$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402509.roa File: AS402509.roa (raw, json) Hash identifier: NIDZpNWCzVQey2dNSTb+PvSd8Uzt/9Mk34RJ1gSsPl0= Subject key identifier: 1A:BA:92:5C:43:E9:90:80:F2:29:4B:B0:96:AA:3C:9A:23:D0:3D:25 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 056A1D6B415F280B023F3B57742A894B06961644 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402509.roa Signing time: Mon 19 Oct 2026 15:39:53 +0000 ROA not before: Mon 19 Oct 2026 15:34:53 +0000 ROA not after: Mon 18 Oct 2027 15:39:53 +0000 asID: 402509 IP address blocks: 109.65.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Oct 2026 02:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6a:1d:6b:41:5f:28:0b:02:3f:3b:57:74:2a:89:4b:06:96:16:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 19 15:34:53 2026 GMT Not After : Oct 18 15:39:53 2027 GMT Subject: CN=1ABA925C43E99080F2294BB096AA3C9A23D03D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:37:72:1b:07:2b:df:e5:75:5e:11:18:38: c0:46:08:f6:74:da:a7:f7:1e:97:53:63:15:46:3c: 29:71:57:f3:b1:09:b3:1f:ed:7a:0e:04:0f:63:4a: a6:43:03:18:63:af:e9:52:42:a7:18:d7:8e:ad:08: ed:3d:eb:24:3d:e3:08:52:b5:6a:78:be:1a:6b:b9: 77:ca:3f:79:0f:0c:9d:89:3b:ef:98:15:1e:e5:d7: 7f:13:bd:07:28:22:ae:19:ef:0d:31:9a:36:e8:39: 48:45:07:6f:a3:dd:85:3d:f3:cc:57:7b:81:9b:f5: 71:c2:24:2a:69:8e:42:11:d1:0c:c3:7f:50:72:32: c7:96:b9:68:91:72:90:1a:70:3d:73:6d:33:a2:39: 7e:9f:e6:cd:03:3c:c3:16:4a:44:1c:a5:57:31:a6: 0b:9f:1b:7d:18:26:9c:94:09:a5:a7:74:44:2d:75: ee:8b:cc:02:4d:07:f7:67:e3:d6:44:88:7c:1a:76: 4a:4f:76:82:b6:37:87:49:99:53:fc:61:6c:4e:eb: 9e:f3:c9:54:6a:77:81:10:86:63:35:0e:51:3c:ff: 2b:8c:a9:8a:f4:21:1a:2d:22:07:ba:ac:0c:b8:70: c3:c1:ef:a8:22:27:87:6c:70:4a:31:16:b9:f0:41: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:92:5C:43:E9:90:80:F2:29:4B:B0:96:AA:3C:9A:23:D0:3D:25 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.130.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:05:0c:e4:a9:e7:e6:8f:28:f9:2b:98:02:e3:0e:8a:d0:47: 50:35:13:49:f5:4f:f9:22:69:c0:15:75:33:c7:49:0d:05:b0: be:22:9d:b3:98:f2:ba:6b:f3:89:41:0a:00:cd:24:4e:ac:91: 25:bf:d8:28:3f:c9:f8:c9:02:0b:fc:67:ee:fe:87:d9:83:5b: a9:71:bc:d2:ca:e5:3b:26:6c:76:68:d6:0d:05:0b:64:71:8e: 3d:59:76:77:c2:9a:ea:cb:b5:3d:59:3b:d8:04:82:58:38:c8: dd:cc:65:18:db:4a:73:17:2f:59:50:3d:56:13:c2:90:9a:36: 00:ae:e7:97:71:b2:40:df:98:65:f8:0e:80:9e:5a:b5:90:1b: 31:27:11:50:84:62:ca:36:56:71:9e:14:19:8b:44:34:31:56: 5f:ae:63:df:34:d9:5a:b1:e6:12:5a:11:66:43:1f:e6:ff:e0: 30:7e:16:3a:55:bf:a3:5a:c9:ec:71:fd:0a:0e:f8:28:dd:8e: fe:63:cb:50:01:6e:99:ba:6a:28:fd:9a:7b:c1:93:cd:32:2d: 7b:e1:30:8e:f0:c6:f7:eb:c7:a8:ca:1d:31:a1:25:0f:46:d7: 91:fc:33:d2:a2:b3:a8:34:8c:2e:49:79:80:7b:fb:ec:91:e4: 5d:10:fb:58 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUBWoda0FfKAsCPztXdCqJSwaWFkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTkxNTM0NTNaFw0yNzEwMTgxNTM5NTNaMDMxMTAvBgNV BAMTKDFBQkE5MjVDNDNFOTkwODBGMjI5NEJCMDk2QUEzQzlBMjNEMDNEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUujdyGwcr3+V1XhEYOMBGCPZ0 2qf3HpdTYxVGPClxV/OxCbMf7XoOBA9jSqZDAxhjr+lSQqcY146tCO096yQ94whS tWp4vhpruXfKP3kPDJ2JO++YFR7l138TvQcoIq4Z7w0xmjboOUhFB2+j3YU988xX e4Gb9XHCJCppjkIR0QzDf1ByMseWuWiRcpAacD1zbTOiOX6f5s0DPMMWSkQcpVcx pgufG30YJpyUCaWndEQtde6LzAJNB/dn49ZEiHwadkpPdoK2N4dJmVP8YWxO657z yVRqd4EQhmM1DlE8/yuMqYr0IRotIge6rAy4cMPB76giJ4dscEoxFrnwQVmjAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUGrqSXEPpkIDyKUuwlqo8miPQPSUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDI1MDkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQYIwDQYJKoZIhvcNAQELBQADggEBAE4FDOSp5+aPKPkrmALjDorQ R1A1E0n1T/kiacAVdTPHSQ0FsL4inbOY8rpr84lBCgDNJE6skSW/2Cg/yfjJAgv8 Z+7+h9mDW6lxvNLK5TsmbHZo1g0FC2Rxjj1ZdnfCmurLtT1ZO9gEglg4yN3MZRjb SnMXL1lQPVYTwpCaNgCu55dxskDfmGX4DoCeWrWQGzEnEVCEYso2VnGeFBmLRDQx Vl+uY9802Vqx5hJaEWZDH+b/4DB+FjpVv6Nayexx/QoO+Cjdjv5jy1ABbpm6aij9 mnvBk80yLXvhMI7wxvfrx6jKHTGhJQ9G15H8M9Kis6g0jC5JeYB7++yR5F0Q+1g= -----END CERTIFICATE-----Generated at Fri Oct 30 14:57:40 2026 by rpki-client