Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: nioG/a0N7+2miMBJG9WQqpAX2D4zqEGA8t2dSn8A3nI=
Subject key identifier: F2:CC:9E:BA:9E:82:F2:AF:FD:81:11:78:58:59:39:F2:12:1D:DA:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26723A8D921781D065B2FA9C1CBD6B84EC95A2F0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
Signing time: Thu 15 Oct 2026 08:00:26 +0000
ROA not before: Thu 15 Oct 2026 07:55:26 +0000
ROA not after: Thu 14 Oct 2027 08:00:26 +0000
asID: 5511
IP address blocks: 51.146.34.0/24 maxlen: 24
51.146.35.0/24 maxlen: 24
51.146.57.0/24 maxlen: 24
51.146.59.0/24 maxlen: 24
51.146.64.0/24 maxlen: 24
51.146.153.0/24 maxlen: 24
51.146.155.0/24 maxlen: 24
51.146.156.0/24 maxlen: 24
51.146.158.0/24 maxlen: 24
51.146.187.0/24 maxlen: 24
51.146.190.0/24 maxlen: 24
51.194.38.0/24 maxlen: 24
51.194.72.0/22 maxlen: 24
51.194.79.0/24 maxlen: 24
51.194.86.0/24 maxlen: 24
51.194.143.0/24 maxlen: 24
51.194.200.0/24 maxlen: 24
51.241.99.0/24 maxlen: 24
51.241.160.0/24 maxlen: 24
51.241.180.0/24 maxlen: 24
51.241.183.0/24 maxlen: 24
51.241.187.0/24 maxlen: 24
51.241.208.0/24 maxlen: 24
51.241.218.0/24 maxlen: 24
51.241.255.0/24 maxlen: 24
78.105.100.0/24 maxlen: 24
78.105.102.0/24 maxlen: 24
78.105.189.0/24 maxlen: 24
78.105.201.0/24 maxlen: 24
78.105.212.0/24 maxlen: 24
78.105.223.0/24 maxlen: 24
78.105.235.0/24 maxlen: 24
94.116.24.0/22 maxlen: 24
94.116.28.0/22 maxlen: 24
94.192.40.0/22 maxlen: 24
94.194.48.0/22 maxlen: 24
94.194.56.0/22 maxlen: 24
94.194.92.0/22 maxlen: 24
94.194.100.0/22 maxlen: 24
94.194.108.0/22 maxlen: 24
94.194.136.0/22 maxlen: 24
94.194.176.0/22 maxlen: 24
94.194.184.0/22 maxlen: 24
94.194.224.0/22 maxlen: 24
188.220.70.0/24 maxlen: 24
188.220.129.0/24 maxlen: 24
188.220.137.0/24 maxlen: 24
188.220.166.0/24 maxlen: 24
188.221.19.0/24 maxlen: 24
188.221.40.0/24 maxlen: 24
188.221.140.0/24 maxlen: 24
188.221.152.0/24 maxlen: 24
188.221.161.0/24 maxlen: 24
188.221.172.0/22 maxlen: 24
188.221.176.0/24 maxlen: 24
188.221.185.0/24 maxlen: 24
188.221.194.0/24 maxlen: 24
188.221.196.0/24 maxlen: 24
188.221.197.0/24 maxlen: 24
188.221.217.0/24 maxlen: 24
188.221.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:72:3a:8d:92:17:81:d0:65:b2:fa:9c:1c:bd:6b:84:ec:95:a2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 15 07:55:26 2026 GMT
Not After : Oct 14 08:00:26 2027 GMT
Subject: CN=F2CC9EBA9E82F2AFFD811178585939F2121DDAD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:cd:f2:12:52:a0:15:78:e4:a7:67:dd:9a:
99:3f:12:b5:d7:57:0e:ec:58:47:7f:b3:10:c3:52:
08:fa:e7:16:9a:b6:5f:c6:3c:0a:97:b7:fa:7b:72:
a7:ba:af:66:90:26:00:6e:58:ec:ff:7b:7c:43:0c:
4f:0a:5b:6f:7b:e2:ab:9b:fe:72:f7:c1:88:6a:ee:
3d:4a:ce:52:7a:c0:ee:6e:f3:ce:94:b8:c1:57:2e:
aa:d4:4c:8a:e9:ab:e8:45:35:7a:6e:35:26:01:0e:
2c:ed:10:b9:cb:a1:9d:f0:c5:d2:a6:9d:36:ef:3f:
99:a4:80:c8:f3:74:d0:b4:4e:72:50:94:03:de:ad:
7d:31:8b:63:cf:6b:2f:54:46:2c:e4:3a:58:af:a8:
76:ac:f7:5a:28:e4:87:83:cc:25:10:25:49:b7:ae:
ba:55:8a:73:fb:2a:60:fc:d7:52:18:12:eb:27:a5:
4b:3a:d8:55:94:14:ae:69:6d:3e:dd:de:72:08:90:
91:a8:a6:e5:44:a1:85:4f:6e:35:b4:d5:4c:51:eb:
aa:30:3b:2f:83:9d:2e:df:c3:b8:2d:c1:b1:be:b5:
3c:10:33:98:a9:f0:0f:60:b4:10:3c:33:3d:8d:0f:
55:31:9c:de:64:aa:74:1f:28:74:f4:2a:1d:e9:5c:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:9E:BA:9E:82:F2:AF:FD:81:11:78:58:59:39:F2:12:1D:DA:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.34.0/23
51.146.57.0/24
51.146.59.0/24
51.146.64.0/24
51.146.153.0/24
51.146.155.0-51.146.156.255
51.146.158.0/24
51.146.187.0/24
51.146.190.0/24
51.194.38.0/24
51.194.72.0/22
51.194.79.0/24
51.194.86.0/24
51.194.143.0/24
51.194.200.0/24
51.241.99.0/24
51.241.160.0/24
51.241.180.0/24
51.241.183.0/24
51.241.187.0/24
51.241.208.0/24
51.241.218.0/24
51.241.255.0/24
78.105.100.0/24
78.105.102.0/24
78.105.189.0/24
78.105.201.0/24
78.105.212.0/24
78.105.223.0/24
78.105.235.0/24
94.116.24.0/21
94.192.40.0/22
94.194.48.0/22
94.194.56.0/22
94.194.92.0/22
94.194.100.0/22
94.194.108.0/22
94.194.136.0/22
94.194.176.0/22
94.194.184.0/22
94.194.224.0/22
188.220.70.0/24
188.220.129.0/24
188.220.137.0/24
188.220.166.0/24
188.221.19.0/24
188.221.40.0/24
188.221.140.0/24
188.221.152.0/24
188.221.161.0/24
188.221.172.0-188.221.176.255
188.221.185.0/24
188.221.194.0/24
188.221.196.0/23
188.221.217.0/24
188.221.255.0/24
Signature Algorithm: sha256WithRSAEncryption
53:27:92:fc:bc:9b:2f:7b:e5:e4:08:f4:49:8d:4e:a2:7e:b9:
cf:98:48:b4:ed:e3:6c:d0:60:dc:44:6d:3e:17:25:66:a4:26:
39:cb:bd:7b:28:de:be:09:62:46:83:19:9f:40:30:92:c4:da:
d5:d2:98:fa:7e:8b:2e:17:2a:ed:e9:de:a2:2a:38:63:70:86:
a8:07:16:94:d9:f6:62:c0:aa:2a:98:30:ae:a6:1e:48:2f:f7:
ec:fe:26:35:a5:21:73:07:04:f8:d2:53:dc:08:16:83:b9:4d:
41:3b:83:bb:cd:a7:bf:88:7b:2a:b6:9c:8e:cb:f8:91:f7:c1:
3e:7f:ee:2e:ca:00:cb:a7:40:c0:ae:42:47:b8:30:e8:64:b1:
c1:27:79:5f:6b:96:18:96:2d:e0:83:8c:fc:1f:6c:45:03:b8:
58:2b:52:c8:6c:e6:27:0e:11:4f:0e:a4:48:76:88:24:1c:33:
d3:b4:35:b5:06:df:f9:57:3c:02:00:5a:8b:2e:85:b9:e3:08:
62:fc:fd:4a:9b:43:20:3d:2b:01:4e:77:c5:7e:1d:0d:54:d2:
ff:c5:6d:f6:63:be:97:4c:7d:81:82:8f:26:5a:c1:23:8a:61:
7c:d3:26:cd:d8:47:5a:e5:59:38:bf:33:20:5c:e4:bd:f1:ed:
8f:97:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 00:24:53 2026 by rpki-client