Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: Z+5Ba9n/+bydZO0mstgWkDheWIVl6zIvOvOw8cBTi4g=
Subject key identifier: A5:CE:4F:3E:02:29:AF:15:1C:96:01:06:BE:96:8A:2E:67:15:9D:8B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04C4B7FD4FF345A4D84E2911C9691F968AEEBDE8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
Signing time: Tue 08 Sep 2026 00:07:34 +0000
ROA not before: Tue 08 Sep 2026 00:02:34 +0000
ROA not after: Tue 07 Sep 2027 00:07:34 +0000
asID: 11404
IP address blocks: 136.143.244.0/24 maxlen: 24
136.143.251.0/24 maxlen: 24
136.143.253.0/24 maxlen: 24
136.143.255.0/24 maxlen: 24
158.140.195.0/24 maxlen: 24
158.140.198.0/24 maxlen: 24
158.140.201.0/24 maxlen: 24
158.140.204.0/24 maxlen: 24
158.140.206.0/23 maxlen: 23
158.140.212.0/23 maxlen: 23
158.140.215.0/24 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.168.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
203.100.208.0/23 maxlen: 23
203.100.211.0/24 maxlen: 24
203.160.112.0/23 maxlen: 23
203.160.115.0/24 maxlen: 24
203.160.119.0/24 maxlen: 24
203.160.120.0/23 maxlen: 23
203.160.122.0/24 maxlen: 24
203.160.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c4:b7:fd:4f:f3:45:a4:d8:4e:29:11:c9:69:1f:96:8a:ee:bd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:02:34 2026 GMT
Not After : Sep 7 00:07:34 2027 GMT
Subject: CN=A5CE4F3E0229AF151C960106BE968A2E67159D8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:bd:1a:7a:02:ca:9b:2c:2d:b9:00:ed:4e:
2f:a7:40:d1:40:ac:73:77:1b:bc:bf:bb:cf:17:33:
ae:cc:d0:42:c3:72:ed:99:d1:13:f1:da:17:fe:a6:
27:2b:b4:ef:3c:c1:c7:81:a6:8d:1e:46:d4:c8:13:
33:cb:b6:18:b0:ff:65:32:99:65:41:77:d6:71:16:
82:74:4f:5b:20:cb:b0:02:8e:94:50:18:e6:79:cf:
ec:18:c0:4b:ec:89:95:79:60:4d:27:0b:d2:e8:47:
88:93:45:8e:fa:c0:fa:55:7b:d7:0c:39:24:27:eb:
8e:58:a9:fa:6b:44:4c:1c:59:d5:43:d5:53:ac:09:
a3:ba:93:35:14:87:89:95:c5:a6:4a:4c:9c:15:af:
e5:6b:d3:00:db:80:4a:c9:ad:07:fb:9a:c9:3a:fb:
eb:49:8e:a3:63:a1:35:2d:68:2b:aa:06:2d:45:67:
18:f0:50:cc:75:c2:a6:a3:4b:75:9c:e4:db:31:f7:
02:7b:f0:6b:70:6d:18:fc:06:6b:8a:43:93:19:a1:
1c:44:1a:60:2e:96:52:7c:c8:02:65:b4:0e:53:23:
a8:21:97:1a:48:bf:c7:8d:36:1b:c0:ce:a3:b5:03:
8b:b7:d2:74:2b:3a:c9:75:72:a9:54:5e:33:f7:79:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:4F:3E:02:29:AF:15:1C:96:01:06:BE:96:8A:2E:67:15:9D:8B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.143.244.0/24
136.143.251.0/24
136.143.253.0/24
136.143.255.0/24
158.140.195.0/24
158.140.198.0/24
158.140.201.0/24
158.140.204.0/24
158.140.206.0/23
158.140.212.0/23
158.140.215.0/24
162.141.24.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0/22
162.141.144.0/21
162.141.168.0/21
167.148.16.0/21
167.148.48.0-167.148.59.255
167.148.64.0/22
167.148.76.0/22
167.148.108.0/22
203.100.208.0/23
203.100.211.0/24
203.160.112.0/23
203.160.115.0/24
203.160.119.0-203.160.122.255
203.160.124.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b8:d5:df:9d:50:0c:88:ff:39:1f:24:e8:da:3a:84:4b:c0:
31:a1:cb:3d:ee:d1:54:fa:d5:cf:24:46:d7:28:0a:e0:8d:14:
17:2b:29:56:37:20:c1:9b:84:9d:d3:6c:0c:d6:16:69:e9:fc:
94:ec:4f:e8:f6:05:2b:90:19:26:f2:aa:29:8b:dc:9d:99:e8:
b0:b3:89:51:87:8e:e9:01:b5:66:24:d7:0a:e6:bb:b7:aa:13:
22:81:b9:54:dc:6e:f2:43:99:66:fd:49:0f:0e:2d:de:7d:ca:
73:a5:b6:31:e8:4a:70:3b:a7:a1:d1:44:98:02:ac:90:93:1e:
0f:d0:79:3a:f8:66:c5:04:8b:a2:0b:db:e9:69:63:29:9e:3e:
1f:78:8d:bd:1a:09:52:57:d6:01:d9:ea:90:2d:1e:06:43:a1:
ba:c2:8c:01:33:6e:d8:b6:8c:f5:51:ec:e1:72:f2:6e:be:77:
e5:2f:39:22:cb:04:04:7f:29:d4:e9:10:95:34:10:ca:e3:24:
dc:c3:60:f5:86:1f:11:79:86:0d:ec:6a:a6:6b:be:d9:5f:02:
95:41:e4:35:f2:a1:21:75:13:93:ba:1e:0c:f0:16:c0:19:59:
bd:12:c4:ee:ba:1a:2f:69:42:b9:71:d0:89:cf:e0:19:26:c7:
bf:6b:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:23 2026 by rpki-client