Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: 9Lpz3vWambDfir2U9nMHvILjWJfJ4pN38Uiol2iAa8c=
Subject key identifier: DC:38:61:D2:3E:07:77:1E:6F:3F:A9:B5:7B:2D:33:9B:67:CA:AB:7B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 23714C03077DBA2D994DC053F8601B6F6C650D6D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
Signing time: Thu 02 Apr 2026 07:03:31 +0000
ROA not before: Thu 02 Apr 2026 06:58:31 +0000
ROA not after: Thu 01 Apr 2027 07:03:31 +0000
asID: 5511
IP address blocks: 51.146.153.0/24 maxlen: 24
51.146.155.0/24 maxlen: 24
51.146.156.0/24 maxlen: 24
51.146.158.0/24 maxlen: 24
51.146.187.0/24 maxlen: 24
51.146.190.0/24 maxlen: 24
51.194.48.0/22 maxlen: 24
51.194.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:71:4c:03:07:7d:ba:2d:99:4d:c0:53:f8:60:1b:6f:6c:65:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 2 06:58:31 2026 GMT
Not After : Apr 1 07:03:31 2027 GMT
Subject: CN=DC3861D23E07771E6F3FA9B57B2D339B67CAAB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:31:ed:20:80:d2:e4:8f:8e:a9:de:79:9d:
b1:5f:2b:5f:76:c6:87:27:4c:e8:95:a0:40:d0:31:
70:a7:4f:f4:b0:8b:39:31:ea:e8:4f:3b:12:63:ef:
cc:2f:2a:9e:1d:9b:dd:30:4e:45:e2:2f:4f:e4:4f:
e3:1a:75:e4:cd:23:48:04:f3:22:7b:12:fa:b0:af:
96:98:f9:09:04:5f:48:33:2e:29:70:81:0f:47:f2:
fd:f5:fd:34:24:8b:74:e7:06:8d:6f:81:75:0e:88:
01:fc:1a:2d:33:71:4c:8d:29:17:17:58:48:6e:66:
14:d0:b1:5a:93:68:91:c8:98:40:21:f3:e5:72:19:
b3:60:6f:4a:60:39:aa:95:cd:4e:59:63:fc:c7:e7:
52:d5:fa:91:3d:68:bd:89:16:77:7c:44:5d:8d:71:
08:d8:ad:0a:f8:6a:d2:43:2c:cd:0f:21:80:aa:fe:
c5:67:02:02:0c:66:b8:2f:f8:d1:81:26:e3:39:80:
1b:92:70:09:c8:1c:57:6a:c6:8b:93:bb:2d:0e:10:
9d:97:71:82:2b:17:3b:7f:46:bd:e9:5b:f6:6b:96:
4a:3a:57:09:24:76:a5:ce:2d:a8:ef:7d:d2:6e:90:
3e:ca:73:cd:43:91:be:10:f6:fd:c1:6f:87:39:8d:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:61:D2:3E:07:77:1E:6F:3F:A9:B5:7B:2D:33:9B:67:CA:AB:7B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.153.0/24
51.146.155.0-51.146.156.255
51.146.158.0/24
51.146.187.0/24
51.146.190.0/24
51.194.48.0/22
51.194.60.0/22
Signature Algorithm: sha256WithRSAEncryption
22:bb:49:20:fd:e6:fe:f6:dc:75:e1:15:35:15:17:47:d9:f4:
9a:44:c8:da:d9:f4:45:42:5a:a9:92:7d:29:5c:fd:b5:8b:49:
a6:cd:46:8e:ad:da:04:15:ac:fa:e1:10:c8:72:45:da:d4:80:
a0:76:f2:c8:fe:1b:b2:7c:2c:53:9e:0b:d1:d0:0b:35:f8:e8:
5f:00:f6:40:45:6c:51:2a:8c:61:c5:be:44:9e:ce:11:15:26:
08:df:85:c7:35:38:88:8b:f0:9f:a1:78:e0:0f:b3:18:d1:39:
91:1f:fb:8f:80:c6:74:65:9d:89:52:8c:3b:0a:c2:ca:ef:59:
ee:93:51:b5:82:5b:63:9b:db:60:d5:d9:c4:98:18:c5:83:27:
82:ba:69:96:a5:e2:69:e1:31:37:39:46:d6:46:ac:08:e9:ef:
28:38:cb:66:9b:88:e5:fd:ad:8a:5e:bb:b1:a4:49:c0:21:e0:
7d:b1:17:e9:57:51:2a:de:5e:f0:59:9d:75:d8:47:30:e4:35:
7e:c0:37:cd:5e:81:e3:6d:6d:54:12:7b:3a:3c:1d:19:8f:1a:
a4:c5:a6:05:24:16:89:1a:1f:7e:0c:62:64:5c:07:3d:c0:e0:
17:e2:ea:87:92:df:13:62:7e:6b:98:69:45:e1:66:d6:2b:ac:
3d:4e:c6:e9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUI3FMAwd9ui2ZTcBT+GAbb2xlDW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA0MDIwNjU4MzFaFw0yNzA0MDEwNzAzMzFaMDMxMTAvBgNV
BAMTKERDMzg2MUQyM0UwNzc3MUU2RjNGQTlCNTdCMkQzMzlCNjdDQUFCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9DHtIIDS5I+Oqd55nbFfK192
xocnTOiVoEDQMXCnT/Swizkx6uhPOxJj78wvKp4dm90wTkXiL0/kT+MadeTNI0gE
8yJ7Evqwr5aY+QkEX0gzLilwgQ9H8v31/TQki3TnBo1vgXUOiAH8Gi0zcUyNKRcX
WEhuZhTQsVqTaJHImEAh8+VyGbNgb0pgOaqVzU5ZY/zH51LV+pE9aL2JFnd8RF2N
cQjYrQr4atJDLM0PIYCq/sVnAgIMZrgv+NGBJuM5gBuScAnIHFdqxouTuy0OEJ2X
cYIrFzt/Rr3pW/Zrlko6VwkkdqXOLajvfdJukD7Kc81Dkb4Q9v3Bb4c5jfjbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3Dhh0j4Hdx5vP6m1ey0zm2fKq3swHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNTUxMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMgMEADOSmTAM
AwQAM5KbAwQAM5KcAwQAM5KeAwQAM5K7AwQAM5K+AwQCM8IwAwQCM8I8MA0GCSqG
SIb3DQEBCwUAA4IBAQAiu0kg/eb+9tx14RU1FRdH2fSaRMja2fRFQlqpkn0pXP21
i0mmzUaOrdoEFaz64RDIckXa1ICgdvLI/huyfCxTngvR0As1+OhfAPZARWxRKoxh
xb5Ens4RFSYI34XHNTiIi/CfoXjgD7MY0TmRH/uPgMZ0ZZ2JUow7CsLK71nuk1G1
gltjm9tg1dnEmBjFgyeCummWpeJp4TE3OUbWRqwI6e8oOMtmm4jl/a2KXruxpEnA
IeB9sRfpV1Eq3l7wWZ112Ecw5DV+wDfNXoHjbW1UEns6PB0ZjxqkxaYFJBaJGh9+
DGJkXAc9wOAX4uqHkt8TYn5rmGlF4WbWK6w9Tsbp
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:34 2026 by rpki-client