Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS46011.roa
File: AS46011.roa (raw, json)
Hash identifier: mifZSh1oanorLVMEPwnIf4aVuhDoo5o85+pV9g1PU/Y=
Subject key identifier: 0C:5B:90:13:31:BF:92:5A:72:0E:78:CB:A8:59:4D:0D:3E:11:1C:5B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 535EB2C886B2A5528BD898A7957052249691A583
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS46011.roa
Signing time: Mon 11 May 2026 16:23:22 +0000
ROA not before: Mon 11 May 2026 16:18:22 +0000
ROA not after: Mon 10 May 2027 16:23:22 +0000
asID: 46011
IP address blocks: 51.194.210.0/24 maxlen: 24
51.194.221.0/24 maxlen: 24
51.241.0.0/23 maxlen: 24
51.241.54.0/23 maxlen: 24
51.241.57.0/24 maxlen: 24
51.241.62.0/24 maxlen: 24
51.241.81.0/24 maxlen: 24
51.241.86.0/24 maxlen: 24
51.241.87.0/24 maxlen: 24
51.241.114.0/23 maxlen: 24
51.241.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5e:b2:c8:86:b2:a5:52:8b:d8:98:a7:95:70:52:24:96:91:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 11 16:18:22 2026 GMT
Not After : May 10 16:23:22 2027 GMT
Subject: CN=0C5B901331BF925A720E78CBA8594D0D3E111C5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:cb:3b:bf:44:59:d1:08:06:bc:b2:25:e1:
06:65:ea:45:35:21:88:f9:1b:ef:60:c9:a3:a0:c3:
e0:fe:45:b0:2a:17:e6:1a:c1:6d:ee:a6:3c:19:61:
bc:22:b9:46:cf:c5:05:c3:04:70:35:93:c4:84:ef:
2b:ed:c9:5c:16:0e:73:82:8a:8b:87:82:6d:23:03:
62:d0:49:a2:54:dc:56:cb:ab:b5:ba:cc:4f:ed:69:
f6:af:6a:27:28:3a:a8:23:b4:df:78:6d:80:5c:8e:
21:73:36:50:d5:71:c4:fb:fa:e5:8a:36:c4:7b:fc:
78:ef:75:d6:b6:d9:6d:40:4e:8e:96:42:2a:11:75:
28:b0:17:2f:54:22:d5:ee:7b:45:a8:0d:48:2b:9b:
ed:8b:f6:58:36:53:31:1e:0d:4a:d6:0f:1a:df:41:
bf:c6:19:4b:e6:6d:2e:a6:09:73:48:40:3c:48:5d:
43:f1:2e:8c:d5:b4:05:ca:f9:dd:97:09:2f:39:c1:
0a:25:32:9c:bf:9a:3f:4e:a8:a2:8a:8d:b0:1c:cc:
57:37:58:1c:78:f1:af:3f:7a:f7:7b:24:d2:a5:ee:
05:f9:ed:d8:44:29:f9:9e:1f:fb:88:7a:64:60:b9:
d0:85:82:af:1a:4e:88:d4:ca:48:ec:a0:f1:56:21:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:90:13:31:BF:92:5A:72:0E:78:CB:A8:59:4D:0D:3E:11:1C:5B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS46011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.210.0/24
51.194.221.0/24
51.241.0.0/23
51.241.54.0/23
51.241.57.0/24
51.241.62.0/24
51.241.81.0/24
51.241.86.0/23
51.241.114.0/23
51.241.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:df:24:ff:17:b0:6d:7c:fd:59:d4:57:07:1a:29:70:f1:23:
37:ba:8d:2d:fa:d9:85:6c:65:c5:08:0a:b5:4c:5c:67:37:16:
90:69:e4:48:a1:40:90:3c:78:2c:c5:48:77:c3:ca:df:6f:41:
69:f5:0c:c3:11:63:dd:d3:1d:64:3b:55:ac:c7:32:63:01:18:
89:48:84:fb:ee:a3:7a:ed:28:8d:1f:7d:fa:da:63:96:2c:a3:
d3:99:75:87:75:9f:bb:b4:8c:de:cc:6a:88:bf:b2:34:59:64:
ab:d9:a2:ce:2e:c8:c3:41:28:24:c4:46:dc:fd:b7:76:1e:aa:
89:68:7d:b7:20:8f:31:06:cc:55:4d:ef:8b:0c:75:ba:c1:01:
69:c4:b5:d2:31:bb:55:f3:8e:8b:b7:bf:b6:0b:0b:2e:fc:91:
2c:7b:1f:02:17:66:3a:0b:47:57:6c:34:d6:5e:ec:ba:b2:90:
4d:97:db:6b:dd:05:9c:f0:cb:f3:af:02:49:e8:a0:9b:28:21:
10:59:ef:59:a6:b6:3a:93:51:c3:95:f4:49:ba:78:66:fa:f4:
7c:8a:a6:aa:08:53:64:d2:9d:dd:d6:11:42:64:d3:57:22:95:
22:48:e0:67:e6:f7:1a:6a:0f:0d:6c:05:f7:17:fd:57:4b:8a:
19:0e:05:8c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUU16yyIaypVKL2JinlXBSJJaRpYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA1MTExNjE4MjJaFw0yNzA1MTAxNjIzMjJaMDMxMTAvBgNV
BAMTKDBDNUI5MDEzMzFCRjkyNUE3MjBFNzhDQkE4NTk0RDBEM0UxMTFDNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gMs7v0RZ0QgGvLIl4QZl6kU1
IYj5G+9gyaOgw+D+RbAqF+YawW3upjwZYbwiuUbPxQXDBHA1k8SE7yvtyVwWDnOC
iouHgm0jA2LQSaJU3FbLq7W6zE/tafavaicoOqgjtN94bYBcjiFzNlDVccT7+uWK
NsR7/Hjvdda22W1ATo6WQioRdSiwFy9UItXue0WoDUgrm+2L9lg2UzEeDUrWDxrf
Qb/GGUvmbS6mCXNIQDxIXUPxLozVtAXK+d2XCS85wQolMpy/mj9OqKKKjbAczFc3
WBx48a8/evd7JNKl7gX57dhEKfmeH/uIemRgudCFgq8aTojUykjsoPFWIXZxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUDFuQEzG/klpyDnjLqFlNDT4RHFswHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDYwMTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgABMDwDBAAzwtID
BAAzwt0DBAEz8QADBAEz8TYDBAAz8TkDBAAz8T4DBAAz8VEDBAEz8VYDBAEz8XID
BAEz8XwwDQYJKoZIhvcNAQELBQADggEBAKHfJP8XsG18/VnUVwcaKXDxIze6jS36
2YVsZcUICrVMXGc3FpBp5EihQJA8eCzFSHfDyt9vQWn1DMMRY93THWQ7VazHMmMB
GIlIhPvuo3rtKI0fffraY5Yso9OZdYd1n7u0jN7Maoi/sjRZZKvZos4uyMNBKCTE
Rtz9t3YeqolofbcgjzEGzFVN74sMdbrBAWnEtdIxu1Xzjou3v7YLCy78kSx7HwIX
ZjoLR1dsNNZe7LqykE2X22vdBZzwy/OvAknooJsoIRBZ71mmtjqTUcOV9Em6eGb6
9HyKpqoIU2TSnd3WEUJk01cilSJI4Gfm9xpqDw1sBfcX/VdLihkOBYw=
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:52 2026 by rpki-client