Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: rIUcXjxU/d9h5af6I8gFnktki5W0Xw+Q8wI/dc1Kh3U=
Subject key identifier: 94:28:4B:71:54:AC:66:EB:AE:1A:D1:8D:80:18:04:67:C0:E3:B5:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 31A7E79F3A172EE9CE5420700A62B1C5568B0E6F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
Signing time: Sun 08 Nov 2026 00:08:06 +0000
ROA not before: Sun 08 Nov 2026 00:03:06 +0000
ROA not after: Sun 07 Nov 2027 00:08:06 +0000
asID: 11404
IP address blocks: 136.143.244.0/24 maxlen: 24
136.143.251.0/24 maxlen: 24
136.143.253.0/24 maxlen: 24
136.143.255.0/24 maxlen: 24
158.140.195.0/24 maxlen: 24
158.140.198.0/24 maxlen: 24
158.140.201.0/24 maxlen: 24
158.140.204.0/24 maxlen: 24
158.140.206.0/23 maxlen: 23
158.140.212.0/23 maxlen: 23
158.140.215.0/24 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
203.100.208.0/23 maxlen: 23
203.100.211.0/24 maxlen: 24
203.160.112.0/23 maxlen: 23
203.160.115.0/24 maxlen: 24
203.160.119.0/24 maxlen: 24
203.160.120.0/23 maxlen: 23
203.160.122.0/24 maxlen: 24
203.160.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a7:e7:9f:3a:17:2e:e9:ce:54:20:70:0a:62:b1:c5:56:8b:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 8 00:03:06 2026 GMT
Not After : Nov 7 00:08:06 2027 GMT
Subject: CN=94284B7154AC66EBAE1AD18D80180467C0E3B56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:23:1f:5b:fa:4b:38:8a:74:91:b9:67:db:
9c:28:89:d7:fd:61:59:9c:f2:aa:f3:fc:6f:45:2d:
0a:8c:de:b8:ef:a4:93:13:52:f4:b9:1b:99:d6:9b:
be:b3:f8:0d:a9:7c:db:82:30:bd:da:6e:07:83:4e:
41:b6:f9:28:ff:91:e9:25:a7:1c:c5:93:91:90:04:
55:41:52:de:f7:7d:b8:01:1a:98:76:6d:8a:72:bc:
01:db:d1:3b:65:48:ec:7a:f8:46:38:bb:1d:c9:14:
92:e3:b0:93:d0:24:62:4c:a8:e8:d9:4d:50:2e:42:
7c:6f:fa:d7:20:2b:28:ef:30:6c:da:08:9c:ae:c2:
0b:c2:88:e0:eb:40:67:7e:40:75:bb:e5:25:93:f9:
22:94:38:28:1a:49:4a:52:02:67:a4:3c:07:12:79:
33:9e:c6:01:3a:15:b8:d4:63:00:eb:5d:5f:49:bd:
a3:76:b3:ec:5f:86:93:39:12:2c:02:a9:a9:15:c8:
eb:5c:1d:fd:d5:bf:0b:07:76:f3:50:07:40:e1:7a:
e4:3d:82:48:b7:2e:a3:a7:73:99:c5:70:7b:f7:a6:
47:63:84:54:c5:47:be:41:8f:1e:42:8f:4a:5b:3a:
0b:b3:b5:91:81:29:aa:40:30:d0:45:25:d0:5b:bd:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:4B:71:54:AC:66:EB:AE:1A:D1:8D:80:18:04:67:C0:E3:B5:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.143.244.0/24
136.143.251.0/24
136.143.253.0/24
136.143.255.0/24
158.140.195.0/24
158.140.198.0/24
158.140.201.0/24
158.140.204.0/24
158.140.206.0/23
158.140.212.0/23
158.140.215.0/24
162.141.28.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0/22
167.148.16.0/21
167.148.48.0-167.148.59.255
167.148.76.0/22
203.100.208.0/23
203.100.211.0/24
203.160.112.0/23
203.160.115.0/24
203.160.119.0-203.160.122.255
203.160.124.0/24
Signature Algorithm: sha256WithRSAEncryption
06:06:7e:4c:2e:a1:22:6a:4d:89:9e:23:1f:b6:82:7f:52:03:
1f:90:c9:6b:a3:08:d4:9d:bd:a5:eb:12:89:b0:27:33:cd:23:
b3:80:92:9a:85:0b:67:06:a9:7a:1a:7e:81:c4:47:00:94:fa:
24:0f:ff:2e:6f:ab:bd:27:b9:59:c3:a3:ac:8f:ee:55:85:79:
9a:96:15:09:d5:60:fa:aa:3c:fc:95:a7:ab:2b:f1:e4:3a:3d:
61:5e:2e:64:f3:90:90:3b:95:62:0a:8a:2b:ce:c1:db:7f:4a:
01:52:54:39:fb:53:4c:06:a7:27:70:c3:a9:73:fb:ca:40:bd:
0d:a0:b0:90:37:3f:ab:ea:38:c3:18:59:68:87:d7:1d:38:9e:
3a:3d:87:90:76:03:b7:a1:93:3b:11:eb:52:2b:15:08:00:fe:
44:92:44:08:c5:4d:95:a9:51:c7:09:b2:df:d2:68:48:21:92:
b7:d4:a4:e4:be:bc:00:22:75:ef:7e:0e:cd:24:ad:88:43:f0:
25:ad:1e:6b:2d:a0:53:b5:d7:09:cb:18:31:a5:07:24:46:2d:
60:b1:75:36:10:ed:de:28:c8:c5:59:f4:9b:e6:de:98:de:43:
3c:de:33:eb:b0:cb:4f:23:de:62:53:1f:0b:d7:6e:72:9c:97:
5d:cb:0d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:28:31 2026 by rpki-client