
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218601.roa
File: AS218601.roa (raw, json)
Hash identifier: 7DtzGm10ab1fZdvd3lXQT8M2n4pTuYTRvx+VC4WfrIM=
Subject key identifier: F0:2F:A0:E5:F0:43:17:C7:00:45:1D:7A:86:85:5A:EC:A1:F1:F5:B2
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 5757F2C4ADA2CD153667442305A8E18F2A3C00E7
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218601.roa
Signing time: Tue 13 Oct 2026 09:59:25 +0000
ROA not before: Tue 13 Oct 2026 09:54:25 +0000
ROA not after: Tue 12 Oct 2027 09:59:25 +0000
asID: 218601
IP address blocks: 79.182.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 18:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:57:f2:c4:ad:a2:cd:15:36:67:44:23:05:a8:e1:8f:2a:3c:00:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 13 09:54:25 2026 GMT
Not After : Oct 12 09:59:25 2027 GMT
Subject: CN=F02FA0E5F04317C700451D7A86855AECA1F1F5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:a9:e9:1d:d5:e0:84:60:93:44:48:4e:1a:
db:66:7d:c8:92:ce:83:5a:4f:f8:ac:2a:9a:7a:b4:
cd:ff:d8:3d:1c:f7:c0:15:5f:df:91:09:0f:fc:2d:
bc:39:09:0a:e3:b7:6b:b0:9b:1e:1f:c2:b4:db:29:
e0:52:48:7e:94:75:66:0d:01:6c:e9:48:8a:2b:73:
f4:6f:95:2d:1b:6b:9c:79:cf:8b:9d:77:07:99:65:
79:d9:12:73:8b:d8:46:cc:85:ab:42:8b:f1:1c:0b:
62:bb:de:25:15:16:41:5f:e2:df:85:77:e1:15:af:
21:ee:4f:b3:c5:54:e8:3f:81:c4:11:c1:15:c7:b7:
92:ef:6d:2b:41:58:65:bd:52:32:01:88:c8:43:90:
b4:3f:af:63:3c:ae:f9:4a:23:f8:26:46:10:07:fa:
4e:86:b4:c0:d2:21:6f:1d:30:a4:85:65:eb:8c:59:
7d:4e:8e:c3:a3:5b:cd:87:11:41:a5:25:28:e3:85:
b8:57:77:46:df:8a:92:9f:ae:5b:0a:f7:6f:0d:a4:
fd:1d:54:15:c8:02:c0:38:65:ec:ec:4c:97:2a:b3:
37:2f:6f:b2:80:c4:09:f7:b5:4d:d3:2f:73:eb:a8:
58:97:b8:c2:68:80:58:c5:ff:08:fa:b8:ed:90:6b:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:A0:E5:F0:43:17:C7:00:45:1D:7A:86:85:5A:EC:A1:F1:F5:B2
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.191.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d9:19:78:14:73:75:56:d5:41:ce:d5:72:4c:8e:c6:ee:3f:
b0:f4:74:69:29:86:c6:1e:c4:ca:bb:d0:1d:d4:94:59:15:d2:
18:09:94:4e:dd:9e:8b:7c:7e:31:03:06:71:68:a6:4a:52:e9:
ed:d9:d5:9e:6f:e9:ee:10:66:cf:d0:ef:5a:18:1a:a6:8a:44:
8d:89:e3:72:0e:e4:65:d1:03:c2:9d:21:ee:d4:6d:36:44:41:
a7:bc:ea:b4:30:fc:f9:1d:91:ed:36:bf:a5:fc:77:96:64:12:
05:5e:ae:f3:db:8c:e5:5e:c8:a6:66:e6:eb:17:ef:a0:bf:a7:
a0:c9:13:54:a0:d5:9f:54:4a:33:8e:8b:07:e1:f9:9f:40:14:
65:1a:0c:63:72:1d:07:70:e6:dc:0b:46:34:06:9e:6c:2d:12:
a6:16:b5:9b:f2:12:59:71:69:7c:23:50:fd:f9:29:5d:37:0f:
05:dd:c7:51:e5:93:b4:72:99:fb:73:a6:6b:e0:cf:86:e4:40:
55:ca:24:4b:9b:fa:75:26:7d:dc:a3:50:b4:78:46:ab:3f:02:
be:2f:34:2e:7c:b6:12:ca:e8:5a:e9:2e:2a:f1:ae:39:f3:0d:
67:74:49:20:8f:77:f7:20:4a:07:42:4a:02:ee:b1:3b:8f:45:
c2:36:c5:23
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUV1fyxK2izRU2Z0QjBajhjyo8AOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMTMwOTU0MjVaFw0yNzEwMTIwOTU5MjVaMDMxMTAvBgNV
BAMTKEYwMkZBMEU1RjA0MzE3QzcwMDQ1MUQ3QTg2ODU1QUVDQTFGMUY1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDqnpHdXghGCTREhOGttmfciS
zoNaT/isKpp6tM3/2D0c98AVX9+RCQ/8Lbw5CQrjt2uwmx4fwrTbKeBSSH6UdWYN
AWzpSIorc/RvlS0ba5x5z4uddweZZXnZEnOL2EbMhatCi/EcC2K73iUVFkFf4t+F
d+EVryHuT7PFVOg/gcQRwRXHt5LvbStBWGW9UjIBiMhDkLQ/r2M8rvlKI/gmRhAH
+k6GtMDSIW8dMKSFZeuMWX1OjsOjW82HEUGlJSjjhbhXd0bfipKfrlsK928NpP0d
VBXIAsA4ZezsTJcqszcvb7KAxAn3tU3TL3PrqFiXuMJogFjF/wj6uO2Qa2s7AgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQU8C+g5fBDF8cARR16hoVa7KHx9bIwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg2MDEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABPtr8wDQYJKoZIhvcNAQELBQADggEBADnZGXgUc3VW1UHO1XJMjsbu
P7D0dGkphsYexMq70B3UlFkV0hgJlE7dnot8fjEDBnFopkpS6e3Z1Z5v6e4QZs/Q
71oYGqaKRI2J43IO5GXRA8KdIe7UbTZEQae86rQw/Pkdke02v6X8d5ZkEgVervPb
jOVeyKZm5usX76C/p6DJE1Sg1Z9USjOOiwfh+Z9AFGUaDGNyHQdw5twLRjQGnmwt
EqYWtZvyEllxaXwjUP35KV03DwXdx1Hlk7Rymftzpmvgz4bkQFXKJEub+nUmfdyj
ULR4Rqs/Ar4vNC58thLK6FrpLirxrjnzDWd0SSCPd/cgSgdCSgLusTuPRcI2xSM=
-----END CERTIFICATE-----
Generated at Tue Oct 20 09:02:42 2026 by rpki-client