
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: RYgHX6/auzs2FGC3ermej9LBkf6wYE66xxIY9S6GSzI=
Subject key identifier: F5:2B:3B:8D:6F:BF:E0:BD:CD:D1:4D:9D:7C:70:53:96:8A:65:17:FC
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 05CD03BCCB71824EA3E25B5A2184AA71CF3CEF83
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219447.roa
Signing time: Thu 15 Oct 2026 10:16:06 +0000
ROA not before: Thu 15 Oct 2026 10:11:06 +0000
ROA not after: Thu 14 Oct 2027 10:16:06 +0000
asID: 219447
IP address blocks: 79.180.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 18:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cd:03:bc:cb:71:82:4e:a3:e2:5b:5a:21:84:aa:71:cf:3c:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 15 10:11:06 2026 GMT
Not After : Oct 14 10:16:06 2027 GMT
Subject: CN=F52B3B8D6FBFE0BDCDD14D9D7C7053968A6517FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:38:bf:da:b2:2f:7d:88:1b:66:ef:26:c6:
7f:85:69:d7:38:cf:cb:8d:ff:db:d6:0f:16:d4:79:
81:e4:1f:2b:ec:70:e6:34:47:10:d9:e4:6e:49:8c:
01:5c:05:d3:aa:4e:98:e7:d7:17:de:22:8b:c0:bf:
25:cf:49:8e:97:fd:66:df:2b:ec:5c:f3:96:77:21:
e9:5d:1b:36:8c:9e:52:2c:7d:ca:1a:81:0d:bc:a3:
be:7f:6c:f9:56:a4:21:b5:4b:fc:42:14:2e:2e:7c:
10:95:f2:6f:01:0e:fb:4f:c8:de:e9:f5:67:f0:65:
04:de:42:14:d0:de:e0:39:3b:6a:a2:6f:84:e4:2b:
70:ea:86:1b:cb:27:a1:c9:07:38:c6:b2:2a:86:2b:
e7:a4:0b:90:30:cf:79:f9:d3:6a:54:79:da:c1:9c:
41:7f:f3:93:86:df:32:89:f8:68:56:f7:44:9d:92:
9b:0f:17:f3:a9:98:a5:33:ed:88:46:ef:6b:78:ee:
09:86:71:aa:12:9f:ba:13:cb:4c:0a:d7:72:c4:b4:
9c:c6:c2:a4:48:03:44:86:5d:1d:33:e4:e7:78:4c:
28:be:4b:7e:1a:b8:cc:4f:32:4d:19:1a:fc:73:aa:
f8:36:bb:e0:aa:91:70:e7:b2:34:7f:a9:60:a7:3f:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:3B:8D:6F:BF:E0:BD:CD:D1:4D:9D:7C:70:53:96:8A:65:17:FC
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.147.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:09:8a:95:b6:91:49:3c:57:83:76:56:f5:43:3c:7d:1a:49:
a0:35:24:cc:49:22:00:1a:b7:8c:c9:13:d4:4e:bb:93:42:91:
74:69:f6:cf:d8:f4:8e:4b:f8:f7:57:b3:90:ab:16:a0:21:2b:
08:c0:a8:16:7d:b2:52:f7:e3:f6:28:ef:a5:25:29:f3:b4:36:
f7:08:dd:82:d1:1e:e5:94:60:8f:80:a8:cd:cf:42:30:c4:d2:
e9:82:40:a5:eb:f8:b9:92:b3:4b:6c:2d:3c:cc:fc:45:da:d9:
b6:56:2c:f8:68:57:94:17:9e:e0:f7:50:a2:c3:fb:a2:be:86:
95:62:d4:43:d0:fd:0b:de:5b:46:25:ce:49:bb:c1:f8:1d:ee:
4a:ef:fd:e9:cd:b4:b9:1f:43:03:7f:97:72:f2:b6:f1:17:b0:
be:e4:fa:9f:ee:44:d2:8b:4a:37:38:6d:1c:58:25:40:d2:23:
23:39:a1:f8:41:07:b0:3d:36:be:0e:06:be:eb:fc:4d:02:4e:
7d:03:87:5c:c5:ae:66:bf:83:25:e4:29:f6:e8:8d:ad:18:7e:
d7:e8:8a:47:f7:86:49:cd:c7:fa:07:25:19:35:40:11:fb:4c:
34:8e:a7:09:a8:52:a4:73:51:d1:50:cb:3d:df:6e:e8:29:e5:
5c:6a:5a:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:00:32 2026 by rpki-client