Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: 84BL128/pK9r97hLvKx14hLWDOn7EPMOivfvLMpepp8=
Subject key identifier: A1:81:6B:7F:EA:6D:F8:3A:AD:3E:06:B7:18:CA:57:58:B1:EE:4D:F6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6E881C479EFE59234DDBD4D7170F0BAEF169E065
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
Signing time: Wed 23 Jul 2025 14:07:33 +0000
ROA not before: Wed 23 Jul 2025 14:02:33 +0000
ROA not after: Wed 22 Jul 2026 14:07:33 +0000
asID: 5511
IP address blocks: 46.202.3.0/24 maxlen: 24
46.202.34.0/24 maxlen: 24
46.202.38.0/24 maxlen: 24
46.202.42.0/24 maxlen: 24
46.202.55.0/24 maxlen: 24
46.202.58.0/24 maxlen: 24
46.202.65.0/24 maxlen: 24
46.203.1.0/24 maxlen: 24
46.203.4.0/24 maxlen: 24
46.203.15.0/24 maxlen: 24
46.203.20.0/24 maxlen: 24
46.203.30.0/24 maxlen: 24
46.203.41.0/24 maxlen: 24
46.203.42.0/24 maxlen: 24
46.203.53.0/24 maxlen: 24
46.203.60.0/24 maxlen: 24
46.203.76.0/24 maxlen: 24
46.203.82.0/24 maxlen: 24
46.203.86.0/24 maxlen: 24
46.203.144.0/24 maxlen: 24
46.203.184.0/24 maxlen: 24
91.124.244.0/22 maxlen: 24
91.124.248.0/22 maxlen: 24
92.112.0.0/24 maxlen: 24
92.112.12.0/24 maxlen: 24
92.112.130.0/24 maxlen: 24
92.112.159.0/24 maxlen: 24
95.135.182.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.93.60.0/22 maxlen: 24
178.93.172.0/22 maxlen: 24
178.93.204.0/22 maxlen: 24
178.95.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:88:1c:47:9e:fe:59:23:4d:db:d4:d7:17:0f:0b:ae:f1:69:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 14:02:33 2025 GMT
Not After : Jul 22 14:07:33 2026 GMT
Subject: CN=A1816B7FEA6DF83AAD3E06B718CA5758B1EE4DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:f6:84:e9:15:33:85:ca:69:35:db:6a:d0:
a2:9b:f4:6d:30:f2:4b:d4:0c:7b:52:08:8b:20:21:
94:c9:09:80:c1:82:71:b8:ab:da:22:50:69:ca:d5:
75:ed:e9:5f:c0:02:a7:1f:d1:1b:d4:6d:2c:3c:de:
74:17:07:e6:e5:4c:81:33:63:70:fc:30:05:ea:95:
22:27:65:ee:ef:bd:62:6b:7d:f1:37:6b:81:da:c6:
7f:ff:2d:32:e3:01:53:f5:1f:24:7e:56:20:57:11:
2f:95:cd:94:61:5b:d3:b1:8a:ff:e3:30:3b:2d:ee:
8e:27:38:73:28:2f:db:38:f4:77:9c:69:19:5f:5f:
dd:d5:67:da:2a:d9:de:e8:dc:6e:e9:a3:83:55:2f:
f1:be:c6:f9:ee:7e:52:84:dc:87:33:51:3b:91:3c:
d8:15:f6:44:57:7e:27:c9:21:86:21:de:73:ad:48:
73:0b:e2:64:12:df:f2:aa:42:ce:5e:cf:51:fa:25:
4a:05:a6:f9:bf:c0:11:38:e2:ab:2e:5f:ff:1c:6d:
26:f9:9a:92:37:fd:4f:e2:33:29:b7:78:9e:16:61:
4f:79:98:11:2f:72:61:f3:ca:53:22:bd:71:9f:b0:
5a:92:cf:9c:2f:5d:2b:67:4d:27:e5:2f:e7:7a:9b:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:6B:7F:EA:6D:F8:3A:AD:3E:06:B7:18:CA:57:58:B1:EE:4D:F6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.3.0/24
46.202.34.0/24
46.202.38.0/24
46.202.42.0/24
46.202.55.0/24
46.202.58.0/24
46.202.65.0/24
46.203.1.0/24
46.203.4.0/24
46.203.15.0/24
46.203.20.0/24
46.203.30.0/24
46.203.41.0-46.203.42.255
46.203.53.0/24
46.203.60.0/24
46.203.76.0/24
46.203.82.0/24
46.203.86.0/24
46.203.144.0/24
46.203.184.0/24
91.124.244.0-91.124.251.255
92.112.0.0/24
92.112.12.0/24
92.112.130.0/24
92.112.159.0/24
95.135.182.0/23
178.93.60.0/22
178.93.172.0/22
178.93.204.0/22
178.95.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:25:fb:b6:b9:6a:c1:ce:fc:9a:52:ed:53:04:91:80:77:48:
43:f5:98:3f:d0:96:c1:90:a8:b6:78:28:72:68:ac:00:26:f6:
bd:20:a2:20:3d:08:e5:d4:bf:b1:35:2f:c7:0a:ad:78:a6:77:
45:9a:5b:ee:07:86:7b:64:b6:d9:47:e9:56:dd:d0:22:5a:0f:
d3:88:42:2b:9a:27:1d:85:d9:47:df:a4:31:3b:9b:c7:18:64:
be:1d:95:77:a0:47:81:02:9c:72:f1:ce:8f:ce:40:75:88:a5:
3c:dd:56:45:dd:ce:66:2d:51:9c:d4:94:6c:66:6e:14:65:08:
2d:25:eb:87:dd:42:f6:88:6e:a1:92:79:51:20:d2:7c:76:58:
71:ff:d8:00:40:e7:96:c8:10:c0:7e:e0:f2:26:06:35:23:0a:
a8:16:01:b2:2b:b4:75:27:1a:b9:b7:72:d7:7d:0c:3b:32:7e:
92:47:7c:40:c3:41:4f:8c:74:95:a0:b3:a7:ba:f0:13:9d:90:
3b:46:4d:d3:69:3b:e9:2f:d1:89:5d:fb:67:d3:21:bd:de:1a:
07:b7:36:32:f1:3f:0b:97:e1:e6:9e:07:91:dc:4f:cb:66:15:
ae:cb:85:8a:39:5c:91:33:2a:ba:ac:20:96:db:13:54:22:c5:
a4:66:be:1b
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUbogcR57+WSNN29TXFw8LrvFp4GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MjMxNDAyMzNaFw0yNjA3MjIxNDA3MzNaMDMxMTAvBgNV
BAMTKEExODE2QjdGRUE2REY4M0FBRDNFMDZCNzE4Q0E1NzU4QjFFRTRERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDurfaE6RUzhcppNdtq0KKb9G0w
8kvUDHtSCIsgIZTJCYDBgnG4q9oiUGnK1XXt6V/AAqcf0RvUbSw83nQXB+blTIEz
Y3D8MAXqlSInZe7vvWJrffE3a4Haxn//LTLjAVP1HyR+ViBXES+VzZRhW9Oxiv/j
MDst7o4nOHMoL9s49HecaRlfX93VZ9oq2d7o3G7po4NVL/G+xvnuflKE3IczUTuR
PNgV9kRXfifJIYYh3nOtSHML4mQS3/KqQs5ez1H6JUoFpvm/wBE44qsuX/8cbSb5
mpI3/U/iMym3eJ4WYU95mBEvcmHzylMivXGfsFqSz5wvXStnTSflL+d6m/u/AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUoYFrf+pt+DqtPga3GMpXWLHuTfYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTUxMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB4QYIKwYBBQUHAQcBAf8EgdEwgc4wgcsEAgABMIHEAwQA
LsoDAwQALsoiAwQALsomAwQALsoqAwQALso3AwQALso6AwQALspBAwQALssBAwQA
LssEAwQALssPAwQALssUAwQALsseMAwDBAAuyykDBAAuyyoDBAAuyzUDBAAuyzwD
BAAuy0wDBAAuy1IDBAAuy1YDBAAuy5ADBAAuy7gwDAMEAlt89AMEAlt8+AMEAFxw
AAMEAFxwDAMEAFxwggMEAFxwnwMEAV+HtgMEArJdPAMEArJdrAMEArJdzAMEArJf
QDANBgkqhkiG9w0BAQsFAAOCAQEAKiX7trlqwc78mlLtUwSRgHdIQ/WYP9CWwZCo
tngocmisACb2vSCiID0I5dS/sTUvxwqteKZ3RZpb7geGe2S22UfpVt3QIloP04hC
K5onHYXZR9+kMTubxxhkvh2Vd6BHgQKccvHOj85AdYilPN1WRd3OZi1RnNSUbGZu
FGUILSXrh91C9ohuoZJ5USDSfHZYcf/YAEDnlsgQwH7g8iYGNSMKqBYBsiu0dSca
ubdy130MOzJ+kkd8QMNBT4x0laCzp7rwE52QO0ZN02k76S/RiV37Z9Mhvd4aB7c2
MvE/C5fh5p4HkdxPy2YVrsuFijlckTMquqwgltsTVCLFpGa+Gw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:48 2025 by rpki-client