Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS11426.roa
File:                     AS11426.roa (raw, json)
Hash identifier:          HKEQaz0enJYup2injZ3N6+g94at/6QpLlmrmID4TI6A=
Subject key identifier:   9F:D7:2C:15:0F:40:04:B0:55:51:00:76:AF:E4:67:C6:7F:94:89:F0
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       7DC1CED5B2757B5C6BDF77D810067EE55A79D76F
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS11426.roa
Signing time:             Mon 05 Oct 2026 06:13:40 +0000
ROA not before:           Mon 05 Oct 2026 06:08:40 +0000
ROA not after:            Mon 04 Oct 2027 06:13:40 +0000
asID:                     11426
IP address blocks:        79.176.217.0/24 maxlen: 24
                          79.176.249.0/24 maxlen: 24
                          79.176.254.0/24 maxlen: 24
                          79.182.255.0/24 maxlen: 24
                          79.183.103.0/24 maxlen: 24
                          109.66.38.0/24 maxlen: 24
                          109.66.46.0/24 maxlen: 24
                          109.66.102.0/24 maxlen: 24
                          109.66.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c1:ce:d5:b2:75:7b:5c:6b:df:77:d8:10:06:7e:e5:5a:79:d7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:08:40 2026 GMT
            Not After : Oct  4 06:13:40 2027 GMT
        Subject: CN=9FD72C150F4004B055510076AFE467C67F9489F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:8e:9b:7d:cc:c9:a1:98:1d:55:75:ba:2f:
                    ea:31:eb:46:ac:12:7c:78:98:eb:f7:79:4d:93:8e:
                    25:16:8d:0c:0a:5b:fc:b6:6b:08:d9:6a:31:ec:cc:
                    5c:36:14:3e:5f:14:fc:c8:2c:4e:36:e3:82:d0:47:
                    8b:3a:6c:06:7d:4f:99:d2:06:3f:8c:aa:62:a2:a4:
                    ba:75:b5:30:af:5c:7e:ef:92:f6:39:74:73:f2:96:
                    21:36:98:51:14:9b:fa:63:1f:f8:d7:ed:ef:ec:85:
                    bc:a4:01:a8:58:d9:81:a3:52:e3:85:46:58:18:16:
                    d0:41:62:63:43:fe:a0:63:5f:7f:80:8f:1e:92:81:
                    2f:87:d1:15:5d:35:f7:ff:b1:9e:69:9e:b7:52:d9:
                    2e:7b:f6:db:0b:f6:79:4d:b2:9d:ee:36:6d:8c:70:
                    60:fd:c4:67:98:e5:8e:db:80:27:21:08:7c:24:a0:
                    ea:91:05:36:d9:84:68:36:80:f7:ee:76:0a:18:a2:
                    e6:c1:98:84:28:31:5c:fa:cb:43:39:c6:9a:2f:ff:
                    57:43:79:9f:81:a6:48:3b:38:f8:90:d9:09:49:c0:
                    a4:e7:39:71:02:a9:68:4e:5c:c8:79:7d:a6:23:51:
                    20:81:1f:39:72:a2:3d:77:f0:72:4e:1a:0e:bd:3c:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D7:2C:15:0F:40:04:B0:55:51:00:76:AF:E4:67:C6:7F:94:89:F0
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS11426.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.217.0/24
                  79.176.249.0/24
                  79.176.254.0/24
                  79.182.255.0/24
                  79.183.103.0/24
                  109.66.38.0/24
                  109.66.46.0/24
                  109.66.102.0/24
                  109.66.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:1f:98:f9:6d:0a:0a:d9:59:c5:f6:2f:0f:12:b4:72:75:
         59:69:ab:da:ec:29:c5:ed:46:1d:cd:0f:46:f5:d5:48:bd:4e:
         6a:87:99:52:be:32:cc:e3:13:33:79:67:ca:4b:72:a7:f7:5e:
         d2:6d:88:20:2b:44:a2:ca:b7:0b:3b:58:73:eb:8d:32:8b:a8:
         7b:ff:91:b9:6c:3a:98:5d:c3:e1:68:d5:b4:e7:98:d0:ab:7d:
         9b:1f:2e:cc:5a:17:7a:f7:0c:29:24:ba:72:85:20:74:01:c0:
         6a:88:b4:c1:a8:18:82:02:d9:e9:20:ce:73:d6:77:ac:c0:ac:
         94:48:86:fc:d8:36:0f:7c:40:8e:1a:8e:8c:fc:df:31:85:f8:
         3e:43:73:3a:61:04:f7:a3:0b:79:4c:19:a6:48:13:09:69:e3:
         fb:ed:d3:87:70:37:0a:0b:53:82:d5:a3:29:82:71:fe:4d:94:
         d0:98:b8:a2:98:6c:71:7e:f8:c7:f6:a5:5e:71:e9:20:de:d7:
         c3:b8:8a:63:a3:77:47:16:ea:88:81:26:07:61:5b:9e:26:a6:
         07:44:33:38:7e:50:08:03:08:e3:f8:8a:0f:fd:11:5b:22:e1:
         cd:99:f1:60:c6:7f:5f:41:49:d1:06:15:cb:ba:58:27:9e:af:
         4a:9e:9e:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:55 2026 by rpki-client