Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: 5O90eaA2aPh0SZVNTwO6eqX6mXL1q1IyxhB8Im6hXMs=
Subject key identifier: D4:7A:1D:80:77:D0:53:3A:6C:96:4D:58:71:35:FF:4B:2D:B7:C4:21
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3653D26C7C48881A0BC85272C376969720F21EC6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
Signing time: Thu 11 Jun 2026 07:36:09 +0000
ROA not before: Thu 11 Jun 2026 07:31:09 +0000
ROA not after: Thu 10 Jun 2027 07:36:09 +0000
asID: 5511
IP address blocks: 51.146.64.0/24 maxlen: 24
51.146.153.0/24 maxlen: 24
51.146.155.0/24 maxlen: 24
51.146.156.0/24 maxlen: 24
51.146.158.0/24 maxlen: 24
51.146.187.0/24 maxlen: 24
51.146.190.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.72.0/22 maxlen: 24
51.194.79.0/24 maxlen: 24
51.194.86.0/24 maxlen: 24
51.194.143.0/24 maxlen: 24
51.194.200.0/24 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.102.0/24 maxlen: 24
188.220.166.0/24 maxlen: 24
188.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:53:d2:6c:7c:48:88:1a:0b:c8:52:72:c3:76:96:97:20:f2:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 11 07:31:09 2026 GMT
Not After : Jun 10 07:36:09 2027 GMT
Subject: CN=D47A1D8077D0533A6C964D587135FF4B2DB7C421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:ef:e2:79:86:65:ea:bc:7b:a2:0b:24:43:
5f:89:ee:44:8e:d7:10:53:fa:0e:2c:b0:e8:36:b0:
bb:da:35:02:2e:f0:8f:d6:02:b3:a5:84:39:e2:08:
02:31:fb:a1:14:cc:15:27:ac:6c:e9:0f:5d:83:3d:
fd:04:03:b8:dd:55:13:87:7d:b9:8f:7b:0a:55:65:
f9:94:24:45:d5:62:e5:0a:fc:e6:7b:91:6f:65:d6:
20:07:97:a5:21:89:55:b4:cf:01:07:e3:c1:d8:ba:
2d:88:96:e9:d4:fc:b1:52:b5:b1:6d:c0:df:6a:ce:
e5:4c:4f:e5:62:e0:7e:37:86:c3:a8:3d:49:40:31:
39:7d:e9:49:7e:68:f9:c3:27:8d:d9:51:ed:e5:fc:
84:aa:10:79:4a:79:01:ab:53:6d:c9:92:c8:4d:62:
c1:1f:3b:4e:6a:4e:a1:69:36:7f:b9:79:84:51:99:
3b:d5:ce:a6:18:2b:54:92:30:97:b3:41:84:89:75:
65:96:5d:da:2a:a3:2f:89:58:71:3b:6e:e6:0d:ff:
75:55:4f:15:c0:aa:fd:4d:43:57:41:7b:e9:17:98:
98:26:27:b1:32:e6:b5:a6:c4:67:f4:bb:da:ea:d6:
0e:74:00:f0:e7:79:1f:35:0f:41:4b:a8:e1:1d:0e:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7A:1D:80:77:D0:53:3A:6C:96:4D:58:71:35:FF:4B:2D:B7:C4:21
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.64.0/24
51.146.153.0/24
51.146.155.0-51.146.156.255
51.146.158.0/24
51.146.187.0/24
51.146.190.0/24
51.194.38.0/24
51.194.72.0/22
51.194.79.0/24
51.194.86.0/24
51.194.143.0/24
51.194.200.0/24
78.105.100.0/24
78.105.102.0/24
188.220.166.0/24
188.221.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b9:43:10:64:91:d8:04:b3:00:23:89:97:40:28:7a:ee:be:
89:c4:7e:1c:4a:d0:5e:dc:54:a2:b3:d8:93:a5:2a:af:e6:f8:
12:fe:74:ce:bd:68:c3:76:1b:3c:51:e3:32:b8:a6:7b:2a:41:
cc:ec:9f:b8:ac:43:53:53:7c:e5:03:bf:97:41:41:87:35:19:
8b:f0:eb:bb:b1:75:c1:63:75:49:fc:2c:7f:7f:a5:18:ca:cb:
d5:66:da:11:a4:37:74:73:c4:13:eb:1c:e4:24:24:4d:48:58:
ac:15:62:aa:65:96:d9:b6:62:0f:7a:d9:d0:02:05:2f:d9:ed:
fb:01:e8:e9:11:0e:a3:72:9e:23:85:f8:e7:ec:6a:5b:43:03:
da:46:e0:6a:53:69:a6:37:c9:b0:c0:a9:46:6d:dd:df:a0:ae:
f7:da:f0:9e:65:6a:ac:19:7b:dc:b0:24:28:b4:71:1c:b8:b1:
89:f4:99:a7:91:9d:47:a0:95:42:6a:c0:e5:04:61:70:ce:1d:
e6:a0:a4:ba:3c:25:1e:c8:60:47:07:f4:01:41:51:84:10:f6:
1f:8c:bd:79:3f:d2:fe:19:43:32:31:80:87:15:38:35:f5:5f:
55:cb:dc:be:ac:72:31:a3:9d:16:17:f3:9c:ee:a6:06:f8:b1:
2d:cc:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:37:07 2026 by rpki-client