Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11059.roa
File: AS11059.roa (raw, json)
Hash identifier: c4HzXQJjbF9nLfbxHqvbRZCvHeZydvOd8ewc82BvMXc=
Subject key identifier: 63:7C:82:A8:F5:8A:55:A1:1D:68:CA:97:D4:BC:76:FE:63:F3:AF:3F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0A5F754557D67E10274A0737DE44390699687839
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11059.roa
Signing time: Thu 14 May 2026 11:29:23 +0000
ROA not before: Thu 14 May 2026 11:24:23 +0000
ROA not after: Thu 13 May 2027 11:29:23 +0000
asID: 11059
IP address blocks: 96.62.96.0/23 maxlen: 24
150.241.200.0/23 maxlen: 24
162.141.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5f:75:45:57:d6:7e:10:27:4a:07:37:de:44:39:06:99:68:78:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 14 11:24:23 2026 GMT
Not After : May 13 11:29:23 2027 GMT
Subject: CN=637C82A8F58A55A11D68CA97D4BC76FE63F3AF3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:53:2a:01:3e:65:c6:43:5d:33:8c:65:c0:
84:6c:6b:cd:be:7b:61:2d:ce:c8:93:65:a6:ea:40:
02:3e:95:0c:70:3f:a6:24:ee:87:9a:91:02:dd:fd:
d1:45:a4:aa:50:c3:ae:75:10:cb:d6:c7:06:67:f7:
c0:38:1a:e7:cc:17:6e:6b:91:d1:0d:9b:3c:38:8b:
7c:da:91:fa:7e:b6:f9:95:e8:84:71:6d:df:af:42:
3d:27:dd:14:fb:35:f5:00:e8:63:3e:4b:4c:e1:a1:
95:71:83:d3:06:78:41:21:0f:85:8d:da:b9:e7:2d:
09:28:94:08:2a:17:c5:97:06:31:c4:be:e5:c9:00:
f9:8a:67:89:a2:6e:7c:44:a4:be:88:90:bc:75:39:
e9:fe:1a:a6:4f:0c:18:18:a1:46:ec:d8:c5:1b:89:
fd:36:ce:75:84:ca:72:b2:bf:8a:b2:6a:17:46:28:
50:7b:eb:d4:5b:ca:61:ac:1b:36:0b:da:6c:12:8c:
a4:6b:9f:1e:59:00:29:93:66:a6:68:36:d8:5d:4a:
40:6f:d9:71:b0:65:d5:c8:69:c0:ab:b3:c0:bd:9a:
a4:57:f9:cc:49:a6:c0:73:f8:e5:d0:4b:5a:85:fd:
47:ff:c1:13:67:3d:45:39:54:25:c4:31:24:7f:da:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:82:A8:F5:8A:55:A1:1D:68:CA:97:D4:BC:76:FE:63:F3:AF:3F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.96.0/23
150.241.200.0/23
162.141.82.0/23
Signature Algorithm: sha256WithRSAEncryption
06:b6:c0:fb:24:87:c8:65:b6:f5:34:65:75:96:72:0b:d3:2a:
d2:4a:c1:7a:16:a9:df:9a:c6:59:fb:52:bf:a6:90:a1:88:35:
51:ff:8d:cb:c1:8d:60:f9:9a:86:17:36:da:31:9a:5c:f8:c5:
00:9f:6e:87:60:0c:4d:d2:37:c4:76:31:53:ba:9b:1c:72:7c:
ec:34:9b:33:e6:43:41:36:c0:f0:03:bd:b3:af:b8:9e:8a:c5:
e2:0f:9c:98:06:ac:ec:db:8b:09:7d:52:9b:0d:32:f0:4b:9d:
c5:f4:27:c9:6f:82:b7:2a:79:9b:19:64:ef:17:6e:ba:19:45:
9b:e6:eb:f1:0b:92:a9:39:4a:5e:6d:76:93:18:b5:10:63:4f:
2a:56:5c:ba:91:7c:68:78:a8:35:6e:fe:34:97:13:ff:8b:7e:
f4:07:6a:2b:a7:09:91:2a:f6:46:82:14:fd:f5:c3:fd:ed:96:
61:28:82:6d:e0:cd:48:d2:a7:6e:8a:bf:6e:7b:36:30:f7:48:
14:03:62:75:0c:93:36:0a:9c:50:52:f6:07:44:16:10:6a:f2:
c3:12:50:72:14:93:7c:12:95:42:a6:c8:d8:27:2d:71:dc:7f:
b4:c5:d0:ca:c1:5d:11:aa:d0:91:cc:84:96:81:e4:b1:6b:ff:
81:ea:21:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:27 2026 by rpki-client