Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: PCVPDUCmLE87k3UbQ3hf7S9Yvwudo7f6XIBkVZJ8DlA=
Subject key identifier: 22:BB:34:29:72:DB:D0:38:8A:79:D4:D6:34:85:22:2B:C4:1A:8A:E7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 703B866A04E513DA0CDDA5AD28D68869A20CA188
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
Signing time: Tue 04 Aug 2026 00:04:41 +0000
ROA not before: Mon 03 Aug 2026 23:59:41 +0000
ROA not after: Tue 03 Aug 2027 00:04:41 +0000
asID: 5511
IP address blocks: 46.202.3.0/24 maxlen: 24
46.202.34.0/24 maxlen: 24
46.202.38.0/24 maxlen: 24
46.202.42.0/24 maxlen: 24
46.202.55.0/24 maxlen: 24
46.202.58.0/24 maxlen: 24
46.202.65.0/24 maxlen: 24
46.203.1.0/24 maxlen: 24
46.203.4.0/24 maxlen: 24
46.203.15.0/24 maxlen: 24
46.203.20.0/24 maxlen: 24
46.203.30.0/24 maxlen: 24
46.203.41.0/24 maxlen: 24
46.203.42.0/24 maxlen: 24
46.203.53.0/24 maxlen: 24
46.203.60.0/24 maxlen: 24
46.203.76.0/24 maxlen: 24
46.203.82.0/24 maxlen: 24
46.203.86.0/24 maxlen: 24
46.203.144.0/24 maxlen: 24
46.203.184.0/24 maxlen: 24
91.124.244.0/22 maxlen: 24
91.124.248.0/22 maxlen: 24
92.112.0.0/24 maxlen: 24
92.112.12.0/24 maxlen: 24
92.112.130.0/24 maxlen: 24
92.112.159.0/24 maxlen: 24
92.113.4.0/24 maxlen: 24
178.93.15.0/24 maxlen: 24
178.93.60.0/22 maxlen: 24
178.93.172.0/22 maxlen: 24
178.93.204.0/22 maxlen: 24
178.94.162.0/24 maxlen: 24
178.95.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3b:86:6a:04:e5:13:da:0c:dd:a5:ad:28:d6:88:69:a2:0c:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 3 23:59:41 2026 GMT
Not After : Aug 3 00:04:41 2027 GMT
Subject: CN=22BB342972DBD0388A79D4D63485222BC41A8AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:3f:d9:87:6e:94:85:d4:79:0b:2a:2a:bd:
94:b0:14:a8:61:33:59:4d:b9:29:92:04:82:36:41:
09:50:94:11:cb:64:cd:e1:f9:28:0c:dc:34:2b:96:
8f:15:a2:b3:0a:dd:c6:a6:01:bd:5d:f1:26:7d:c9:
7b:91:47:3b:a4:0f:88:32:9f:65:6e:b7:44:30:28:
76:c2:4b:c8:55:da:b3:43:59:4a:ad:30:9e:1f:e2:
b5:54:19:bd:bd:d1:66:e2:78:5b:d8:97:85:2f:79:
a0:6d:04:52:a1:28:44:25:93:58:46:f8:5f:78:59:
47:b8:45:49:19:50:96:72:cb:20:35:d0:ca:7e:55:
c3:93:29:81:37:38:d7:f5:34:79:a4:27:bc:57:8f:
b9:c6:f3:97:23:79:36:13:ff:a9:8e:8a:f3:30:4e:
bb:39:8e:c4:21:da:94:38:c6:09:f4:67:83:c2:aa:
5d:a3:95:e9:e8:0f:34:4c:31:85:b1:e0:66:8f:1f:
b4:33:30:17:1b:80:1b:dc:c6:36:05:33:89:ed:73:
34:34:67:81:6c:98:4e:1f:c9:b0:ab:cf:14:d0:58:
a2:03:f6:b9:1f:d3:97:31:ee:a6:b4:f1:e3:eb:f9:
b8:ee:c9:94:c5:e2:29:12:a5:5d:4b:ac:99:b4:8f:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:34:29:72:DB:D0:38:8A:79:D4:D6:34:85:22:2B:C4:1A:8A:E7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.3.0/24
46.202.34.0/24
46.202.38.0/24
46.202.42.0/24
46.202.55.0/24
46.202.58.0/24
46.202.65.0/24
46.203.1.0/24
46.203.4.0/24
46.203.15.0/24
46.203.20.0/24
46.203.30.0/24
46.203.41.0-46.203.42.255
46.203.53.0/24
46.203.60.0/24
46.203.76.0/24
46.203.82.0/24
46.203.86.0/24
46.203.144.0/24
46.203.184.0/24
91.124.244.0-91.124.251.255
92.112.0.0/24
92.112.12.0/24
92.112.130.0/24
92.112.159.0/24
92.113.4.0/24
178.93.15.0/24
178.93.60.0/22
178.93.172.0/22
178.93.204.0/22
178.94.162.0/24
178.95.64.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a0:e6:5a:ed:1a:8b:fe:69:cc:9a:a8:8c:0f:22:1e:5f:d8:
6a:69:63:d0:84:bb:55:d8:f0:a4:34:bd:43:6f:71:b7:5d:1f:
c4:11:b1:95:b5:02:99:bf:fe:b5:d7:25:46:f5:5a:42:31:77:
61:cc:84:ed:86:a5:c1:c6:4d:7c:57:5a:ce:30:e8:74:b5:0b:
22:e9:97:7b:27:7f:b8:0c:4d:8d:5d:bb:50:da:d0:81:4f:57:
0f:f1:fa:ff:ea:34:a5:4a:3f:4d:a7:49:59:c3:f2:c4:2b:4b:
95:c6:10:95:66:c3:0c:c9:34:9c:85:03:3e:fd:b0:71:63:4c:
6b:2a:25:67:2d:a1:df:3c:71:26:15:fc:ca:b9:31:d0:fb:fe:
03:11:3a:23:eb:c9:67:88:06:8c:53:a5:c7:7b:2e:ad:6f:ad:
cb:ed:42:8f:74:e3:70:e3:64:70:f9:96:1d:04:4f:22:6d:9c:
2a:aa:d2:a3:b6:5b:5e:2b:c2:9d:36:af:0f:86:4e:7e:0e:07:
fa:b3:55:10:cd:32:47:59:18:bd:15:62:52:3b:4a:95:26:29:
29:d9:26:0f:99:4d:24:5f:91:92:f4:39:87:e6:aa:c8:dd:96:
9d:a9:c6:85:59:b4:2f:a5:54:91:76:fe:d6:04:57:cc:84:dd:
a0:6d:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:15:11 2026 by rpki-client