$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219053.roa File: AS219053.roa (raw, json) Hash identifier: NBV+LcioJEqIBSkgPO2yZbY7Hk2PWPkP49d+tJ5+cnw= Subject key identifier: 21:69:5A:7A:8C:7A:DD:5E:64:DB:8E:B2:7E:8C:D6:3F:D5:27:1B:E8 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7197EEA6AB0F024999BBE45B418E0FF2DD24174F Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219053.roa Signing time: Thu 15 Oct 2026 10:16:51 +0000 ROA not before: Thu 15 Oct 2026 10:11:51 +0000 ROA not after: Thu 14 Oct 2027 10:16:51 +0000 asID: 219053 IP address blocks: 79.180.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 18:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:97:ee:a6:ab:0f:02:49:99:bb:e4:5b:41:8e:0f:f2:dd:24:17:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 15 10:11:51 2026 GMT Not After : Oct 14 10:16:51 2027 GMT Subject: CN=21695A7A8C7ADD5E64DB8EB27E8CD63FD5271BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:7d:27:d8:cb:45:9a:78:cc:c6:26:cd:8e: 0e:fb:99:75:47:3f:18:e0:af:66:aa:7d:68:09:65: 26:ec:a6:91:cd:af:ef:db:39:14:b4:ce:6b:87:30: b1:b9:66:8c:f8:43:04:52:d3:62:cc:14:7b:0b:06: cb:95:56:02:46:47:a6:a1:b4:f1:2a:ab:e1:c9:30: bd:b9:bc:e2:b8:eb:b9:30:06:a1:d9:c4:b7:c4:fe: 5c:bb:2c:bb:7a:3c:78:48:eb:77:2d:eb:2e:80:f5: b9:17:08:9e:6c:55:62:87:d3:bf:46:e1:86:70:c3: 82:a3:45:91:2f:b1:2b:d1:31:4b:b8:1c:8b:9d:df: 6f:e5:45:06:4a:5a:5c:3a:fc:b5:7c:6e:cf:9b:86: 4c:6e:29:b1:90:a9:08:70:13:40:d7:c0:d0:79:0c: 28:4c:72:b2:ec:25:bd:20:f2:5b:04:ff:e8:78:6b: 36:a4:55:e4:ae:0a:57:96:ab:ed:86:79:a7:5a:e7: bb:52:e4:e3:e0:f3:4f:0a:74:38:76:18:74:51:6a: 31:3a:49:18:d9:41:f0:cb:e8:e3:63:65:e5:27:c6: 84:cf:03:8f:86:9d:42:cb:a3:b7:13:fc:3d:3a:de: 27:da:9d:c0:91:e2:ec:5c:a7:95:63:08:07:7b:fe: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:5A:7A:8C:7A:DD:5E:64:DB:8E:B2:7E:8C:D6:3F:D5:27:1B:E8 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.147.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:c0:85:55:f7:f6:f2:45:fb:26:e8:d6:00:63:c0:05:38:74: 39:f1:51:78:19:29:5b:04:51:cd:71:34:0b:f8:62:2f:a5:c0: eb:4d:a1:49:01:a8:bd:cb:a8:f8:62:37:0d:f6:f1:87:7d:5a: dd:47:11:0a:e5:ff:52:5b:3c:2a:02:08:f1:b4:16:20:9c:36: 01:84:e6:68:a7:72:1b:ae:e4:36:7d:09:6f:25:e3:ba:51:4d: 95:3d:75:a5:8f:a5:bd:78:62:29:4b:5c:f3:a3:e5:f9:56:cf: 88:73:3b:0c:35:c7:b5:5e:0c:56:b0:5c:18:a9:6e:45:c3:27: c0:93:0b:2f:b6:ea:76:6b:0a:fd:19:e5:6a:16:6a:56:d7:22: 25:85:a6:b1:81:4d:8a:79:f0:f4:f0:5a:76:b9:18:be:37:bd: b8:f3:25:d7:f7:81:98:62:cf:91:23:17:16:08:e5:d4:46:be: f6:79:09:54:be:ef:a9:c6:60:e6:8d:a9:4d:5a:ca:21:7c:11: d2:98:24:ac:a6:1e:0f:e5:ed:cf:f4:84:e3:79:83:18:0f:45: 6e:7c:61:70:7b:bd:7d:9f:ab:55:b5:69:e0:15:2c:40:db:b5: 38:a7:f8:07:26:85:80:2a:4b:ac:fc:61:02:e5:35:cd:da:25: 4c:b6:4e:f8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUcZfupqsPAkmZu+RbQY4P8t0kF08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTUxMDExNTFaFw0yNzEwMTQxMDE2NTFaMDMxMTAvBgNV BAMTKDIxNjk1QTdBOEM3QURENUU2NERCOEVCMjdFOENENjNGRDUyNzFCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPn0n2MtFmnjMxibNjg77mXVH Pxjgr2aqfWgJZSbsppHNr+/bORS0zmuHMLG5Zoz4QwRS02LMFHsLBsuVVgJGR6ah tPEqq+HJML25vOK467kwBqHZxLfE/ly7LLt6PHhI63ct6y6A9bkXCJ5sVWKH079G 4YZww4KjRZEvsSvRMUu4HIud32/lRQZKWlw6/LV8bs+bhkxuKbGQqQhwE0DXwNB5 DChMcrLsJb0g8lsE/+h4azakVeSuCleWq+2Geada57tS5OPg808KdDh2GHRRajE6 SRjZQfDL6ONjZeUnxoTPA4+GnULLo7cT/D063ifancCR4uxcp5VjCAd7/jflAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUIWlaeox63V5k246yfozWP9UnG+gwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTkwNTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtJMwDQYJKoZIhvcNAQELBQADggEBAIrAhVX39vJF+ybo1gBjwAU4 dDnxUXgZKVsEUc1xNAv4Yi+lwOtNoUkBqL3LqPhiNw328Yd9Wt1HEQrl/1JbPCoC CPG0FiCcNgGE5minchuu5DZ9CW8l47pRTZU9daWPpb14YilLXPOj5flWz4hzOww1 x7VeDFawXBipbkXDJ8CTCy+26nZrCv0Z5WoWalbXIiWFprGBTYp58PTwWna5GL43 vbjzJdf3gZhiz5EjFxYI5dRGvvZ5CVS+76nGYOaNqU1ayiF8EdKYJKymHg/l7c/0 hON5gxgPRW58YXB7vX2fq1W1aeAVLEDbtTin+AcmhYAqS6z8YQLlNc3aJUy2Tvg= -----END CERTIFICATE-----Generated at Tue Oct 20 11:14:42 2026 by rpki-client