Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: dzuKH9K73OzMAjumA3L/cS0MsOIKxzIRtin0Lwx3CNs=
Subject key identifier: E1:5A:F6:E5:AA:76:44:4E:D7:A4:B7:1A:5B:84:DC:2A:31:67:3B:2E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 319DF36E9A508EF20D13DDCBAE852C5EFF60405B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11426.roa
Signing time: Fri 14 Aug 2026 10:51:25 +0000
ROA not before: Fri 14 Aug 2026 10:46:25 +0000
ROA not after: Fri 13 Aug 2027 10:51:25 +0000
asID: 11426
IP address blocks: 51.146.200.0/21 maxlen: 24
51.194.0.0/21 maxlen: 24
51.241.53.0/24 maxlen: 24
51.241.55.0/24 maxlen: 24
51.241.79.0/24 maxlen: 24
51.241.81.0/24 maxlen: 24
51.241.87.0/24 maxlen: 24
51.241.95.0/24 maxlen: 24
94.194.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9d:f3:6e:9a:50:8e:f2:0d:13:dd:cb:ae:85:2c:5e:ff:60:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 14 10:46:25 2026 GMT
Not After : Aug 13 10:51:25 2027 GMT
Subject: CN=E15AF6E5AA76444ED7A4B71A5B84DC2A31673B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:03:74:48:9a:8e:e0:7c:e9:5e:4f:bb:1d:
82:92:62:83:8d:6a:28:8c:ed:ad:33:04:b3:0b:ad:
2b:bc:68:0a:2e:6f:15:93:89:d5:88:3c:5d:52:43:
af:67:42:31:9f:90:21:9c:58:77:a0:c6:b2:b7:e4:
b6:e1:87:78:1c:67:e3:81:cf:d5:62:d9:28:8e:d7:
43:7b:77:df:69:be:7a:de:24:23:84:37:b1:ab:f3:
b6:a2:fe:65:6c:97:a0:7c:9c:69:48:8d:a5:d8:74:
db:52:db:6b:89:b7:93:63:d6:80:2e:43:99:8a:ca:
de:5e:48:c0:65:01:db:8f:cc:31:6d:c3:f5:d5:a1:
d7:58:40:20:4c:42:16:d1:f9:85:dd:95:fe:c1:3c:
35:71:c7:29:c2:77:e1:22:8d:89:b5:bd:c9:d6:ac:
dc:9c:d0:9e:5a:65:43:a6:b5:3d:8c:33:d3:3d:67:
6b:8b:ea:6f:50:00:b4:1e:5f:71:22:3a:47:ec:2d:
1b:75:d0:ab:c3:24:df:ef:cc:6a:78:5a:22:8e:0f:
4d:8a:31:df:5b:0f:9a:12:5b:01:27:7d:51:97:3e:
91:f2:7d:a7:ef:83:95:d9:58:a4:e3:77:5c:16:8b:
6e:5e:6e:dc:3c:60:92:d9:09:bd:ad:fa:38:6f:a9:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:F6:E5:AA:76:44:4E:D7:A4:B7:1A:5B:84:DC:2A:31:67:3B:2E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.200.0/21
51.194.0.0/21
51.241.53.0/24
51.241.55.0/24
51.241.79.0/24
51.241.81.0/24
51.241.87.0/24
51.241.95.0/24
94.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:b7:ad:f2:a4:a4:d1:10:1d:49:40:7c:bd:27:30:64:35:7c:
45:fc:49:04:25:06:e1:b0:c6:51:fc:d4:fa:01:53:ec:0a:7a:
a2:cc:f7:c4:48:30:48:a8:47:a4:72:ad:c9:3d:2c:31:dc:ee:
72:2f:d6:da:d9:29:ad:d9:b5:d1:88:9f:10:c2:46:b9:15:26:
00:f7:ab:90:00:88:04:ec:27:58:09:2f:d9:e4:cc:8e:7f:c7:
de:b7:26:d1:2c:66:99:c4:f9:e8:5d:87:b9:91:10:09:36:76:
8f:51:dc:a6:e1:03:1d:24:56:a9:b3:65:84:21:5e:8c:2d:43:
4e:c1:07:0c:8e:61:d0:bf:af:6a:15:96:9c:64:cc:96:6d:ff:
5e:4d:fd:f8:3f:42:89:67:99:46:84:40:1f:e3:cb:4f:43:cf:
8e:60:9c:ee:c3:bf:1f:ed:a9:92:88:d5:ec:b8:68:36:99:5e:
f5:b2:3f:17:91:82:c9:04:e2:d9:15:1d:d4:5a:29:77:0d:8f:
d1:2d:8f:9b:b1:59:61:83:15:7e:d9:8f:d0:74:78:64:e5:5c:
a2:df:c4:92:5d:44:f3:42:f4:a8:ac:26:6f:fa:bc:2e:74:75:
9b:42:ae:2d:b4:47:54:8f:47:49:37:5e:05:7e:97:b6:9d:18:
80:68:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:10 2026 by rpki-client