Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: aq+vU1hS3HqLgEoBCG0N+YuyVoz96w6YHc4t9u48kYo=
Subject key identifier: 90:74:24:93:8F:C8:C0:72:96:9B:1F:F6:71:00:27:2A:32:8A:AA:2C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 020AACD224FBD978766E844E0FBE39A7C8C40C4D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
Signing time: Tue 08 Sep 2026 00:07:36 +0000
ROA not before: Tue 08 Sep 2026 00:02:36 +0000
ROA not after: Tue 07 Sep 2027 00:07:36 +0000
asID: 11404
IP address blocks: 82.21.100.0/24 maxlen: 24
82.21.102.0/24 maxlen: 24
82.21.104.0/22 maxlen: 24
82.21.115.0/24 maxlen: 24
82.21.120.0/24 maxlen: 24
82.21.121.0/24 maxlen: 24
82.21.137.0/24 maxlen: 24
82.21.145.0/24 maxlen: 24
82.21.164.0/24 maxlen: 24
82.21.167.0/24 maxlen: 24
82.22.76.0/24 maxlen: 24
82.22.80.0/24 maxlen: 24
82.22.81.0/24 maxlen: 24
82.22.83.0/24 maxlen: 24
82.22.84.0/24 maxlen: 24
82.22.88.0/24 maxlen: 24
82.22.90.0/24 maxlen: 24
82.22.91.0/24 maxlen: 24
82.22.92.0/24 maxlen: 24
82.22.94.0/24 maxlen: 24
82.22.95.0/24 maxlen: 24
82.22.97.0/24 maxlen: 24
82.22.98.0/24 maxlen: 24
82.22.100.0/24 maxlen: 24
82.22.101.0/24 maxlen: 24
82.22.103.0/24 maxlen: 24
82.22.104.0/24 maxlen: 24
82.22.106.0/24 maxlen: 24
82.22.107.0/24 maxlen: 24
82.22.109.0/24 maxlen: 24
82.22.110.0/24 maxlen: 24
82.22.112.0/24 maxlen: 24
82.22.113.0/24 maxlen: 24
82.22.115.0/24 maxlen: 24
82.22.128.0/21 maxlen: 24
82.22.140.0/24 maxlen: 24
82.22.148.0/22 maxlen: 24
82.22.152.0/22 maxlen: 24
82.22.159.0/24 maxlen: 24
82.22.201.0/24 maxlen: 24
82.24.20.0/24 maxlen: 24
82.24.23.0/24 maxlen: 24
82.24.32.0/24 maxlen: 24
82.24.49.0/24 maxlen: 24
82.24.53.0/24 maxlen: 24
82.24.56.0/24 maxlen: 24
82.24.62.0/24 maxlen: 24
82.25.0.0/22 maxlen: 24
82.27.48.0/20 maxlen: 24
82.27.136.0/21 maxlen: 24
82.27.168.0/21 maxlen: 24
82.29.22.0/24 maxlen: 24
82.29.24.0/24 maxlen: 24
82.29.25.0/24 maxlen: 24
82.29.66.0/24 maxlen: 24
82.29.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0a:ac:d2:24:fb:d9:78:76:6e:84:4e:0f:be:39:a7:c8:c4:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 00:02:36 2026 GMT
Not After : Sep 7 00:07:36 2027 GMT
Subject: CN=907424938FC8C072969B1FF67100272A328AAA2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:eb:7e:04:96:4c:7d:06:e1:56:f7:61:ee:
cc:f4:50:14:de:58:80:f1:13:4c:7f:0e:95:fc:d9:
df:53:cf:b5:0d:a2:79:7e:d5:1e:85:4c:de:50:77:
3f:ff:e9:60:f6:b7:7e:a1:59:26:f8:53:b6:f5:7f:
8f:c8:28:9c:2d:a6:ce:8b:88:3d:a4:3f:3b:97:c0:
6b:e1:89:43:01:fd:c5:64:e6:d5:55:7c:ce:c5:da:
48:8e:2c:f9:c5:90:97:b7:bb:d9:89:77:29:a6:72:
0a:7d:36:6e:6f:f0:9f:7b:ed:60:f6:da:5d:1c:fe:
40:d9:fd:0f:1f:09:26:63:4a:47:c0:b3:df:c1:d2:
80:46:de:4e:e6:f8:d5:58:33:81:d4:aa:c5:94:6a:
05:d5:74:4d:07:7f:29:1f:4d:c8:69:32:24:3c:b7:
07:a2:e2:30:6c:7f:57:3f:4c:72:24:ac:75:9a:a3:
0c:53:05:9d:fb:b1:18:0d:23:05:e4:46:53:c2:73:
14:2b:00:13:e2:8a:46:2c:82:8a:9f:79:1f:03:f6:
0a:f8:a5:45:b9:77:61:b7:58:24:e0:98:7e:ee:be:
4e:cb:a9:9c:87:b3:9b:9d:af:a7:16:62:29:4b:09:
e8:04:ce:95:4e:7c:c8:50:1a:32:cb:fa:d7:15:60:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:24:93:8F:C8:C0:72:96:9B:1F:F6:71:00:27:2A:32:8A:AA:2C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.100.0/24
82.21.102.0/24
82.21.104.0/22
82.21.115.0/24
82.21.120.0/23
82.21.137.0/24
82.21.145.0/24
82.21.164.0/24
82.21.167.0/24
82.22.76.0/24
82.22.80.0/23
82.22.83.0-82.22.84.255
82.22.88.0/24
82.22.90.0-82.22.92.255
82.22.94.0/23
82.22.97.0-82.22.98.255
82.22.100.0/23
82.22.103.0-82.22.104.255
82.22.106.0/23
82.22.109.0-82.22.110.255
82.22.112.0/23
82.22.115.0/24
82.22.128.0/21
82.22.140.0/24
82.22.148.0-82.22.155.255
82.22.159.0/24
82.22.201.0/24
82.24.20.0/24
82.24.23.0/24
82.24.32.0/24
82.24.49.0/24
82.24.53.0/24
82.24.56.0/24
82.24.62.0/24
82.25.0.0/22
82.27.48.0/20
82.27.136.0/21
82.27.168.0/21
82.29.22.0/24
82.29.24.0/23
82.29.66.0/24
82.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
10:56:8f:f6:0b:4f:7d:5e:99:97:08:3a:81:20:59:db:85:ff:
46:bc:ba:86:9d:0d:75:8c:39:1f:45:3c:3c:e2:e0:e4:e7:12:
c7:27:68:bd:e1:29:62:a2:d7:27:68:04:76:78:ae:70:e5:7b:
11:89:81:6d:38:ee:3f:d4:7e:6f:3b:ba:57:6e:1b:a5:34:32:
73:29:e2:78:e6:3c:59:2b:ed:e1:ba:05:e8:d7:33:90:e0:43:
2d:ce:ac:f5:47:7a:92:22:1f:a5:82:c3:fd:c0:53:05:be:15:
a9:c3:fe:ac:ee:07:59:c0:6b:0d:c6:9a:2f:d1:3c:34:a0:d7:
b2:94:9a:46:0b:a1:93:83:f5:3c:14:40:03:40:0f:40:2f:97:
eb:40:b2:07:75:1d:d6:17:d8:1f:e7:64:ee:1d:76:3a:8a:e6:
7b:67:b9:79:aa:c5:a8:7b:c0:05:9c:7a:7e:04:7f:08:55:27:
8a:fc:6d:fe:9d:47:d1:91:fe:26:4b:7e:61:6d:cf:57:ae:29:
50:ba:6b:6a:c7:b6:0c:01:b5:2a:e6:f9:00:57:1d:2f:f3:b1:
a0:02:02:59:8d:ae:c9:be:a2:e6:f6:02:8a:dd:f7:0c:dd:1a:
d3:40:27:cf:dc:74:b4:cf:dc:fc:d8:a8:7a:d8:79:5a:2f:94:
90:60:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:04:45 2026 by rpki-client