Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: +ke1ffsAst/1CDJ+poKW8e/O8sr1C3Z8kKPkX1LGIZg=
Subject key identifier: AE:98:EC:D5:25:FC:3B:C3:50:FB:D3:28:A6:07:55:BA:D0:93:9F:E6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3E47268DEDE7B4E1ED3BD47D49C03AB5E549D44A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
Signing time: Sat 05 Sep 2026 10:07:43 +0000
ROA not before: Sat 05 Sep 2026 10:02:43 +0000
ROA not after: Sat 04 Sep 2027 10:07:43 +0000
asID: 5511
IP address blocks: 51.146.57.0/24 maxlen: 24
51.146.59.0/24 maxlen: 24
51.146.64.0/24 maxlen: 24
51.146.153.0/24 maxlen: 24
51.146.155.0/24 maxlen: 24
51.146.156.0/24 maxlen: 24
51.146.158.0/24 maxlen: 24
51.146.187.0/24 maxlen: 24
51.146.190.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.72.0/22 maxlen: 24
51.194.79.0/24 maxlen: 24
51.194.86.0/24 maxlen: 24
51.194.143.0/24 maxlen: 24
51.194.200.0/24 maxlen: 24
51.241.187.0/24 maxlen: 24
51.241.208.0/24 maxlen: 24
51.241.255.0/24 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.102.0/24 maxlen: 24
78.105.189.0/24 maxlen: 24
78.105.201.0/24 maxlen: 24
78.105.212.0/24 maxlen: 24
78.105.223.0/24 maxlen: 24
78.105.235.0/24 maxlen: 24
188.220.70.0/24 maxlen: 24
188.220.129.0/24 maxlen: 24
188.220.137.0/24 maxlen: 24
188.220.166.0/24 maxlen: 24
188.221.19.0/24 maxlen: 24
188.221.40.0/24 maxlen: 24
188.221.172.0/22 maxlen: 24
188.221.185.0/24 maxlen: 24
188.221.194.0/24 maxlen: 24
188.221.217.0/24 maxlen: 24
188.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:47:26:8d:ed:e7:b4:e1:ed:3b:d4:7d:49:c0:3a:b5:e5:49:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 5 10:02:43 2026 GMT
Not After : Sep 4 10:07:43 2027 GMT
Subject: CN=AE98ECD525FC3BC350FBD328A60755BAD0939FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:9f:4a:c3:3e:ce:48:cf:4d:66:02:6c:24:
7e:fb:70:b8:14:28:db:c7:c5:7f:6f:5a:2a:1d:e9:
07:f6:4e:5e:e4:90:46:cc:4b:c8:91:d3:1a:4b:d0:
d4:b8:58:11:7e:52:00:96:84:2a:cc:1d:37:de:01:
1d:3e:36:75:4b:0d:2e:b6:fd:d4:be:c1:dd:bc:09:
9e:d9:ef:f8:82:dd:09:4a:d3:f4:36:65:22:05:67:
1e:2d:d3:b4:e2:5d:3a:c3:23:96:38:3b:5d:b8:f5:
46:6c:01:43:03:55:1c:5e:d6:6e:34:f2:7d:78:32:
a4:89:58:6c:7c:65:7b:d8:4a:1b:c8:44:93:35:fd:
70:29:14:79:f9:db:f7:f3:f8:54:b4:63:9f:c2:fa:
9e:13:96:c3:3f:cb:52:ea:a8:93:48:0b:94:fd:9a:
df:ea:18:e7:c6:67:cb:7b:9e:62:bf:b6:15:76:22:
03:5c:19:14:18:0c:d6:09:ef:93:dc:7f:c4:e6:c5:
4c:3e:f8:ef:84:d3:a3:67:ca:56:0d:ac:fa:9c:35:
20:56:69:f4:2d:b5:b6:a8:a4:f2:3f:1c:c2:a2:84:
6a:53:85:c3:3f:5d:05:b6:6e:5e:3f:4d:f9:17:2c:
3e:d6:a5:c0:0f:32:79:d9:9e:ee:c5:47:1b:d7:b7:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:EC:D5:25:FC:3B:C3:50:FB:D3:28:A6:07:55:BA:D0:93:9F:E6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.57.0/24
51.146.59.0/24
51.146.64.0/24
51.146.153.0/24
51.146.155.0-51.146.156.255
51.146.158.0/24
51.146.187.0/24
51.146.190.0/24
51.194.38.0/24
51.194.72.0/22
51.194.79.0/24
51.194.86.0/24
51.194.143.0/24
51.194.200.0/24
51.241.187.0/24
51.241.208.0/24
51.241.255.0/24
78.105.100.0/24
78.105.102.0/24
78.105.189.0/24
78.105.201.0/24
78.105.212.0/24
78.105.223.0/24
78.105.235.0/24
188.220.70.0/24
188.220.129.0/24
188.220.137.0/24
188.220.166.0/24
188.221.19.0/24
188.221.40.0/24
188.221.172.0/22
188.221.185.0/24
188.221.194.0/24
188.221.217.0/24
188.221.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ba:1c:d6:0b:81:63:42:0d:e0:3f:03:fa:8a:ee:51:9e:22:
ae:6c:05:3c:e9:d1:64:fe:88:c1:df:26:1e:8e:55:4d:d9:26:
14:08:5d:2a:4f:e5:bd:e3:c1:58:1e:c2:5e:91:05:20:4c:da:
79:a4:85:10:58:5f:2f:ba:17:78:dd:7f:c9:9a:7d:25:3c:a6:
d5:fd:a4:f6:c0:8c:31:03:30:3d:7b:1a:10:82:d1:4c:47:d6:
c3:c6:98:ad:2a:bf:64:6c:a1:78:d5:db:a6:f2:27:e1:f1:b2:
ce:d2:38:6a:d3:df:0c:3a:40:6b:dd:be:db:99:96:0e:65:6f:
43:73:c0:07:ca:2e:57:bf:b9:5c:07:60:08:64:b4:1c:9a:68:
94:a4:63:f5:04:78:64:3f:9c:49:64:1f:7b:44:16:ab:f6:4f:
e0:82:9d:c6:b1:2f:dd:a4:7e:90:8f:d3:76:46:8a:65:99:67:
63:ba:4c:ec:6b:c7:c9:58:d1:9c:2c:34:1f:4f:5f:59:8b:de:
bb:8c:5b:73:c5:83:72:8f:a1:80:10:47:9b:bb:4b:b7:1b:ff:
64:b4:d8:db:81:98:58:81:2d:b4:e9:bd:c3:19:fb:58:e4:60:
de:d8:3d:85:a6:ba:9e:42:66:81:31:8c:35:0f:c4:dd:39:63:
a5:56:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:03:04 2026 by rpki-client