$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5511.roa File: AS5511.roa (raw, json) Hash identifier: IKVSO+CW5RPuEmg5babHj6qSshRjCljQfAvRuQ5EVOE= Subject key identifier: 52:B2:07:48:50:10:86:27:19:0C:A7:68:AE:3F:0B:40:F4:72:FA:AF Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 631951439BB6DFB8F5CCC1304734C7D303F5EEB9 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5511.roa Signing time: Mon 05 Oct 2026 06:13:06 +0000 ROA not before: Mon 05 Oct 2026 06:08:06 +0000 ROA not after: Mon 04 Oct 2027 06:13:06 +0000 asID: 5511 IP address blocks: 79.176.142.0/24 maxlen: 24 79.182.46.0/24 maxlen: 24 79.182.47.0/24 maxlen: 24 109.65.3.0/24 maxlen: 24 109.65.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:19:51:43:9b:b6:df:b8:f5:cc:c1:30:47:34:c7:d3:03:f5:ee:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:06 2026 GMT Not After : Oct 4 06:13:06 2027 GMT Subject: CN=52B2074850108627190CA768AE3F0B40F472FAAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:66:f8:90:51:97:f0:48:00:73:3c:bc:36: 76:64:0e:5b:09:98:de:f8:e7:74:44:3d:4f:05:47: 6b:d9:79:97:ef:8b:c2:63:ef:62:9b:96:d3:03:2b: 99:94:e7:9f:12:b6:9c:2b:63:6d:c3:3f:01:33:ce: 54:7e:d2:e4:62:6a:94:24:e6:24:d5:4a:85:dc:00: 37:1d:46:ee:a7:9e:3e:52:2d:e3:5c:ca:a8:bc:8b: ed:4e:68:a5:aa:e2:66:d1:88:05:28:aa:35:f2:f6: e4:93:79:b5:3e:07:52:55:25:5a:5c:d6:ce:8b:59: ec:fb:34:e3:ac:08:9b:df:43:fe:06:93:db:a9:8c: f5:ee:97:58:5a:f2:3f:85:70:fe:0e:ee:73:15:44: 83:66:26:50:98:9d:4a:ea:fc:dc:e6:d7:0c:49:cb: 08:b1:a9:11:c3:28:dc:4c:02:bd:a7:e6:61:ee:df: 88:51:8c:c1:69:51:a3:c8:fd:3d:e3:25:30:95:83: de:4a:ae:0a:e0:9e:52:a2:75:e8:63:78:bd:16:7a: 84:f3:93:3f:c2:27:9e:31:36:12:35:0a:7f:48:7e: 67:16:c8:c8:f2:18:08:47:0e:8a:de:89:34:c0:b7: 9a:52:cb:3a:aa:cc:28:e6:bf:43:ca:ad:e1:20:96: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B2:07:48:50:10:86:27:19:0C:A7:68:AE:3F:0B:40:F4:72:FA:AF X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS5511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.142.0/24 79.182.46.0/23 109.65.3.0-109.65.4.255 Signature Algorithm: sha256WithRSAEncryption b8:ca:5e:42:3f:52:b8:12:6a:5e:a3:79:c4:a3:10:fd:a1:44: ec:96:0c:45:e5:b1:c7:61:b2:7e:3f:ef:50:60:af:37:d7:14: 9c:41:4d:be:12:7c:15:85:d6:d7:51:98:b2:32:2c:7e:2a:b1: 4a:39:e4:7e:b0:28:d8:7d:c1:c1:2d:a0:02:db:b5:44:e7:13: 97:e1:30:fe:45:ce:8c:0b:d0:41:ee:10:c4:6d:93:22:ff:21: 35:fe:ee:fe:57:27:41:22:07:bc:77:e6:ae:16:f2:11:95:4c: 9a:31:b1:a7:e8:dd:80:88:c5:0d:bc:cf:3a:b2:4e:a1:b7:ec: 0b:fc:1b:7f:b8:01:c2:d7:71:f1:3e:23:0d:0c:f8:be:34:46: eb:5d:a7:64:97:3d:d9:d4:d3:bf:19:ca:ea:fd:ed:c3:4d:65: 86:78:32:f7:e4:10:03:49:cc:f4:c3:e1:0f:d2:6e:6b:08:23: 0f:9e:1b:ac:fc:2d:55:1d:82:1a:9d:2c:1e:10:5f:85:09:89: 22:75:8e:fa:4b:93:6e:3b:05:99:4f:f1:5f:35:da:3b:a6:ca: 43:af:f1:6b:a7:33:eb:1e:88:1a:1a:7e:e4:78:9d:87:60:2d: 0e:c0:c4:65:5f:21:fb:77:c2:b7:a6:0c:4b:95:9a:bf:8f:e0: 82:24:9d:df -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUYxlRQ5u237j1zMEwRzTH0wP17rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MDZaFw0yNzEwMDQwNjEzMDZaMDMxMTAvBgNV BAMTKDUyQjIwNzQ4NTAxMDg2MjcxOTBDQTc2OEFFM0YwQjQwRjQ3MkZBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhmb4kFGX8EgAczy8NnZkDlsJ mN7453REPU8FR2vZeZfvi8Jj72KbltMDK5mU558StpwrY23DPwEzzlR+0uRiapQk 5iTVSoXcADcdRu6nnj5SLeNcyqi8i+1OaKWq4mbRiAUoqjXy9uSTebU+B1JVJVpc 1s6LWez7NOOsCJvfQ/4Gk9upjPXul1ha8j+FcP4O7nMVRINmJlCYnUrq/Nzm1wxJ ywixqRHDKNxMAr2n5mHu34hRjMFpUaPI/T3jJTCVg95KrgrgnlKidehjeL0WeoTz kz/CJ54xNhI1Cn9IfmcWyMjyGAhHDoreiTTAt5pSyzqqzCjmv0PKreEglrwtAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUUrIHSFAQhicZDKdorj8LQPRy+q8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM1NTExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIA ATAaAwQAT7COAwQBT7YuMAwDBABtQQMDBABtQQQwDQYJKoZIhvcNAQELBQADggEB ALjKXkI/UrgSal6jecSjEP2hROyWDEXlscdhsn4/71BgrzfXFJxBTb4SfBWF1tdR mLIyLH4qsUo55H6wKNh9wcEtoALbtUTnE5fhMP5FzowL0EHuEMRtkyL/ITX+7v5X J0EiB7x35q4W8hGVTJoxsafo3YCIxQ28zzqyTqG37Av8G3+4AcLXcfE+Iw0M+L40 Rutdp2SXPdnU078Zyur97cNNZYZ4MvfkEANJzPTD4Q/SbmsIIw+eG6z8LVUdghqd LB4QX4UJiSJ1jvpLk247BZlP8V812jumykOv8WunM+seiBoafuR4nYdgLQ7AxGVf Ift3wremDEuVmr+P4IIknd8= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:55 2026 by rpki-client