:59:c5:e5:69:68:
1a:f2:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:14 2026 by rpki-client