Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: YGU/FSISUpgJtlT/3vuwvtPHaRWexYOguUWqGuYWX+Y=
Subject key identifier: 08:27:B5:6C:75:D3:55:F4:3E:06:71:AE:D1:E6:09:AD:19:AE:8A:80
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 0B503413C2C1D5F8C6F027B0E8283A72F34BD98C
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS11426.roa
Signing time: Mon 05 Oct 2026 08:44:26 +0000
ROA not before: Mon 05 Oct 2026 08:39:26 +0000
ROA not after: Mon 04 Oct 2027 08:44:26 +0000
asID: 11426
IP address blocks: 79.176.217.0/24 maxlen: 24
79.176.249.0/24 maxlen: 24
79.176.254.0/24 maxlen: 24
79.182.255.0/24 maxlen: 24
109.66.38.0/24 maxlen: 24
109.66.46.0/24 maxlen: 24
109.66.102.0/24 maxlen: 24
109.66.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:50:34:13:c2:c1:d5:f8:c6:f0:27:b0:e8:28:3a:72:f3:4b:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:39:26 2026 GMT
Not After : Oct 4 08:44:26 2027 GMT
Subject: CN=0827B56C75D355F43E0671AED1E609AD19AE8A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:71:cb:ae:27:0f:ad:b9:83:7a:05:99:64:
47:39:0c:d9:57:3b:b1:09:0b:63:3a:3d:0e:6b:db:
ad:9f:97:53:95:db:e6:28:2e:21:95:67:fa:36:24:
ee:0d:b9:00:31:71:ac:80:e9:e5:db:11:72:41:71:
0d:50:2f:d3:43:f6:6e:d5:f3:40:5d:0c:9a:65:cb:
74:3b:28:6b:80:20:92:9c:c0:4c:2a:b4:a4:44:11:
b8:db:41:e3:45:78:be:e1:eb:1d:e1:f9:28:31:97:
f9:99:b4:55:a4:cd:6e:c4:f2:12:ba:e2:8f:f2:50:
dd:ad:5a:81:aa:ec:df:30:50:86:c0:0e:c1:8d:12:
74:71:e7:c6:d0:cb:e9:48:5c:1f:68:87:12:9f:9a:
5c:91:47:e3:a7:36:44:3d:6f:18:5d:6b:32:0a:b7:
27:06:ba:37:1b:b4:64:33:6a:9d:5a:dc:9e:bf:01:
36:c2:b9:3d:65:00:ee:2c:9a:ce:ad:0a:c7:5d:5e:
30:1f:95:98:0d:45:d4:e2:59:be:25:62:fd:6e:e1:
b0:ef:ca:ff:7b:0e:62:a3:2b:3c:f9:e2:d6:04:61:
17:3a:07:1d:a1:74:e2:58:9e:b2:b7:36:ff:d1:fe:
62:c8:ef:f1:c6:2d:c6:05:75:7c:28:68:d4:18:48:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:B5:6C:75:D3:55:F4:3E:06:71:AE:D1:E6:09:AD:19:AE:8A:80
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.217.0/24
79.176.249.0/24
79.176.254.0/24
79.182.255.0/24
109.66.38.0/24
109.66.46.0/24
109.66.102.0/24
109.66.249.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:06:ed:6a:f4:1d:93:81:5b:6c:1b:9d:c7:f7:cf:bd:34:fe:
9b:5f:f9:83:cf:96:67:d1:89:5d:9b:1e:d2:06:e1:51:12:6e:
9f:67:74:0a:f1:14:06:2b:98:65:5d:af:24:bb:5c:78:15:15:
ee:1d:2e:25:44:b4:d6:a3:a6:1c:fb:2e:da:5c:67:49:81:c1:
17:99:1a:ca:ba:83:3a:87:d7:85:7c:2d:31:c6:c7:5f:12:3a:
60:25:28:d1:81:33:db:7a:ad:5f:22:23:14:42:06:f8:94:3d:
5e:dc:35:07:a1:46:16:5e:57:e0:4e:66:55:1d:0f:77:fa:bd:
f3:3d:19:ff:3f:79:dd:3f:7c:e8:1e:05:7a:ba:0f:44:a6:98:
7d:d9:49:f4:03:3b:33:71:00:c0:78:20:64:c4:d9:7d:7b:06:
59:8e:9a:d3:62:b3:20:e8:af:95:7a:4c:d6:84:c0:a6:85:80:
60:b3:d5:d9:b4:80:df:2e:31:d6:12:f1:3c:f7:3f:cb:b7:df:
f4:7d:9b:de:f0:e1:e9:93:cd:6a:05:f2:b5:97:26:d4:b8:f4:
3c:34:c7:13:3e:d6:87:dc:df:b5:2f:22:1f:68:74:a5:95:40:
45:c9:91:fe:30:a0:ca:18:0c:d6:a6:9c:5b:cc:5c:bd:a4:f7:
c9:3e:b5:58
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUC1A0E8LB1fjG8Cew6Cg6cvNL2YwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYwMjNmZGMyYmJhMjgzNTEzYzZhNTg3ZjkwNzc3MGIy
NmVmZjU2OTAeFw0yNjEwMDUwODM5MjZaFw0yNzEwMDQwODQ0MjZaMDMxMTAvBgNV
BAMTKDA4MjdCNTZDNzVEMzU1RjQzRTA2NzFBRUQxRTYwOUFEMTlBRThBODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWE3HLricPrbmDegWZZEc5DNlX
O7EJC2M6PQ5r262fl1OV2+YoLiGVZ/o2JO4NuQAxcayA6eXbEXJBcQ1QL9ND9m7V
80BdDJply3Q7KGuAIJKcwEwqtKREEbjbQeNFeL7h6x3h+Sgxl/mZtFWkzW7E8hK6
4o/yUN2tWoGq7N8wUIbADsGNEnRx58bQy+lIXB9ohxKfmlyRR+OnNkQ9bxhdazIK
tycGujcbtGQzap1a3J6/ATbCuT1lAO4sms6tCsddXjAflZgNRdTiWb4lYv1u4bDv
yv97DmKjKzz54tYEYRc6Bx2hdOJYnrK3Nv/R/mLI7/HGLcYFdXwoaNQYSJ0ZAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUCCe1bHXTVfQ+BnGu0eYJrRmuioAwHwYDVR0j
BBgwFoAU7wI/3Cu6KDUTxqWH+Qd3Cybv9WkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDk2ZjIwYTQtMjYwZi00MGZhLWEzODktZDZjYWQyZGMw
ZmJkLzAvRUYwMjNGREMyQkJBMjgzNTEzQzZBNTg3RjkwNzc3MEIyNkVGRjU2OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzd3SV8zQ3U2S0RVVHhxV0gtUWQzQ3li
djlXay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ5NmYyMGE0LTI2MGYt
NDBmYS1hMzg5LWQ2Y2FkMmRjMGZiZC8wL0FTMTE0MjYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBABPsNkD
BABPsPkDBABPsP4DBABPtv8DBABtQiYDBABtQi4DBABtQmYDBABtQvkwDQYJKoZI
hvcNAQELBQADggEBAM8G7Wr0HZOBW2wbncf3z700/ptf+YPPlmfRiV2bHtIG4VES
bp9ndArxFAYrmGVdryS7XHgVFe4dLiVEtNajphz7LtpcZ0mBwReZGsq6gzqH14V8
LTHGx18SOmAlKNGBM9t6rV8iIxRCBviUPV7cNQehRhZeV+BOZlUdD3f6vfM9Gf8/
ed0/fOgeBXq6D0SmmH3ZSfQDOzNxAMB4IGTE2X17BlmOmtNisyDor5V6TNaEwKaF
gGCz1dm0gN8uMdYS8Tz3P8u33/R9m97w4emTzWoF8rWXJtS49Dw0xxM+1ofc37Uv
Ih9odKWVQEXJkf4woMoYDNamnFvMXL2k98k+tVg=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:38 2026 by rpki-client