Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: 73au88+yKASjFMq7Pc3zVuiQbYHG2ALNa7Cg4iISZsA=
Subject key identifier: 2E:3E:BF:D1:54:ED:FB:18:00:37:F9:28:0E:E1:C5:B9:96:1A:67:FC
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 568B13A5C654EDB4A21E0EFE66D93F2B5D0EE782
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11404.roa
Signing time: Wed 21 Oct 2026 15:39:11 +0000
ROA not before: Wed 21 Oct 2026 15:34:11 +0000
ROA not after: Wed 20 Oct 2027 15:39:11 +0000
asID: 11404
IP address blocks: 2.216.56.0/22 maxlen: 24
2.216.64.0/22 maxlen: 24
51.241.166.0/24 maxlen: 24
51.241.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 00:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8b:13:a5:c6:54:ed:b4:a2:1e:0e:fe:66:d9:3f:2b:5d:0e:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 21 15:34:11 2026 GMT
Not After : Oct 20 15:39:11 2027 GMT
Subject: CN=2E3EBFD154EDFB180037F9280EE1C5B9961A67FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:c8:e6:22:1b:a9:8a:23:ca:34:5a:0a:63:
18:58:8b:b7:c9:6f:5b:46:f6:2d:bd:38:3d:12:35:
2c:4e:78:60:bc:1d:b2:d3:07:86:30:dd:3b:87:61:
5c:cd:09:2a:b4:91:58:8f:f1:55:77:b7:cc:67:29:
16:79:7c:1f:83:e8:1d:76:38:88:3a:92:d1:82:f8:
d9:14:d3:b7:dc:1e:f8:b0:0f:9d:01:a3:11:3e:70:
52:40:db:e5:4d:1f:c2:42:03:af:60:5e:be:95:cf:
1d:47:42:9e:c4:de:48:78:f7:d5:0f:a0:be:2e:3a:
37:11:b4:48:4c:bf:30:db:e9:15:a7:bf:71:a2:f0:
72:6b:94:86:64:55:ab:fa:f5:97:42:aa:84:7e:fd:
e6:81:d6:b7:d8:5a:3e:e3:92:5a:b3:00:a8:a7:d3:
9e:40:a9:b8:d4:d3:45:aa:4e:9a:46:c9:5b:bb:08:
1b:2b:3c:5f:e9:e7:58:a5:6d:1d:b3:3e:74:78:3b:
e4:44:18:26:cb:c2:e2:19:3b:7c:24:a3:dd:38:82:
c5:74:ae:71:9f:f2:eb:39:4b:af:71:b6:b1:02:89:
ff:ab:a5:5a:40:04:d5:ca:59:45:e9:63:24:2f:ab:
3a:35:99:7f:80:16:c3:34:52:55:5e:28:4f:40:e8:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:BF:D1:54:ED:FB:18:00:37:F9:28:0E:E1:C5:B9:96:1A:67:FC
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.216.56.0/22
2.216.64.0/22
51.241.166.0/24
51.241.211.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7c:63:84:70:c2:dd:7b:50:ff:95:e2:c0:d3:f0:41:66:99:
4f:9b:53:e7:2d:09:10:5b:7d:1c:bb:be:99:9a:5d:26:20:31:
57:0d:62:2a:76:a6:68:e2:1d:e2:38:61:5d:99:7b:8b:15:e1:
e2:3c:b9:af:b7:f8:fd:6d:87:10:e5:d0:ff:31:64:85:81:27:
e7:18:c3:62:d8:17:c0:27:44:3a:37:75:91:7c:68:6c:4b:78:
8e:bf:27:81:62:b7:1b:ac:f6:d0:78:9f:f4:2a:c6:92:0b:90:
7c:bf:c8:d8:3e:dd:a6:bb:88:10:7b:9a:f6:8b:23:b7:9e:ef:
82:08:39:77:e8:9c:fa:7d:ab:25:7f:25:dc:8b:4f:33:ae:f1:
56:a3:7b:2f:33:e9:39:47:4f:5c:8b:b0:b1:03:fa:85:e9:d2:
17:03:56:e7:c9:f3:76:1a:b1:b1:2c:ee:3f:a2:60:67:5d:41:
c2:b2:84:c3:70:ae:d1:59:83:4b:34:d3:d8:ab:db:e8:df:08:
f8:d3:a3:b8:10:b9:4e:ae:04:fb:c7:53:bb:d9:2b:d7:ea:c9:
2d:0d:ab:4b:3d:5e:a2:92:24:ad:e4:5e:9c:f1:23:ee:86:a9:
1b:47:4a:3a:35:47:6f:2d:bf:18:13:3c:e6:5f:bd:91:7e:99:
96:44:77:47
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUVosTpcZU7bSiHg7+Ztk/K10O54IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMjExNTM0MTFaFw0yNzEwMjAxNTM5MTFaMDMxMTAvBgNV
BAMTKDJFM0VCRkQxNTRFREZCMTgwMDM3RjkyODBFRTFDNUI5OTYxQTY3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTMjmIhupiiPKNFoKYxhYi7fJ
b1tG9i29OD0SNSxOeGC8HbLTB4Yw3TuHYVzNCSq0kViP8VV3t8xnKRZ5fB+D6B12
OIg6ktGC+NkU07fcHviwD50BoxE+cFJA2+VNH8JCA69gXr6Vzx1HQp7E3kh499UP
oL4uOjcRtEhMvzDb6RWnv3Gi8HJrlIZkVav69ZdCqoR+/eaB1rfYWj7jklqzAKin
055AqbjU00WqTppGyVu7CBsrPF/p51ilbR2zPnR4O+REGCbLwuIZO3wko904gsV0
rnGf8us5S69xtrECif+rpVpABNXKWUXpYyQvqzo1mX+AFsM0UlVeKE9A6OerAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQULj6/0VTt+xgAN/koDuHFuZYaZ/wwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTE0MDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAIC2DgD
BAIC2EADBAAz8aYDBAAz8dMwDQYJKoZIhvcNAQELBQADggEBAJh8Y4Rwwt17UP+V
4sDT8EFmmU+bU+ctCRBbfRy7vpmaXSYgMVcNYip2pmjiHeI4YV2Ze4sV4eI8ua+3
+P1thxDl0P8xZIWBJ+cYw2LYF8AnRDo3dZF8aGxLeI6/J4Fitxus9tB4n/QqxpIL
kHy/yNg+3aa7iBB7mvaLI7ee74IIOXfonPp9qyV/JdyLTzOu8Vajey8z6TlHT1yL
sLED+oXp0hcDVufJ83YasbEs7j+iYGddQcKyhMNwrtFZg0s009ir2+jfCPjTo7gQ
uU6uBPvHU7vZK9fqyS0Nq0s9XqKSJK3kXpzxI+6GqRtHSjo1R28tvxgTPOZfvZF+
mZZEd0c=
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:14:38 2026 by rpki-client