Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: 24hPUvR08ZgLWrCqI3SygIedfnujNyG1AronfE00Zes=
Subject key identifier: 42:8E:3B:62:99:66:96:C3:AA:B0:77:7F:34:AD:B3:61:D1:0A:89:BA
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3907FDDC75CCB9B2C90B6CEFA0790F24084A6C31
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS5511.roa
Signing time: Mon 05 Oct 2026 00:06:36 +0000
ROA not before: Mon 05 Oct 2026 00:01:36 +0000
ROA not after: Mon 04 Oct 2027 00:06:36 +0000
asID: 5511
IP address blocks: 193.29.97.0/24 maxlen: 24
193.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:07:fd:dc:75:cc:b9:b2:c9:0b:6c:ef:a0:79:0f:24:08:4a:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 5 00:01:36 2026 GMT
Not After : Oct 4 00:06:36 2027 GMT
Subject: CN=428E3B62996696C3AAB0777F34ADB361D10A89BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d8:e5:43:6e:43:86:7f:61:3f:2d:d3:60:4c:
4f:d1:3f:f8:b2:f5:e0:2f:a8:68:04:69:3c:d1:04:
5b:a5:cf:0b:95:78:39:9a:4c:d7:9b:13:e9:13:fd:
c9:e1:55:43:38:4a:64:04:a5:bc:29:2b:39:1d:32:
b0:92:b8:82:c4:56:74:3c:3d:1e:51:06:db:25:ce:
47:a1:76:4c:e5:18:be:98:3c:72:8e:8a:86:db:a7:
4d:d5:b7:bc:0e:c6:e4:6d:83:02:65:4a:d8:1e:66:
13:43:7e:99:11:72:b1:2e:f8:b1:4d:4d:53:99:1f:
af:74:a5:f4:b7:bd:c5:dc:5b:11:2b:6a:84:50:ff:
e9:6b:b9:c7:31:ec:42:a4:98:33:ed:a4:f1:5b:0a:
2f:22:07:87:3e:1b:1e:fe:de:07:8c:72:77:15:5b:
2b:22:17:34:71:b4:f2:e7:4c:4e:f6:17:5c:cb:2a:
89:6c:a6:c5:83:a9:e5:c2:56:90:e4:08:8f:7c:c2:
43:8c:c4:ba:2c:55:5b:85:f0:4b:cc:82:78:6c:22:
4b:5b:c1:cc:cb:ff:1a:12:16:3d:cf:fd:cc:f4:82:
5f:42:fc:b1:77:1b:c5:8b:e8:64:b4:29:eb:69:87:
34:7b:10:3b:18:6e:4a:3b:f4:ad:f1:2b:32:69:fd:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:3B:62:99:66:96:C3:AA:B0:77:7F:34:AD:B3:61:D1:0A:89:BA
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.97.0/24
193.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:af:9a:1d:86:93:1c:82:c4:8c:bf:26:16:98:38:cb:49:35:
70:9f:3a:4b:4f:c5:15:dd:a0:9d:d9:d6:9a:dc:c0:f8:d1:2d:
5b:f3:75:d6:fd:ce:f7:9c:c1:b8:1f:16:81:5c:f0:37:d4:dc:
2d:a6:d4:0c:5f:51:00:41:8a:71:16:99:20:c3:ca:cb:df:6f:
2d:33:2c:07:bf:20:79:67:c6:7a:53:b4:57:13:c8:75:bf:8e:
f6:c8:66:19:f4:7c:f9:d5:4d:ed:6e:68:f1:48:7c:2f:09:bf:
14:7c:a6:d4:e0:3a:cf:65:8a:d8:79:43:dc:ca:8f:5e:d1:cc:
3f:af:a1:fd:42:7e:ed:77:91:55:7b:e0:d4:47:0f:94:18:47:
97:74:c9:3b:fc:b8:22:8d:4d:3f:6c:26:29:13:c8:b1:da:ac:
65:21:7f:db:0b:7e:1c:91:8e:21:b4:47:ff:ee:33:a8:67:05:
9c:8e:1e:ce:d1:0a:23:13:ef:e6:3e:f7:cb:02:05:a9:31:a5:
41:d4:32:8b:c1:fc:8e:f7:5f:76:42:a1:af:be:39:5c:de:66:
22:07:1d:16:29:08:b6:45:93:02:1b:df:79:9b:c4:dc:78:fb:
25:0c:5e:17:ae:b2:1c:32:95:c3:2a:0f:33:b6:f7:ce:dc:6f:
aa:39:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:53:26 2026 by rpki-client