Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: TxeRlzNFnx82QA9xeAs/Qi6mF8tlYIX6seNlPtlmQSs=
Subject key identifier: D5:1D:0F:06:D5:4D:11:42:AE:50:3B:05:B5:8A:92:FB:31:76:9C:73
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5626F8EC4893A40E9E26FAF2FF6BAEF9ACE56AED
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS11426.roa
Signing time: Wed 04 Jun 2025 00:00:24 +0000
ROA not before: Tue 03 Jun 2025 23:55:24 +0000
ROA not after: Wed 03 Jun 2026 00:00:24 +0000
asID: 11426
IP address blocks: 181.214.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:26:f8:ec:48:93:a4:0e:9e:26:fa:f2:ff:6b:ae:f9:ac:e5:6a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 3 23:55:24 2025 GMT
Not After : Jun 3 00:00:24 2026 GMT
Subject: CN=D51D0F06D54D1142AE503B05B58A92FB31769C73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:7a:ff:f8:e0:af:db:5f:7b:29:34:17:2b:
9d:97:df:6e:b1:7e:df:83:95:7b:db:91:aa:4c:a3:
cf:13:a4:47:79:2e:14:42:a5:f6:a6:71:de:c2:b9:
4f:bc:1d:6f:48:cf:e7:a6:7f:94:19:21:46:f8:ec:
01:4a:62:22:8d:8f:6d:3f:6c:2c:7d:f2:80:bb:0e:
41:43:b7:2f:fe:40:ba:25:49:e5:e0:43:26:0e:79:
8b:1c:2b:26:16:f2:44:16:c9:f2:0e:a9:cd:e9:20:
71:7c:54:46:18:39:7d:03:ae:8e:a4:1b:d2:4b:18:
93:24:b0:82:07:b8:e2:69:06:83:38:dd:62:90:36:
b9:22:ac:42:14:e0:50:25:df:b1:f6:b8:b6:b7:73:
66:ae:cc:89:38:0d:79:8b:94:db:8d:ce:00:1f:25:
ed:c2:2b:47:22:41:91:00:0d:68:0e:f8:75:c6:e4:
20:ca:b6:98:1a:36:1b:b9:78:1b:66:10:19:91:fb:
d0:2b:ff:54:0d:0f:ac:76:e6:4f:a1:12:36:96:58:
ee:7e:58:27:b4:70:07:34:d4:e5:cd:58:08:60:80:
5b:7f:99:46:a8:67:ff:6c:c1:1e:db:09:80:72:da:
22:7d:80:9a:38:a6:bd:e1:ac:03:43:6e:af:7e:5a:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:0F:06:D5:4D:11:42:AE:50:3B:05:B5:8A:92:FB:31:76:9C:73
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:14:b7:48:10:ba:bd:02:a9:49:c2:cb:df:3b:07:77:24:56:
7c:8e:65:21:84:88:7e:4a:9e:0a:8f:75:d9:4c:be:14:36:ee:
34:0e:9c:48:91:7b:42:71:17:64:62:b9:f2:72:6d:27:c7:ff:
9c:a1:c5:a5:8e:7d:b4:bc:52:1f:26:9c:b9:ac:c1:47:d0:58:
69:34:08:66:54:5a:fc:26:43:b0:41:8f:98:ce:84:0b:64:5d:
0b:98:33:d7:15:ad:fc:16:f2:5f:e9:c1:5d:8d:e1:33:9d:92:
1c:e4:6c:b5:53:04:25:cc:15:ad:90:58:71:8a:b9:12:d1:c2:
bb:f9:26:ad:c6:d9:d3:de:29:40:5b:57:f8:45:eb:d1:ac:3a:
cd:ba:2a:4f:8f:9b:8c:78:a1:e7:40:3b:b8:d9:ce:ef:56:5a:
32:b8:27:de:c7:e8:97:f6:a6:6e:be:ba:92:b7:7c:1b:d9:05:
aa:1d:de:77:48:80:9c:03:4d:6f:be:96:b1:fb:dc:3e:a2:cd:
eb:0c:33:78:78:83:72:18:6f:79:34:b2:b2:39:80:25:03:a4:
39:66:68:45:1b:7b:c6:26:b9:ea:35:dd:2f:a8:5a:6e:ec:41:
a8:a1:b3:2e:c8:24:96:90:80:48:3e:ae:6a:af:8b:29:b0:3e:
f2:76:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:43:39 2025 by rpki-client