$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS42689.roa File: AS42689.roa (raw, json) Hash identifier: ZluSKBk/buUoNn2EKs54Uti9lJKnbowBz8H0vGLfVCE= Subject key identifier: 03:C1:49:CD:4F:CD:7E:53:18:AD:15:38:3E:4D:AA:52:20:7F:2A:13 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7A063B660C41D6026072F11CABEC9E681CD8CCC1 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS42689.roa Signing time: Thu 15 Oct 2026 07:23:16 +0000 ROA not before: Thu 15 Oct 2026 07:18:16 +0000 ROA not after: Thu 14 Oct 2027 07:23:16 +0000 asID: 42689 IP address blocks: 109.65.113.0/24 maxlen: 24 109.65.167.0/24 maxlen: 24 109.65.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:06:3b:66:0c:41:d6:02:60:72:f1:1c:ab:ec:9e:68:1c:d8:cc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 15 07:18:16 2026 GMT Not After : Oct 14 07:23:16 2027 GMT Subject: CN=03C149CD4FCD7E5318AD15383E4DAA52207F2A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:64:1a:e1:3e:90:a1:6f:6f:0e:e4:38:8c: 7d:18:00:d7:f4:75:a3:7a:d5:de:52:22:fc:5e:fb: 3e:3c:0a:98:ff:64:10:55:25:00:d3:9c:1c:63:58: 2e:6e:53:ac:1b:6a:fe:25:69:f0:b8:ac:3f:35:f2: 95:ab:0e:7f:c9:e4:27:4b:43:98:7b:3e:69:60:ac: f5:5a:0e:43:57:c3:cb:3d:a2:6b:b7:88:62:5c:0f: a2:85:98:df:52:dd:9e:91:c5:5f:7c:4d:10:a1:0a: 16:4a:55:b7:ac:7b:03:d4:a5:bf:57:3b:46:4b:86: a3:0d:6f:a1:cd:5f:1b:10:12:ec:19:49:94:de:cd: 78:e4:a0:24:af:d9:f1:5c:b4:67:f3:ab:0b:00:f2: b5:d3:40:21:45:fa:8c:83:f0:5d:b5:f9:e1:d9:36: 51:3f:ea:0d:67:fe:62:5d:6a:8c:10:81:a0:50:6f: b4:e0:7d:9c:9b:86:fc:a0:bb:c8:e5:54:74:73:b5: 52:d8:8e:68:e6:bb:61:4f:45:59:16:6c:bc:8b:c9: 2b:9f:60:89:e4:d5:ee:3a:60:19:e0:21:3b:1c:d8: 65:03:5f:73:83:7a:ad:cf:ab:07:eb:f7:64:61:ea: f7:04:12:f9:62:1b:ab:6c:74:fd:4d:c8:13:2e:9b: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C1:49:CD:4F:CD:7E:53:18:AD:15:38:3E:4D:AA:52:20:7F:2A:13 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS42689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.113.0/24 109.65.167.0/24 109.65.190.0/24 Signature Algorithm: sha256WithRSAEncryption 35:77:6a:a4:2e:91:ab:07:be:92:26:04:5b:69:ec:d3:d9:95: 5d:65:a8:d3:e5:91:49:a1:4c:ab:72:05:56:6f:23:81:ca:c7: 79:81:15:c8:85:af:e3:0a:c6:de:8b:ef:2e:27:32:56:9e:cb: 5c:fd:6d:8a:8d:3e:86:12:50:be:aa:1a:5f:e2:40:7e:47:aa: 05:ff:7c:f8:f9:27:16:b8:7d:52:1c:21:c2:33:d9:ef:98:12: 98:26:3e:67:5c:b8:fa:17:8c:d6:2d:47:99:be:8c:ba:b1:d0: 0c:a3:31:7d:7d:4e:7f:bb:99:57:74:d1:bb:1e:7d:6e:ce:45: fc:99:93:cc:68:ed:16:36:4e:3a:b2:6e:46:c9:0d:cc:8c:dc: 2f:14:a5:87:65:72:93:2c:61:50:7d:ae:b0:b7:92:09:d9:da: 5b:fa:a8:ab:c3:93:49:c1:09:ec:6a:1b:c5:f3:70:b8:de:96: ac:98:fe:23:21:12:a8:ce:69:1c:33:a8:ac:03:f9:89:fe:5b: b8:e4:fd:b1:71:3d:c4:cc:bf:5e:61:14:f9:35:c2:db:12:9f: bc:11:42:09:01:74:fd:52:25:49:25:5f:50:3b:32:39:60:58: a6:2b:58:ea:76:3d:55:c2:12:95:96:fe:9c:e4:b4:e9:2b:aa: 9b:37:e7:29 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUegY7ZgxB1gJgcvEcq+yeaBzYzMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTUwNzE4MTZaFw0yNzEwMTQwNzIzMTZaMDMxMTAvBgNV BAMTKDAzQzE0OUNENEZDRDdFNTMxOEFEMTUzODNFNERBQTUyMjA3RjJBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPGQa4T6QoW9vDuQ4jH0YANf0 daN61d5SIvxe+z48Cpj/ZBBVJQDTnBxjWC5uU6wbav4lafC4rD818pWrDn/J5CdL Q5h7PmlgrPVaDkNXw8s9omu3iGJcD6KFmN9S3Z6RxV98TRChChZKVbesewPUpb9X O0ZLhqMNb6HNXxsQEuwZSZTezXjkoCSv2fFctGfzqwsA8rXTQCFF+oyD8F21+eHZ NlE/6g1n/mJdaowQgaBQb7TgfZybhvygu8jlVHRztVLYjmjmu2FPRVkWbLyLySuf YInk1e46YBngITsc2GUDX3ODeq3Pqwfr92Rh6vcEEvliG6tsdP1NyBMum4VBAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUA8FJzU/NflMYrRU4Pk2qUiB/KhMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MjY4OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAG1BcQMEAG1BpwMEAG1BvjANBgkqhkiG9w0BAQsFAAOCAQEANXdqpC6R qwe+kiYEW2ns09mVXWWo0+WRSaFMq3IFVm8jgcrHeYEVyIWv4wrG3ovvLicyVp7L XP1tio0+hhJQvqoaX+JAfkeqBf98+PknFrh9UhwhwjPZ75gSmCY+Z1y4+heM1i1H mb6MurHQDKMxfX1Of7uZV3TRux59bs5F/JmTzGjtFjZOOrJuRskNzIzcLxSlh2Vy kyxhUH2usLeSCdnaW/qoq8OTScEJ7GobxfNwuN6WrJj+IyESqM5pHDOorAP5if5b uOT9sXE9xMy/XmEU+TXC2xKfvBFCCQF0/VIlSSVfUDsyOWBYpitY6nY9VcISlZb+ nOS06SuqmzfnKQ== -----END CERTIFICATE-----Generated at Mon Oct 19 20:58:24 2026 by rpki-client