$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12989.roa File: AS12989.roa (raw, json) Hash identifier: qNi9nldELlwyuX/8bj4LoOc9FCESVnOI6/qbLp1SkSg= Subject key identifier: CA:6D:A3:44:4E:03:1C:3D:5A:05:A7:A1:4A:D4:92:A2:7B:3F:F9:4D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3AC133A63ED75BECB0F9C12D5F028377A2C13751 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12989.roa Signing time: Wed 14 Oct 2026 08:16:17 +0000 ROA not before: Wed 14 Oct 2026 08:11:17 +0000 ROA not after: Wed 13 Oct 2027 08:16:17 +0000 asID: 12989 IP address blocks: 79.182.16.0/24 maxlen: 24 79.182.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Oct 2026 02:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c1:33:a6:3e:d7:5b:ec:b0:f9:c1:2d:5f:02:83:77:a2:c1:37:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 14 08:11:17 2026 GMT Not After : Oct 13 08:16:17 2027 GMT Subject: CN=CA6DA3444E031C3D5A05A7A14AD492A27B3FF94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:9f:bc:26:c0:8b:8b:1f:7e:01:bf:94:6a: ce:44:b1:02:fa:54:5d:d2:8e:ac:64:2d:42:45:e3: 7f:3d:6f:03:03:78:da:01:a1:d1:97:2d:6d:00:aa: b4:d5:3c:cc:db:c5:8c:65:98:af:cd:5f:05:e8:83: 2c:ff:23:a8:f9:d4:89:0e:ee:6e:1e:fa:ad:25:2b: 52:95:f6:6d:38:d6:9c:7b:dd:8b:8b:26:a9:75:52: cc:b8:b6:58:bc:44:e3:bf:fb:b7:fa:cc:13:9d:64: 22:75:7d:76:6f:09:54:a7:34:d7:b4:58:46:37:44: c0:fd:b4:05:c2:73:9c:d7:94:1d:75:73:54:ab:66: 57:be:e3:ae:6d:71:f5:ba:51:4d:80:ab:cd:54:26: a3:7a:94:af:d9:8c:d2:ce:80:f2:3e:6d:70:1f:61: c1:04:be:59:8f:5d:d8:d5:18:c6:4e:d9:ac:f0:6a: dc:5c:e0:f9:93:df:e2:01:59:ea:e4:41:ed:06:cd: 19:78:12:e1:52:58:9b:d9:4b:da:69:13:f4:1f:c7: a5:ec:64:1b:ef:ed:eb:2e:61:19:da:8e:cf:83:e0: fe:97:2b:fb:d9:c6:44:52:66:f8:84:2a:3a:a0:21: 01:79:99:e7:0e:ad:38:b6:6e:3a:56:f4:9c:ea:f2: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6D:A3:44:4E:03:1C:3D:5A:05:A7:A1:4A:D4:92:A2:7B:3F:F9:4D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS12989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.16.0/24 79.182.20.0/24 Signature Algorithm: sha256WithRSAEncryption cc:82:f4:43:31:21:de:25:8f:13:32:8a:30:88:5f:4b:d8:c4: e8:9f:53:1e:e3:32:09:8e:68:ca:4e:85:87:e8:d1:39:9e:44: 2d:50:cd:78:6a:5b:ac:09:41:e5:43:39:89:7d:a9:fd:42:c0: 31:3c:f8:21:55:d0:19:52:cf:92:73:f5:19:8e:a5:f2:7d:8c: d1:33:a0:74:b7:88:78:f8:60:af:5b:56:77:85:e5:f4:99:b7: b7:24:a0:ab:2a:3c:28:99:de:4b:c7:33:1e:6e:30:8a:5b:16: 69:32:88:e8:37:5c:66:ee:bd:6d:5e:d1:d7:2a:0b:b7:d4:08: 09:4b:a9:ed:37:01:15:98:4e:06:60:fa:d4:40:65:ef:09:48: a0:07:bb:26:0f:55:b3:18:4b:13:e0:ce:0a:38:51:cd:0b:4e: 5a:04:a2:10:68:99:dd:cc:ea:b3:bf:35:ff:17:ba:05:62:d0: c1:ff:10:4d:b8:6d:de:05:51:6d:c2:7d:13:54:81:59:e1:a0: 04:1d:11:f3:48:21:c0:d2:d0:5c:92:cd:cc:de:67:5f:7a:84: c9:04:34:c4:55:3f:68:ae:fa:07:1d:ba:a6:09:f5:da:42:b9: 0d:ba:47:41:fd:4f:1d:33:56:5b:ba:7d:6d:fa:30:62:db:97: a4:ac:6b:a0 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUOsEzpj7XW+yw+cEtXwKDd6LBN1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTQwODExMTdaFw0yNzEwMTMwODE2MTdaMDMxMTAvBgNV BAMTKENBNkRBMzQ0NEUwMzFDM0Q1QTA1QTdBMTRBRDQ5MkEyN0IzRkY5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvZ+8JsCLix9+Ab+Uas5EsQL6 VF3SjqxkLUJF4389bwMDeNoBodGXLW0AqrTVPMzbxYxlmK/NXwXogyz/I6j51IkO 7m4e+q0lK1KV9m041px73YuLJql1Usy4tli8ROO/+7f6zBOdZCJ1fXZvCVSnNNe0 WEY3RMD9tAXCc5zXlB11c1SrZle+465tcfW6UU2Aq81UJqN6lK/ZjNLOgPI+bXAf YcEEvlmPXdjVGMZO2azwatxc4PmT3+IBWerkQe0GzRl4EuFSWJvZS9ppE/Qfx6Xs ZBvv7esuYRnajs+D4P6XK/vZxkRSZviEKjqgIQF5mecOrTi2bjpW9Jzq8pwfAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUym2jRE4DHD1aBaehStSSons/+U0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMjk4OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAE+2EAMEAE+2FDANBgkqhkiG9w0BAQsFAAOCAQEAzIL0QzEh3iWPEzKK MIhfS9jE6J9THuMyCY5oyk6Fh+jROZ5ELVDNeGpbrAlB5UM5iX2p/ULAMTz4IVXQ GVLPknP1GY6l8n2M0TOgdLeIePhgr1tWd4Xl9Jm3tySgqyo8KJneS8czHm4wilsW aTKI6DdcZu69bV7R1yoLt9QICUup7TcBFZhOBmD61EBl7wlIoAe7Jg9VsxhLE+DO CjhRzQtOWgSiEGiZ3czqs781/xe6BWLQwf8QTbht3gVRbcJ9E1SBWeGgBB0R80gh wNLQXJLNzN5nX3qEyQQ0xFU/aK76Bx26pgn12kK5DbpHQf1PHTNWW7p9bfowYtuX pKxroA== -----END CERTIFICATE-----Generated at Fri Oct 30 11:08:52 2026 by rpki-client