Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: BzQaTDuU60myP10t2VX5V0zA2D8PsCzKppn1fILXssk=
Subject key identifier: 4A:CC:F4:7B:74:1A:E3:48:20:1E:73:5A:D8:B0:A3:F9:76:D7:42:EE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5F271610EA76FEC3C0197D4DAC5C1CB5F3F5FA02
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
Signing time: Tue 21 Jul 2026 13:34:17 +0000
ROA not before: Tue 21 Jul 2026 13:29:17 +0000
ROA not after: Tue 20 Jul 2027 13:34:17 +0000
asID: 5511
IP address blocks: 51.146.57.0/24 maxlen: 24
51.146.59.0/24 maxlen: 24
51.146.64.0/24 maxlen: 24
51.146.153.0/24 maxlen: 24
51.146.155.0/24 maxlen: 24
51.146.156.0/24 maxlen: 24
51.146.158.0/24 maxlen: 24
51.146.187.0/24 maxlen: 24
51.146.190.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.72.0/22 maxlen: 24
51.194.79.0/24 maxlen: 24
51.194.86.0/24 maxlen: 24
51.194.143.0/24 maxlen: 24
51.194.200.0/24 maxlen: 24
51.241.187.0/24 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.102.0/24 maxlen: 24
78.105.189.0/24 maxlen: 24
78.105.201.0/24 maxlen: 24
78.105.212.0/24 maxlen: 24
78.105.223.0/24 maxlen: 24
78.105.235.0/24 maxlen: 24
188.220.70.0/24 maxlen: 24
188.220.166.0/24 maxlen: 24
188.221.19.0/24 maxlen: 24
188.221.40.0/24 maxlen: 24
188.221.172.0/22 maxlen: 24
188.221.185.0/24 maxlen: 24
188.221.194.0/24 maxlen: 24
188.221.217.0/24 maxlen: 24
188.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:27:16:10:ea:76:fe:c3:c0:19:7d:4d:ac:5c:1c:b5:f3:f5:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 21 13:29:17 2026 GMT
Not After : Jul 20 13:34:17 2027 GMT
Subject: CN=4ACCF47B741AE348201E735AD8B0A3F976D742EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:72:78:9d:fa:24:c6:b7:60:1f:78:b4:21:
2f:c3:34:3e:66:23:0d:4f:6d:2f:82:b7:0e:63:f5:
fb:0b:e2:65:34:0c:71:7d:89:ce:25:e5:b2:f4:96:
20:4c:c0:45:e4:67:70:6f:7a:92:b3:32:39:df:6d:
4d:81:13:1d:05:d6:09:3a:49:27:4c:23:f2:00:96:
fd:53:35:ad:74:b6:98:39:9f:a2:a5:5a:b2:d3:59:
f1:77:16:26:fb:13:f8:50:5f:5f:57:2d:6b:ac:4f:
12:0c:0d:15:9a:5f:5f:d3:4a:b9:a7:66:61:52:27:
58:1f:ae:bf:df:7c:6b:62:38:16:29:94:a1:7c:40:
fe:de:8a:de:af:cb:de:01:4d:40:fd:6c:ea:c2:16:
34:fb:75:cf:22:18:0c:db:03:f8:57:a8:8e:ca:33:
03:c9:33:02:20:d7:2e:ff:1c:0f:65:e9:2d:3b:72:
16:be:44:34:d1:a3:37:e1:7d:8c:fb:c6:70:33:3a:
49:c6:e0:b8:b6:aa:b7:1d:c1:fa:a1:49:e2:4f:6e:
fe:23:22:6a:ce:e3:f0:d6:f7:11:4b:4e:84:3d:bd:
d3:24:dd:c4:4f:75:f2:ae:f5:83:78:c0:4a:9a:83:
de:98:69:c3:4d:b0:1a:8a:94:1c:80:86:53:58:b1:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:F4:7B:74:1A:E3:48:20:1E:73:5A:D8:B0:A3:F9:76:D7:42:EE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.57.0/24
51.146.59.0/24
51.146.64.0/24
51.146.153.0/24
51.146.155.0-51.146.156.255
51.146.158.0/24
51.146.187.0/24
51.146.190.0/24
51.194.38.0/24
51.194.72.0/22
51.194.79.0/24
51.194.86.0/24
51.194.143.0/24
51.194.200.0/24
51.241.187.0/24
78.105.100.0/24
78.105.102.0/24
78.105.189.0/24
78.105.201.0/24
78.105.212.0/24
78.105.223.0/24
78.105.235.0/24
188.220.70.0/24
188.220.166.0/24
188.221.19.0/24
188.221.40.0/24
188.221.172.0/22
188.221.185.0/24
188.221.194.0/24
188.221.217.0/24
188.221.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b8:d3:b7:64:ae:79:c1:7d:f2:f8:45:73:9f:fc:60:46:20:
ec:b4:81:a3:2a:c9:6b:67:e4:e4:29:88:7b:d3:09:26:1a:01:
75:b4:de:12:36:d6:78:2d:2f:66:08:38:9b:81:7e:52:fb:aa:
99:a1:41:42:e0:b6:30:61:5c:65:b5:05:53:b2:42:2a:09:d3:
35:8f:9e:0b:3f:c7:4c:4f:f8:fd:17:03:17:11:6c:24:68:5b:
6a:3c:f8:b3:91:ec:1b:77:ed:b5:4d:65:94:93:03:2e:7f:5b:
7c:7d:30:fa:ad:4c:38:aa:e7:74:59:9a:b3:06:7b:95:af:93:
73:e5:82:f8:c3:b4:96:8c:8f:6b:f2:51:db:45:d8:c3:0d:fd:
15:8e:49:c0:2e:84:46:45:ec:3f:5b:52:64:7c:4c:ef:3d:8b:
7a:a4:f5:8d:d9:7e:8a:b6:2c:65:82:50:21:c3:44:7e:ce:c7:
1e:bc:c4:d7:21:8a:9d:8c:ab:48:08:a9:32:93:d8:65:06:7f:
1f:75:19:a7:0d:63:54:7f:f8:df:05:66:51:fe:23:91:51:19:
84:00:d5:ac:27:9a:9e:24:64:91:77:66:c0:39:81:c2:03:82:
df:21:20:dd:e5:14:65:39:a5:8f:29:21:66:31:3d:6e:18:d1:
17:f5:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:51 2026 by rpki-client