Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: 5pbspxCqiN7aDV2T00VJx+j+NVcJUAFxd6ceqrIBVEA=
Subject key identifier: 61:34:96:68:8D:88:65:7C:E5:B9:30:61:24:6C:B4:55:D4:70:4C:FD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7FBA0C996EB7CDD0F64623140A0DB3BFB1C11D78
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
Signing time: Sun 08 Nov 2026 00:09:00 +0000
ROA not before: Sun 08 Nov 2026 00:04:00 +0000
ROA not after: Sun 07 Nov 2027 00:09:00 +0000
asID: 11404
IP address blocks: 82.21.100.0/24 maxlen: 24
82.21.102.0/24 maxlen: 24
82.21.104.0/22 maxlen: 24
82.21.115.0/24 maxlen: 24
82.21.120.0/24 maxlen: 24
82.21.121.0/24 maxlen: 24
82.21.137.0/24 maxlen: 24
82.21.145.0/24 maxlen: 24
82.21.164.0/24 maxlen: 24
82.21.167.0/24 maxlen: 24
82.22.76.0/24 maxlen: 24
82.22.80.0/24 maxlen: 24
82.22.81.0/24 maxlen: 24
82.22.83.0/24 maxlen: 24
82.22.84.0/24 maxlen: 24
82.22.88.0/24 maxlen: 24
82.22.90.0/24 maxlen: 24
82.22.91.0/24 maxlen: 24
82.22.92.0/24 maxlen: 24
82.22.94.0/24 maxlen: 24
82.22.95.0/24 maxlen: 24
82.22.97.0/24 maxlen: 24
82.22.98.0/24 maxlen: 24
82.22.100.0/24 maxlen: 24
82.22.101.0/24 maxlen: 24
82.22.103.0/24 maxlen: 24
82.22.104.0/24 maxlen: 24
82.22.106.0/24 maxlen: 24
82.22.107.0/24 maxlen: 24
82.22.109.0/24 maxlen: 24
82.22.110.0/24 maxlen: 24
82.22.112.0/24 maxlen: 24
82.22.113.0/24 maxlen: 24
82.22.115.0/24 maxlen: 24
82.22.140.0/24 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.22.159.0/24 maxlen: 24
82.22.201.0/24 maxlen: 24
82.24.20.0/24 maxlen: 24
82.24.23.0/24 maxlen: 24
82.24.32.0/24 maxlen: 24
82.24.49.0/24 maxlen: 24
82.24.53.0/24 maxlen: 24
82.24.56.0/24 maxlen: 24
82.24.62.0/24 maxlen: 24
82.25.0.0/22 maxlen: 24
82.27.48.0/20 maxlen: 24
82.29.22.0/24 maxlen: 24
82.29.24.0/24 maxlen: 24
82.29.25.0/24 maxlen: 24
82.29.66.0/24 maxlen: 24
82.29.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ba:0c:99:6e:b7:cd:d0:f6:46:23:14:0a:0d:b3:bf:b1:c1:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 8 00:04:00 2026 GMT
Not After : Nov 7 00:09:00 2027 GMT
Subject: CN=613496688D88657CE5B93061246CB455D4704CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:9a:8c:a3:29:25:41:13:3c:4a:c6:ba:3b:
06:44:3f:35:e7:99:ac:7e:45:d2:b7:3b:a3:16:3d:
0f:4a:3c:97:c5:f1:91:a2:b9:07:fd:c6:fd:3c:0c:
14:0b:c4:20:16:0d:02:a8:31:cb:4d:76:20:ea:0c:
18:83:44:72:a6:70:2a:b3:89:fa:b3:fd:15:99:b0:
c8:68:e6:f7:81:25:03:96:2c:e2:90:f3:2b:09:99:
bf:0f:c2:2d:d1:5b:b1:ab:e6:36:84:17:47:e7:3d:
82:5f:fd:84:73:ad:bc:0e:c6:d0:6e:56:dc:1f:c0:
91:3c:c3:ec:0c:88:35:be:52:84:7e:42:ff:3f:b4:
46:70:ca:f2:47:65:94:eb:fa:5f:0f:54:66:12:96:
93:60:53:99:3f:38:e2:b0:40:fa:e0:e3:d5:ba:10:
83:35:18:de:e6:3f:94:6f:c2:53:ca:43:2f:61:89:
7d:a6:cf:cb:89:1f:76:f7:ff:02:d9:88:96:66:b1:
ef:85:66:f6:b5:93:c2:62:42:8d:bb:4f:15:03:83:
b2:f5:6b:ea:59:16:da:53:8c:13:07:3a:cf:c4:1b:
8a:eb:9b:87:61:96:5c:3f:83:6b:93:6c:aa:a7:38:
7a:91:6e:67:d8:80:9e:c4:d6:9f:a4:fc:3a:53:fa:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:96:68:8D:88:65:7C:E5:B9:30:61:24:6C:B4:55:D4:70:4C:FD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.100.0/24
82.21.102.0/24
82.21.104.0/22
82.21.115.0/24
82.21.120.0/23
82.21.137.0/24
82.21.145.0/24
82.21.164.0/24
82.21.167.0/24
82.22.76.0/24
82.22.80.0/23
82.22.83.0-82.22.84.255
82.22.88.0/24
82.22.90.0-82.22.92.255
82.22.94.0/23
82.22.97.0-82.22.98.255
82.22.100.0/23
82.22.103.0-82.22.104.255
82.22.106.0/23
82.22.109.0-82.22.110.255
82.22.112.0/23
82.22.115.0/24
82.22.140.0/24
82.22.148.0-82.22.155.255
82.22.159.0/24
82.22.201.0/24
82.24.20.0/24
82.24.23.0/24
82.24.32.0/24
82.24.49.0/24
82.24.53.0/24
82.24.56.0/24
82.24.62.0/24
82.25.0.0/22
82.27.48.0/20
82.29.22.0/24
82.29.24.0/23
82.29.66.0/24
82.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ab:ec:f9:6a:14:d5:d8:62:07:47:31:c8:a2:23:53:85:eb:
a5:9b:63:6a:c4:84:23:d6:36:6c:d4:49:c5:8e:e7:1f:df:66:
08:ac:7d:eb:61:1e:77:b9:41:c1:87:2c:b4:38:ba:83:64:76:
a0:26:fe:54:9e:1b:87:42:67:d8:b9:62:55:42:83:bb:06:72:
08:0d:d5:af:98:2a:46:80:47:a5:f9:b9:ed:7a:4c:2a:9b:f3:
21:68:5f:d2:dd:4f:4a:4c:c5:a0:d2:23:63:23:92:04:b8:87:
5b:55:f6:8b:42:7e:69:88:4a:3f:2d:73:71:b5:2f:c7:74:10:
80:23:e0:37:e3:b1:f1:f4:a7:d3:19:e1:06:fa:9a:45:29:07:
0e:29:41:2e:0f:eb:5b:7f:2b:05:2e:9d:b6:e3:2f:38:d3:9c:
90:e5:e2:e6:db:65:17:a9:de:e4:a2:d5:6d:92:db:57:01:24:
3a:fa:d5:8a:55:3a:d6:8b:51:2c:5f:18:87:64:e5:8a:78:04:
b8:8d:f8:f2:00:64:2f:be:13:17:e9:d7:16:40:d6:40:a9:65:
c0:05:aa:1a:82:1a:5d:eb:dd:25:a3:b8:79:3f:52:76:4a:2c:
ad:ef:ad:8f:34:e5:26:95:c1:19:9f:98:5b:21:f7:65:6c:61:
f4:ef:8a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:28:37 2026 by rpki-client