Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: syTW8qtBRGDlCMnGNxZxPHkEdTF8uQvivla9OmS7O0o=
Subject key identifier: 94:74:AC:A6:04:31:02:02:37:71:A9:F2:AC:2F:42:A8:F6:8F:F0:9D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EB8F35BB01659BB9C4AF990DDFF10CEA54E083C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
Signing time: Wed 06 May 2026 12:24:48 +0000
ROA not before: Wed 06 May 2026 12:19:48 +0000
ROA not after: Wed 05 May 2027 12:24:48 +0000
asID: 5511
IP address blocks: 51.146.153.0/24 maxlen: 24
51.146.155.0/24 maxlen: 24
51.146.156.0/24 maxlen: 24
51.146.158.0/24 maxlen: 24
51.146.187.0/24 maxlen: 24
51.146.190.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.48.0/22 maxlen: 24
51.194.60.0/22 maxlen: 24
51.194.79.0/24 maxlen: 24
51.194.86.0/24 maxlen: 24
51.194.143.0/24 maxlen: 24
51.194.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b8:f3:5b:b0:16:59:bb:9c:4a:f9:90:dd:ff:10:ce:a5:4e:08:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 6 12:19:48 2026 GMT
Not After : May 5 12:24:48 2027 GMT
Subject: CN=9474ACA6043102023771A9F2AC2F42A8F68FF09D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:3f:66:bb:28:62:08:0b:f1:33:e5:6c:6f:
01:9a:e7:62:b2:59:39:c0:f6:c1:62:87:9b:14:7e:
b6:5c:8b:6c:c9:8f:79:dc:91:3e:da:4b:12:1e:48:
0d:34:ef:48:4e:1b:46:5c:cd:b1:b1:d6:9b:93:8b:
9b:1d:67:9d:70:f4:48:c6:a7:b0:35:9c:c0:89:ca:
e2:b7:57:a8:97:29:b7:38:52:ea:1b:ea:81:01:cf:
2d:3d:27:0c:bd:f9:f5:16:ab:ef:75:42:3d:02:62:
d4:46:0e:ef:51:08:7c:53:43:f1:51:80:47:ec:85:
0b:ed:33:89:e7:57:5c:21:1c:22:e4:b8:15:44:f9:
18:4c:23:04:20:0a:b1:de:91:4d:8f:9e:34:ff:4c:
9a:e6:9b:8e:59:ca:98:c9:ad:27:f9:20:d2:a1:8d:
66:3b:94:70:21:a3:27:9e:00:ea:fd:f9:42:82:f0:
c6:01:17:75:d2:0a:63:ad:ac:ce:4c:92:3d:ef:4d:
3d:f4:94:2d:d3:af:06:eb:80:c3:9d:57:be:99:96:
80:70:ce:7d:b3:9c:a8:db:9c:8a:d5:4c:d3:2a:5e:
f0:d8:e3:fc:19:87:d2:7a:3b:2b:66:13:d3:16:c8:
c6:f0:6f:b9:31:4a:53:d2:9a:09:ce:53:bc:e7:34:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:AC:A6:04:31:02:02:37:71:A9:F2:AC:2F:42:A8:F6:8F:F0:9D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.153.0/24
51.146.155.0-51.146.156.255
51.146.158.0/24
51.146.187.0/24
51.146.190.0/24
51.194.38.0/24
51.194.48.0/22
51.194.60.0/22
51.194.79.0/24
51.194.86.0/24
51.194.143.0/24
51.194.200.0/24
Signature Algorithm: sha256WithRSAEncryption
56:08:f9:79:af:24:be:50:06:d6:09:8c:bb:31:75:00:1a:f7:
f1:8f:85:93:3f:e2:a3:5a:0d:6b:70:8a:d3:88:3a:44:86:69:
1b:6b:77:df:30:48:9d:73:40:fe:68:92:62:f2:af:d3:66:62:
22:a2:15:83:cd:0a:54:81:bb:5d:17:e2:9f:f1:ee:22:0e:5c:
73:7e:e6:0b:ee:b5:64:b4:fe:11:a0:91:c6:f9:a0:d4:c2:55:
1f:9c:8c:20:0f:70:66:39:54:7d:e9:a2:30:45:68:22:58:48:
4d:0b:ab:0e:f9:1c:34:fa:37:45:21:29:35:80:25:b5:28:06:
40:85:f7:da:be:94:0b:31:60:7d:1c:49:97:20:8f:86:bb:17:
a4:9c:ce:63:f4:ed:84:3c:e7:c0:2c:17:75:00:24:2c:29:56:
da:33:93:be:b5:51:75:3e:1b:07:93:39:fd:8f:04:a8:5f:e9:
09:5e:eb:4d:57:61:ce:64:d0:71:a1:cf:39:cb:e7:d6:93:98:
1e:dd:4d:a4:b0:0a:4a:e6:8b:fc:50:d7:e8:ea:c8:e7:a1:5f:
1e:c2:d4:f4:c9:eb:0b:b9:ba:60:9e:52:18:0f:3a:01:ae:27:
0d:1a:c7:09:7b:b5:36:63:9b:5b:78:bf:99:48:4b:37:51:14:
92:e0:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:59 2026 by rpki-client