$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS133199.roa File: AS133199.roa (raw, json) Hash identifier: 7AaFX5W7AClUuIe2t0gXpKxKAtReY8tonti8xMHywjw= Subject key identifier: 05:4D:C0:18:4E:6E:7F:94:A9:D1:15:6A:B1:74:F4:D7:45:B1:44:19 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 28B2DC313935A083A2A8D84AE02B3DF4480A3AE8 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS133199.roa Signing time: Mon 05 Oct 2026 06:13:10 +0000 ROA not before: Mon 05 Oct 2026 06:08:10 +0000 ROA not after: Mon 04 Oct 2027 06:13:10 +0000 asID: 133199 IP address blocks: 109.66.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b2:dc:31:39:35:a0:83:a2:a8:d8:4a:e0:2b:3d:f4:48:0a:3a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:10 2026 GMT Not After : Oct 4 06:13:10 2027 GMT Subject: CN=054DC0184E6E7F94A9D1156AB174F4D745B14419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:52:3d:3c:e6:06:86:75:88:2a:3d:d9:b5: 97:c5:cf:e1:f4:3b:38:9c:8d:4b:08:a4:99:47:7c: 69:1f:7d:79:9a:e8:65:e4:dd:4e:b6:94:ca:6e:94: 0c:b8:c7:7f:fd:37:f2:a6:df:22:af:a7:8f:63:73: dc:c7:06:18:25:15:88:67:36:ce:f4:d5:9b:84:d2: ea:ef:3f:1e:59:c8:95:df:3c:36:6e:14:23:54:14: a9:f2:8c:be:da:85:45:dd:95:5e:05:65:c5:2f:74: 32:25:f6:e1:cf:5a:8a:d1:61:71:94:dc:f0:fd:f5: 60:9d:44:4e:79:ca:bd:c0:0b:c3:9e:1b:73:04:5e: ad:f8:3a:38:ce:79:3f:18:93:af:08:f2:81:01:86: 5c:4b:58:6a:e3:53:8a:a5:70:8d:32:a2:ed:18:20: 1f:21:bb:81:2d:50:9a:10:6e:28:cd:7d:64:7b:ab: 9a:d2:77:e1:02:67:f8:08:ae:c1:f3:d8:95:81:bc: 6a:2e:ee:41:14:39:96:64:a8:00:08:1b:ed:e7:b9: b9:eb:22:c5:9c:d8:05:f7:2a:48:7f:69:83:1f:88: 39:a8:70:18:6e:69:95:0f:90:c2:67:77:71:dc:25: 7b:4b:fc:33:51:2e:49:9f:36:79:2a:70:a0:08:ec: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:C0:18:4E:6E:7F:94:A9:D1:15:6A:B1:74:F4:D7:45:B1:44:19 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS133199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:71:3c:ce:2f:1c:9e:c1:b9:6a:26:e2:ab:7c:79:bf:de:a1: 44:c5:d8:47:f2:4d:91:f2:82:bb:f3:06:5c:42:9d:e5:58:38: df:a0:e1:ee:aa:01:f8:9c:4e:2b:c7:0f:69:cd:f6:64:74:ce: d0:6d:42:45:16:0d:bb:62:f8:72:a8:38:49:29:f7:24:6e:12: 97:3d:e9:71:43:c1:bd:5c:0b:32:8c:fd:25:72:b7:3f:f8:85: f6:a9:50:43:07:d2:a7:dd:37:f5:89:b4:90:3a:19:6c:ea:3e: 3f:27:25:47:02:5e:cd:72:a1:fb:a6:d2:b7:bc:f0:e8:ee:dd: b4:f1:d9:21:2d:37:fc:06:2a:6f:73:27:91:59:e2:de:89:85: 45:3b:f9:39:aa:13:b1:23:c3:ee:66:97:65:9c:f2:ea:1e:47: 29:d5:68:95:b3:dc:f4:9c:55:ab:61:9d:b4:1d:a1:cb:58:fe: 96:0f:45:38:af:d1:d5:6e:c4:52:61:7e:17:81:60:e3:f8:41: b9:d9:08:4e:0b:78:f1:23:26:64:ca:63:58:a4:db:c0:06:63: c4:86:99:7f:aa:82:5e:f2:47:16:78:bb:a5:9e:1d:ac:09:7c: 98:d5:63:5b:45:1a:bf:01:81:d5:49:da:2e:aa:68:31:1e:6c: 39:d7:96:9d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUKLLcMTk1oIOiqNhK4Cs99EgKOugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MTBaFw0yNzEwMDQwNjEzMTBaMDMxMTAvBgNV BAMTKDA1NERDMDE4NEU2RTdGOTRBOUQxMTU2QUIxNzRGNEQ3NDVCMTQ0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ5VI9POYGhnWIKj3ZtZfFz+H0 OzicjUsIpJlHfGkffXma6GXk3U62lMpulAy4x3/9N/Km3yKvp49jc9zHBhglFYhn Ns701ZuE0urvPx5ZyJXfPDZuFCNUFKnyjL7ahUXdlV4FZcUvdDIl9uHPWorRYXGU 3PD99WCdRE55yr3AC8OeG3MEXq34OjjOeT8Yk68I8oEBhlxLWGrjU4qlcI0you0Y IB8hu4EtUJoQbijNfWR7q5rSd+ECZ/gIrsHz2JWBvGou7kEUOZZkqAAIG+3nubnr IsWc2AX3Kkh/aYMfiDmocBhuaZUPkMJnd3HcJXtL/DNRLkmfNnkqcKAI7Ay9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUBU3AGE5uf5Sp0RVqsXT010WxRBkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzMxOTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBARtQnAwDQYJKoZIhvcNAQELBQADggEBAFxxPM4vHJ7BuWom4qt8eb/e oUTF2EfyTZHygrvzBlxCneVYON+g4e6qAficTivHD2nN9mR0ztBtQkUWDbti+HKo OEkp9yRuEpc96XFDwb1cCzKM/SVytz/4hfapUEMH0qfdN/WJtJA6GWzqPj8nJUcC Xs1yofum0re88Oju3bTx2SEtN/wGKm9zJ5FZ4t6JhUU7+TmqE7Ejw+5ml2Wc8uoe RynVaJWz3PScVathnbQdoctY/pYPRTiv0dVuxFJhfheBYOP4QbnZCE4LePEjJmTK Y1ik28AGY8SGmX+qgl7yRxZ4u6WeHawJfJjVY1tFGr8BgdVJ2i6qaDEebDnXlp0= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:44 2026 by rpki-client