This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5511.roa File: AS5511.roa (raw, json) Hash identifier: eegYbDOoT6d0IvKn/DJRc8Z9lE3scWDeKNXgSREE+xI= Subject key identifier: DF:0C:91:62:31:99:C9:66:45:90:00:AF:BF:2A:C5:21:B3:FA:F0:26 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 2FA97BD0AE95E0BE2C7903A85B44EF60094A1A97 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5511.roa Signing time: Mon 19 Jan 2026 10:55:33 +0000 ROA not before: Mon 19 Jan 2026 10:50:33 +0000 ROA not after: Mon 18 Jan 2027 10:55:33 +0000 asID: 5511 IP address blocks: 89.19.51.0/24 maxlen: 24 179.61.198.0/24 maxlen: 24 179.61.210.0/24 maxlen: 24 179.61.212.0/24 maxlen: 24 179.61.214.0/24 maxlen: 24 181.214.223.0/24 maxlen: 24 181.214.224.0/24 maxlen: 24 181.214.233.0/24 maxlen: 24 181.214.243.0/24 maxlen: 24 191.96.8.0/24 maxlen: 24 191.96.16.0/24 maxlen: 24 191.96.27.0/24 maxlen: 24 191.96.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a9:7b:d0:ae:95:e0:be:2c:79:03:a8:5b:44:ef:60:09:4a:1a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 19 10:50:33 2026 GMT Not After : Jan 18 10:55:33 2027 GMT Subject: CN=DF0C91623199C966459000AFBF2AC521B3FAF026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:ad:61:a0:d2:6e:cf:30:91:d8:77:2a:b6: 71:1a:d5:3a:71:d8:48:68:71:cc:0c:2e:d4:df:52: 47:5e:0d:45:83:80:bd:5e:52:cc:fd:a8:e6:3d:35: a0:e9:d1:87:87:c8:7e:00:c5:a9:77:4e:f1:d8:6a: 0c:c6:ab:5e:03:0d:ed:9d:0d:90:e0:23:69:a1:bd: 03:23:0e:38:60:15:ae:1a:e9:1e:e3:5b:ec:78:2c: 7f:1d:c5:4c:49:e6:20:84:a5:f0:f6:79:ea:bf:b3: c0:bb:76:6b:8a:05:c3:eb:38:6b:33:30:e5:84:1f: cc:70:36:95:2f:ff:98:11:d6:22:18:64:09:e0:3e: 0f:72:a1:ea:74:3d:a0:4f:57:23:a5:6a:27:be:5d: 9d:7c:88:e0:30:c6:4f:7d:39:7a:d3:a4:bb:46:9b: 6e:c7:2d:60:08:b3:59:87:6b:58:f5:27:d7:0a:07: ff:5d:81:9e:26:af:27:eb:87:3c:0d:06:ab:bc:75: a5:0b:45:1b:13:80:d9:aa:64:1e:cf:12:b0:8b:df: f2:3b:30:3f:2a:f6:28:49:df:14:b7:78:df:f9:52: 59:a9:f5:5e:f6:46:a8:85:7e:3b:1e:b9:ba:cb:15: 68:58:65:d6:e2:7b:bd:ae:92:28:d5:a6:a1:5c:bf: 15:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:91:62:31:99:C9:66:45:90:00:AF:BF:2A:C5:21:B3:FA:F0:26 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS5511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.51.0/24 179.61.198.0/24 179.61.210.0/24 179.61.212.0/24 179.61.214.0/24 181.214.223.0-181.214.224.255 181.214.233.0/24 181.214.243.0/24 191.96.8.0/24 191.96.16.0/24 191.96.27.0/24 191.96.83.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:39:4e:75:f2:5c:80:b5:52:5a:f5:2b:56:d5:87:aa:02:ae: db:e1:f3:25:b4:01:94:6b:8a:d5:cc:64:43:34:ba:f3:b3:07: b9:d1:0e:c6:f2:6d:5d:81:6f:ac:c4:7f:0b:95:6c:e5:5d:3a: f9:24:a1:b0:96:3d:71:0f:e1:01:8a:b5:ff:00:24:a2:3e:52: 9a:75:7d:45:a8:e7:d4:2b:c0:c4:9f:dc:0b:97:ef:4f:6b:6f: 85:10:2a:c0:5d:9b:57:15:da:fb:01:35:83:0b:1c:72:4d:8b: e5:1f:10:67:77:d7:03:77:28:8d:dd:d2:7e:ef:53:3b:b2:15: f5:5d:a5:db:5b:19:c4:14:a1:b2:64:07:c8:d7:c5:87:a2:fc: 0d:4c:c7:f0:5a:57:3d:24:25:e8:0a:0a:25:40:e0:40:72:0d: 6c:9a:19:70:e0:9a:8d:64:28:a4:c0:60:8a:2b:4a:cc:b3:50: eb:41:06:71:a1:96:69:7b:83:3d:24:68:e2:28:c9:67:32:bc: 2f:8c:04:e6:72:de:7b:8e:bc:ac:79:84:1e:d0:d1:fb:51:fb: f1:c7:f0:d2:c0:e4:68:2d:d4:af:56:8d:c7:07:cc:ca:d0:61: 89:80:78:53:4d:91:76:90:1b:7b:ec:b9:d8:ba:83:0c:8c:28: 4e:76:ff:9c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUL6l70K6V4L4seQOoW0TvYAlKGpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMTkxMDUwMzNaFw0yNzAxMTgxMDU1MzNaMDMxMTAvBgNV BAMTKERGMEM5MTYyMzE5OUM5NjY0NTkwMDBBRkJGMkFDNTIxQjNGQUYwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOja1hoNJuzzCR2HcqtnEa1Tpx 2EhoccwMLtTfUkdeDUWDgL1eUsz9qOY9NaDp0YeHyH4Axal3TvHYagzGq14DDe2d DZDgI2mhvQMjDjhgFa4a6R7jW+x4LH8dxUxJ5iCEpfD2eeq/s8C7dmuKBcPrOGsz MOWEH8xwNpUv/5gR1iIYZAngPg9yoep0PaBPVyOlaie+XZ18iOAwxk99OXrTpLtG m27HLWAIs1mHa1j1J9cKB/9dgZ4mryfrhzwNBqu8daULRRsTgNmqZB7PErCL3/I7 MD8q9ihJ3xS3eN/5Ulmp9V72RqiFfjseubrLFWhYZdbie72ukijVpqFcvxVJAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU3wyRYjGZyWZFkACvvyrFIbP68CYwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTUxMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBpBggrBgEFBQcBBwEB/wRaMFgwVgQCAAEwUAMEAFkTMwME ALM9xgMEALM90gMEALM91AMEALM91jAMAwQAtdbfAwQAtdbgAwQAtdbpAwQAtdbz AwQAv2AIAwQAv2AQAwQAv2AbAwQAv2BTMA0GCSqGSIb3DQEBCwUAA4IBAQCdOU51 8lyAtVJa9StW1YeqAq7b4fMltAGUa4rVzGRDNLrzswe50Q7G8m1dgW+sxH8LlWzl XTr5JKGwlj1xD+EBirX/ACSiPlKadX1FqOfUK8DEn9wLl+9Pa2+FECrAXZtXFdr7 ATWDCxxyTYvlHxBnd9cDdyiN3dJ+71M7shX1XaXbWxnEFKGyZAfI18WHovwNTMfw Wlc9JCXoCgolQOBAcg1smhlw4JqNZCikwGCKK0rMs1DrQQZxoZZpe4M9JGjiKMln MrwvjATmct57jryseYQe0NH7Ufvxx/DSwORoLdSvVo3HB8zK0GGJgHhTTZF2kBt7 7LnYuoMMjChOdv+c -----END CERTIFICATE-----Generated at Sun Jan 25 11:50:11 2026 by rpki-client