$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5511.roa File: AS5511.roa (raw, json) Hash identifier: vArbiqpmoaoCaZ0AjbXUOVcfzCtu13bSakbjEVtUvzI= Subject key identifier: BB:0D:1D:CE:FE:04:C1:2A:7E:E1:30:DE:9A:A5:85:27:7B:BF:F6:EF Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1F24224F1508E44D6BDACCB6233BADF4C67CC069 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5511.roa Signing time: Thu 22 Oct 2026 20:53:12 +0000 ROA not before: Thu 22 Oct 2026 20:48:12 +0000 ROA not after: Thu 21 Oct 2027 20:53:12 +0000 asID: 5511 IP address blocks: 79.176.142.0/24 maxlen: 24 79.182.46.0/24 maxlen: 24 79.182.47.0/24 maxlen: 24 109.65.3.0/24 maxlen: 24 109.65.4.0/24 maxlen: 24 109.65.252.0/24 maxlen: 24 109.65.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 02:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:24:22:4f:15:08:e4:4d:6b:da:cc:b6:23:3b:ad:f4:c6:7c:c0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 22 20:48:12 2026 GMT Not After : Oct 21 20:53:12 2027 GMT Subject: CN=BB0D1DCEFE04C12A7EE130DE9AA585277BBFF6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:b0:62:15:e9:f3:7f:9e:50:a8:cc:ab:42: 95:9c:f7:0c:f7:c3:17:86:c4:73:52:4b:ca:61:3e: ab:ed:20:60:ad:fb:ee:3a:d5:01:d2:ec:89:f2:8d: 33:75:8d:6c:b5:aa:ed:0e:d8:e6:1a:e8:96:6e:0e: 14:8b:59:20:4b:af:24:eb:5c:d5:dc:6b:c6:ab:08: cb:d4:17:9f:ca:78:8c:93:41:84:09:e4:c5:d1:88: ff:40:2b:12:1c:00:83:a8:bd:4e:8b:d1:dc:14:ea: cd:1d:e2:9a:bf:fd:d8:1b:75:17:ef:7d:aa:df:04: 0e:79:c9:05:4b:29:b0:fd:fc:a8:ab:3e:be:33:1a: 24:65:37:20:d7:b3:8f:cc:44:b6:07:09:28:cd:f9: 95:45:70:b5:82:6c:57:1c:c7:c7:a6:fe:85:0c:53: e0:4e:f4:80:ba:7a:49:2b:3d:6e:2b:af:a0:dd:3c: 14:87:5c:34:99:78:25:49:70:3a:ad:56:40:9c:a7: df:19:29:05:f0:98:93:22:94:6f:4f:14:36:c7:78: 11:eb:b9:5a:cb:48:e7:14:85:4e:86:15:b4:4f:ff: f1:45:4c:66:0d:78:ce:fd:09:f6:2b:bb:3b:ca:8a: 1a:05:7a:62:c6:22:3d:1d:b7:f1:8f:42:a8:44:8e: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0D:1D:CE:FE:04:C1:2A:7E:E1:30:DE:9A:A5:85:27:7B:BF:F6:EF X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.142.0/24 79.182.46.0/23 109.65.3.0-109.65.4.255 109.65.252.0/23 Signature Algorithm: sha256WithRSAEncryption 42:ad:78:f0:1b:19:43:b2:fb:fd:4b:68:2a:33:16:18:2b:3a: 29:f6:4e:73:b0:03:c3:b6:2a:e1:84:20:0c:8c:37:7d:85:33: 9b:ce:a6:e0:20:07:4d:24:29:97:51:2c:e8:22:9d:1e:4f:ce: 52:be:1c:2b:0d:b5:f6:56:34:df:33:d9:c3:97:ae:8c:32:07: ff:de:7f:72:55:b0:27:0b:6b:de:38:34:8f:45:7f:07:f5:72: 40:b4:1f:f5:26:75:22:da:92:58:85:cb:4d:77:f8:bf:6c:42: 9d:48:51:b2:c2:24:20:5b:31:d8:4a:71:2b:11:3d:d4:72:60: e9:65:28:8d:cb:b7:cc:64:05:10:18:5f:84:d4:5c:3e:66:0e: d4:a7:ae:71:1d:da:df:d2:b8:3c:89:b5:fd:23:dd:36:90:d6: b0:15:a3:6a:8e:27:9f:4d:fe:35:0e:b9:83:01:61:5b:44:97: 59:3a:93:c3:0d:14:59:72:5e:01:3c:39:03:cc:5c:49:c9:40: 02:be:35:b3:d8:b7:c1:a0:c0:24:5a:13:7d:08:a8:ba:1f:4e: b1:56:47:0a:19:10:b2:5b:80:a4:25:f8:3c:dd:84:24:c0:32: e3:aa:aa:52:1f:67:88:da:5e:d5:59:58:44:cc:03:04:63:8d: d7:8b:94:6f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUHyQiTxUI5E1r2sy2Izut9MZ8wGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjIyMDQ4MTJaFw0yNzEwMjEyMDUzMTJaMDMxMTAvBgNV BAMTKEJCMEQxRENFRkUwNEMxMkE3RUUxMzBERTlBQTU4NTI3N0JCRkY2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC827BiFenzf55QqMyrQpWc9wz3 wxeGxHNSS8phPqvtIGCt++461QHS7InyjTN1jWy1qu0O2OYa6JZuDhSLWSBLryTr XNXca8arCMvUF5/KeIyTQYQJ5MXRiP9AKxIcAIOovU6L0dwU6s0d4pq//dgbdRfv farfBA55yQVLKbD9/KirPr4zGiRlNyDXs4/MRLYHCSjN+ZVFcLWCbFccx8em/oUM U+BO9IC6ekkrPW4rr6DdPBSHXDSZeCVJcDqtVkCcp98ZKQXwmJMilG9PFDbHeBHr uVrLSOcUhU6GFbRP//FFTGYNeM79CfYruzvKihoFemLGIj0dt/GPQqhEjm27AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUuw0dzv4EwSp+4TDemqWFJ3u/9u8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM1NTExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIA ATAgAwQAT7COAwQBT7YuMAwDBABtQQMDBABtQQQDBAFtQfwwDQYJKoZIhvcNAQEL BQADggEBAEKtePAbGUOy+/1LaCozFhgrOin2TnOwA8O2KuGEIAyMN32FM5vOpuAg B00kKZdRLOginR5PzlK+HCsNtfZWNN8z2cOXrowyB//ef3JVsCcLa944NI9Ffwf1 ckC0H/UmdSLakliFy013+L9sQp1IUbLCJCBbMdhKcSsRPdRyYOllKI3Lt8xkBRAY X4TUXD5mDtSnrnEd2t/SuDyJtf0j3TaQ1rAVo2qOJ59N/jUOuYMBYVtEl1k6k8MN FFlyXgE8OQPMXEnJQAK+NbPYt8GgwCRaE30IqLofTrFWRwoZELJbgKQl+DzdhCTA MuOqqlIfZ4jaXtVZWETMAwRjjdeLlG8= -----END CERTIFICATE-----Generated at Wed Nov 11 20:03:47 2026 by rpki-client