Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: QoJp39oD8IlrC+55sf9pU7tKSUjmscFCpWvJTqGfbAM=
Subject key identifier: 8B:B7:09:22:B6:49:0F:7B:9A:50:E8:2D:B5:FD:E7:DF:20:2A:C0:CF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 01366A70BC70A0B2B14771B7512AFE78E66580D4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11426.roa
Signing time: Thu 02 Apr 2026 07:03:31 +0000
ROA not before: Thu 02 Apr 2026 06:58:31 +0000
ROA not after: Thu 01 Apr 2027 07:03:31 +0000
asID: 11426
IP address blocks: 51.146.200.0/21 maxlen: 24
51.194.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:36:6a:70:bc:70:a0:b2:b1:47:71:b7:51:2a:fe:78:e6:65:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 2 06:58:31 2026 GMT
Not After : Apr 1 07:03:31 2027 GMT
Subject: CN=8BB70922B6490F7B9A50E82DB5FDE7DF202AC0CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:d3:5e:e8:d2:b0:c2:5a:a7:c4:b4:0a:12:
42:62:50:40:97:ae:2d:83:cc:72:02:93:a1:94:8b:
bc:14:93:7c:7c:ab:81:4a:5d:c8:bd:6a:c8:01:78:
f9:ed:e9:3b:d3:6d:b2:07:dd:89:e3:ca:62:dc:04:
92:90:78:88:3d:93:52:d8:3b:85:65:60:df:35:4d:
72:b9:2a:9b:e7:a0:cc:1b:7b:57:8e:2f:1f:12:73:
13:08:fb:af:7f:79:d5:f7:01:b0:6d:57:ed:50:a7:
ac:ba:e0:4e:8b:6d:ca:49:52:19:53:03:1a:49:46:
a3:08:86:e3:83:9c:6f:0a:3c:79:a7:82:6d:0e:a1:
f4:d5:ca:df:1c:a7:c8:40:55:dd:f8:a9:b0:27:aa:
6a:cd:44:73:3d:3f:d2:d3:a7:18:1f:9a:d3:12:08:
1d:a2:2d:9e:3d:f8:b9:24:d5:81:8b:17:8f:6d:a2:
00:67:f4:c7:26:22:66:38:fd:f7:8f:c2:32:48:c8:
d3:f8:1f:4d:e2:a7:70:ad:0c:70:36:3e:3d:bb:d0:
39:da:3e:aa:a9:04:9b:5b:a2:c7:fd:f6:a9:02:e7:
66:ea:40:43:1e:79:b6:16:13:a7:2b:bd:9b:0e:de:
9f:dd:fa:2a:fe:53:a4:91:63:c2:4d:60:e0:bf:2b:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:09:22:B6:49:0F:7B:9A:50:E8:2D:B5:FD:E7:DF:20:2A:C0:CF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.200.0/21
51.194.0.0/21
Signature Algorithm: sha256WithRSAEncryption
27:9a:94:25:1a:ba:3a:1e:e8:86:f3:10:41:c9:9b:e2:cb:90:
36:71:3b:0c:af:ec:e6:92:65:c8:8c:d1:29:87:11:5b:f7:71:
4a:a7:e4:d3:4e:9f:af:02:d8:0b:47:d0:c1:fc:e2:a8:4b:43:
33:f4:16:ad:51:3c:4e:31:de:79:9a:03:a6:65:e5:38:05:9a:
0c:7f:34:26:ed:ac:a4:00:0e:19:cb:da:f6:91:9c:43:34:8e:
f1:7a:c3:35:6d:9e:68:20:6d:5a:4c:d2:9a:4e:34:a1:88:33:
fe:cf:3b:28:c9:58:fc:ea:0e:46:7a:2d:8e:d7:ac:70:15:34:
8d:a9:ff:71:bd:ec:2a:74:eb:c2:88:9c:30:30:a1:45:4f:f9:
9c:a8:a8:59:7d:df:fd:c7:2c:40:2f:9b:ed:23:a9:b4:5b:c4:
5d:49:a7:2d:cb:04:e8:8c:63:23:4c:1d:28:e4:79:a4:2f:48:
13:cb:f5:f5:9e:0c:e7:2f:79:2a:b4:81:09:44:22:ed:48:63:
39:62:60:e4:b2:32:1d:aa:8c:5a:71:5e:49:ec:3f:26:3d:b5:
aa:ae:21:a4:2b:fb:54:4d:47:b0:41:df:5c:b9:8e:8f:7f:71:
7c:68:38:99:9d:40:f4:1e:fd:8e:98:15:0c:80:9c:bd:58:12:
ca:e5:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:08 2026 by rpki-client