Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: KHqu0bwgTw5Ck1/ckEHTNzKzzZggRXzgkCMw/YFmjQE=
Subject key identifier: CC:38:59:F3:B7:9D:4E:14:97:53:79:3A:C8:DD:D6:1E:C8:DC:5A:BE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 065E7A574F73DB77123F0A506D5B84268EB76069
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
Signing time: Mon 02 Mar 2026 08:46:39 +0000
ROA not before: Mon 02 Mar 2026 08:41:39 +0000
ROA not after: Mon 01 Mar 2027 08:46:39 +0000
asID: 11404
IP address blocks: 82.21.100.0/24 maxlen: 24
82.21.102.0/24 maxlen: 24
82.21.104.0/22 maxlen: 24
82.21.115.0/24 maxlen: 24
82.21.120.0/24 maxlen: 24
82.21.121.0/24 maxlen: 24
82.21.137.0/24 maxlen: 24
82.21.145.0/24 maxlen: 24
82.21.164.0/24 maxlen: 24
82.21.167.0/24 maxlen: 24
82.22.76.0/24 maxlen: 24
82.22.80.0/24 maxlen: 24
82.22.81.0/24 maxlen: 24
82.22.83.0/24 maxlen: 24
82.22.84.0/24 maxlen: 24
82.22.88.0/24 maxlen: 24
82.22.90.0/24 maxlen: 24
82.22.91.0/24 maxlen: 24
82.22.92.0/24 maxlen: 24
82.22.94.0/24 maxlen: 24
82.22.95.0/24 maxlen: 24
82.22.97.0/24 maxlen: 24
82.22.98.0/24 maxlen: 24
82.22.100.0/24 maxlen: 24
82.22.101.0/24 maxlen: 24
82.22.103.0/24 maxlen: 24
82.22.104.0/24 maxlen: 24
82.22.106.0/24 maxlen: 24
82.22.107.0/24 maxlen: 24
82.22.109.0/24 maxlen: 24
82.22.110.0/24 maxlen: 24
82.22.112.0/24 maxlen: 24
82.22.113.0/24 maxlen: 24
82.22.115.0/24 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.140.0/24 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.22.159.0/24 maxlen: 24
82.22.201.0/24 maxlen: 24
82.24.20.0/24 maxlen: 24
82.24.23.0/24 maxlen: 24
82.24.32.0/24 maxlen: 24
82.24.49.0/24 maxlen: 24
82.24.53.0/24 maxlen: 24
82.24.56.0/24 maxlen: 24
82.24.62.0/24 maxlen: 24
82.25.0.0/22 maxlen: 24
82.27.32.0/20 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.64.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.168.0/21 maxlen: 24
82.29.22.0/24 maxlen: 24
82.29.24.0/24 maxlen: 24
82.29.25.0/24 maxlen: 24
82.29.66.0/24 maxlen: 24
82.29.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5e:7a:57:4f:73:db:77:12:3f:0a:50:6d:5b:84:26:8e:b7:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 2 08:41:39 2026 GMT
Not After : Mar 1 08:46:39 2027 GMT
Subject: CN=CC3859F3B79D4E149753793AC8DDD61EC8DC5ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:e4:3f:50:f2:d3:36:6a:c8:98:d6:70:08:
53:a8:c0:59:49:69:30:e0:01:aa:40:6d:b2:ce:dd:
ec:27:da:99:c5:bd:d4:b3:88:18:e0:1c:86:71:60:
2d:5b:49:70:f9:bb:e2:cd:11:79:45:21:e5:9f:2d:
bf:b3:a7:45:ed:0f:8f:0d:f1:68:39:f2:2a:e0:1c:
2e:2a:24:fa:c9:06:f8:bd:25:0c:59:db:d8:86:a7:
50:2f:22:c9:e4:b2:2e:88:89:60:8e:47:d9:15:2d:
9a:41:82:cb:cf:57:50:7d:49:86:e8:a1:5e:04:1e:
15:07:df:8a:dc:5c:61:6d:48:16:28:5b:f0:c1:11:
40:45:b9:4e:d4:99:ea:5b:a7:d6:41:3e:c9:1b:07:
23:84:f1:3b:13:d3:d5:75:dc:e6:e7:7c:2a:a8:ef:
b9:7c:2d:a9:4c:74:60:57:15:66:8d:8d:ed:ed:ec:
4f:e4:01:9c:ef:eb:ce:57:57:32:f6:69:09:26:1e:
f1:15:68:3a:59:75:58:bb:f9:f0:8c:e8:95:62:7e:
4a:63:33:fb:63:28:6b:b3:cd:2b:4e:7f:74:7a:0f:
56:62:d1:8c:74:44:cb:0a:cd:1e:c5:d1:2c:83:1c:
31:3d:fb:64:56:fd:8f:fd:30:24:55:b8:29:76:e5:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:59:F3:B7:9D:4E:14:97:53:79:3A:C8:DD:D6:1E:C8:DC:5A:BE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.100.0/24
82.21.102.0/24
82.21.104.0/22
82.21.115.0/24
82.21.120.0/23
82.21.137.0/24
82.21.145.0/24
82.21.164.0/24
82.21.167.0/24
82.22.76.0/24
82.22.80.0/23
82.22.83.0-82.22.84.255
82.22.88.0/24
82.22.90.0-82.22.92.255
82.22.94.0/23
82.22.97.0-82.22.98.255
82.22.100.0/23
82.22.103.0-82.22.104.255
82.22.106.0/23
82.22.109.0-82.22.110.255
82.22.112.0/23
82.22.115.0/24
82.22.128.0/21
82.22.140.0/24
82.22.148.0-82.22.155.255
82.22.159.0/24
82.22.201.0/24
82.24.20.0/24
82.24.23.0/24
82.24.32.0/24
82.24.49.0/24
82.24.53.0/24
82.24.56.0/24
82.24.62.0/24
82.25.0.0/22
82.27.32.0-82.27.79.255
82.27.136.0/21
82.27.168.0/21
82.29.22.0/24
82.29.24.0/23
82.29.66.0/24
82.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
67:06:3b:4d:d8:bf:5b:8b:bc:c6:fe:46:18:fd:de:ef:ad:df:
de:c3:31:e2:fa:c4:15:4e:cc:e5:a9:8d:dc:ab:fc:a4:5c:28:
63:32:79:3d:00:04:18:df:85:3d:58:97:3d:e9:0b:96:cb:7d:
6f:33:55:cf:e8:9a:4d:8d:bf:d3:45:c3:b7:22:90:5a:77:e5:
86:a2:be:c3:f3:f1:ed:3c:23:c5:f0:5f:01:2e:c6:18:28:1b:
81:5a:02:6b:48:6b:49:cc:c9:36:b5:d7:89:71:bb:31:9c:99:
57:ef:5d:00:2e:3b:21:d3:71:3c:c8:2a:15:3b:a2:70:7e:4c:
2f:87:0f:0d:7a:21:54:3a:c2:1d:ba:69:67:12:13:50:30:dd:
6c:cc:ec:6b:da:6f:89:17:9d:b1:5c:9c:76:75:16:7e:bc:76:
51:8b:ad:17:fb:7f:4f:b8:69:18:80:b9:38:4c:f4:67:2f:0c:
05:db:f6:73:ed:af:32:97:68:0b:fc:fa:5f:ee:06:9f:e7:fb:
65:5d:5d:34:41:c8:b9:d9:64:c5:1f:07:ae:6a:2f:ca:f6:f2:
79:61:6b:2a:fa:45:4c:b9:9c:08:a1:1a:d4:82:15:8b:3e:d9:
56:0d:ca:18:de:4d:89:a1:7e:79:3f:06:7e:e3:5e:1b:46:cc:
6d:83:93:a8
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgIUBl56V09z23cSPwpQbVuEJo63YGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMDIwODQxMzlaFw0yNzAzMDEwODQ2MzlaMDMxMTAvBgNV
BAMTKENDMzg1OUYzQjc5RDRFMTQ5NzUzNzkzQUM4RERENjFFQzhEQzVBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbeQ/UPLTNmrImNZwCFOowFlJ
aTDgAapAbbLO3ewn2pnFvdSziBjgHIZxYC1bSXD5u+LNEXlFIeWfLb+zp0XtD48N
8Wg58irgHC4qJPrJBvi9JQxZ29iGp1AvIsnksi6IiWCOR9kVLZpBgsvPV1B9SYbo
oV4EHhUH34rcXGFtSBYoW/DBEUBFuU7Umepbp9ZBPskbByOE8TsT09V13ObnfCqo
77l8LalMdGBXFWaNje3t7E/kAZzv685XVzL2aQkmHvEVaDpZdVi7+fCM6JVifkpj
M/tjKGuzzStOf3R6D1Zi0Yx0RMsKzR7F0SyDHDE9+2RW/Y/9MCRVuCl25QyZAgMB
AAGjggNBMIIDPTAdBgNVHQ4EFgQUzDhZ87edThSXU3k6yN3WHsjcWr4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTE0MDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggFVBggrBgEFBQcBBwEB/wSCAUQwggFAMIIBPAQCAAEw
ggE0AwQAUhVkAwQAUhVmAwQCUhVoAwQAUhVzAwQBUhV4AwQAUhWJAwQAUhWRAwQA
UhWkAwQAUhWnAwQAUhZMAwQBUhZQMAwDBABSFlMDBABSFlQDBABSFlgwDAMEAVIW
WgMEAFIWXAMEAVIWXjAMAwQAUhZhAwQAUhZiAwQBUhZkMAwDBABSFmcDBABSFmgD
BAFSFmowDAMEAFIWbQMEAFIWbgMEAVIWcAMEAFIWcwMEA1IWgAMEAFIWjDAMAwQC
UhaUAwQCUhaYAwQAUhafAwQAUhbJAwQAUhgUAwQAUhgXAwQAUhggAwQAUhgxAwQA
Uhg1AwQAUhg4AwQAUhg+AwQCUhkAMAwDBAVSGyADBARSG0ADBANSG4gDBANSG6gD
BABSHRYDBAFSHRgDBABSHUIDBABSHVkwDQYJKoZIhvcNAQELBQADggEBAGcGO03Y
v1uLvMb+Rhj93u+t397DMeL6xBVOzOWpjdyr/KRcKGMyeT0ABBjfhT1Ylz3pC5bL
fW8zVc/omk2Nv9NFw7cikFp35YaivsPz8e08I8XwXwEuxhgoG4FaAmtIa0nMyTa1
14lxuzGcmVfvXQAuOyHTcTzIKhU7onB+TC+HDw16IVQ6wh26aWcSE1Aw3WzM7Gva
b4kXnbFcnHZ1Fn68dlGLrRf7f0+4aRiAuThM9GcvDAXb9nPtrzKXaAv8+l/uBp/n
+2VdXTRByLnZZMUfB65qL8r28nlhayr6RUy5nAihGtSCFYs+2VYNyhjeTYmhfnk/
Bn7jXhtGzG2Dk6g=
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:04:21 2026 by rpki-client