$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135392.roa File: AS135392.roa (raw, json) Hash identifier: 4qz+3c0VowIr4O7OX9DLjpuHltmJVWQG32Q7GKYitEM= Subject key identifier: 81:F9:E4:7A:AB:1B:E9:79:72:85:A6:1A:41:CD:35:86:75:7A:86:6F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 117CC3901E994AC5D4C9B2FFFC713977626ADC0A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135392.roa Signing time: Mon 05 Oct 2026 06:13:20 +0000 ROA not before: Mon 05 Oct 2026 06:08:20 +0000 ROA not after: Mon 04 Oct 2027 06:13:20 +0000 asID: 135392 IP address blocks: 79.182.16.0/24 maxlen: 24 109.66.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7c:c3:90:1e:99:4a:c5:d4:c9:b2:ff:fc:71:39:77:62:6a:dc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:20 2026 GMT Not After : Oct 4 06:13:20 2027 GMT Subject: CN=81F9E47AAB1BE9797285A61A41CD3586757A866F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:ff:c8:db:7e:22:3d:f6:d8:c2:28:69:6b: 49:01:c2:43:d1:04:26:74:56:a1:a8:8e:15:4c:c6: 5d:34:86:f6:7f:bc:d1:f1:f5:cb:c9:69:9e:9b:99: a2:f8:61:9a:92:ef:0f:5b:4d:d3:d8:9f:55:d9:66: 31:92:51:f7:eb:68:1f:a5:73:da:2a:c4:30:d3:93: 5c:71:a7:c9:d8:56:a4:46:07:53:99:eb:48:2c:a9: e6:4f:4b:a5:06:cf:c6:a8:45:f8:85:48:8d:50:a1: 1a:fc:e1:4b:0d:a4:1c:d9:a1:3e:53:08:f0:02:dd: 94:c9:d1:66:a7:d0:6b:6f:fa:f5:00:e5:3d:63:7c: c6:d0:bf:17:73:29:6c:f1:a4:b5:a6:ab:ee:d1:65: 58:8d:93:c3:25:75:6d:c2:20:91:91:88:f8:69:e1: 42:ce:bd:e7:8b:d7:72:7f:88:c1:6f:c2:9e:a8:a7: a4:ff:0f:9a:dd:72:75:ca:40:f4:7c:02:2d:2e:11: 18:78:6a:ec:eb:52:bc:f5:81:26:6b:be:f9:b6:01: ad:4e:c5:23:5a:76:f8:f0:3f:aa:1c:ea:89:29:ab: 05:53:b3:a8:93:ea:6b:6f:41:0d:41:7b:d2:da:ee: f1:96:38:cd:24:63:f1:a7:ba:af:32:e0:f7:60:f9: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:E4:7A:AB:1B:E9:79:72:85:A6:1A:41:CD:35:86:75:7A:86:6F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.16.0/24 109.66.178.0/24 Signature Algorithm: sha256WithRSAEncryption 73:d4:19:c8:75:34:16:0c:24:e1:cb:04:af:3a:64:71:fd:4d: 9a:b4:a0:87:ca:da:a0:5b:3f:fe:8f:c6:64:71:76:79:ea:40: 01:18:26:21:0d:d5:8d:24:0d:5f:27:a3:ab:a6:52:7a:2b:ad: ed:c1:c1:a7:05:2d:ed:f8:f9:e1:d0:76:ad:40:10:16:cc:58: 11:27:74:98:c7:7b:0c:02:6d:ca:66:93:8f:66:42:32:a5:47: 39:2e:c3:7a:0d:23:c0:21:fd:7f:f1:88:9e:b6:ea:8a:fc:68: b7:29:dc:d9:a8:05:d3:8f:dd:c1:ba:8c:c0:bc:7d:13:c1:b4: 73:92:01:3b:8b:c7:24:50:0e:64:60:5d:e6:f1:96:1d:ba:b7: 4b:e2:10:e3:e3:12:4d:5c:8b:a0:33:e8:a0:ca:45:25:d2:fe: 7a:4a:57:d6:00:5d:e0:42:ee:0c:84:06:c8:9f:e1:5d:2c:be: 40:bf:3f:ef:6e:f6:d3:25:4a:6d:05:d4:03:0d:aa:fc:1d:58: 47:4f:18:71:e5:92:68:60:af:f8:37:a3:ec:b5:ef:0f:98:a2: ea:fd:bb:a2:be:68:56:e9:c8:33:66:00:1e:9d:04:65:bf:63: a7:34:7f:f4:50:e6:57:a1:29:ab:3d:44:17:1a:01:71:a3:f7: a5:02:db:b6 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUEXzDkB6ZSsXUybL//HE5d2Jq3AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MjBaFw0yNzEwMDQwNjEzMjBaMDMxMTAvBgNV BAMTKDgxRjlFNDdBQUIxQkU5Nzk3Mjg1QTYxQTQxQ0QzNTg2NzU3QTg2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83v/I234iPfbYwihpa0kBwkPR BCZ0VqGojhVMxl00hvZ/vNHx9cvJaZ6bmaL4YZqS7w9bTdPYn1XZZjGSUffraB+l c9oqxDDTk1xxp8nYVqRGB1OZ60gsqeZPS6UGz8aoRfiFSI1QoRr84UsNpBzZoT5T CPAC3ZTJ0Wan0Gtv+vUA5T1jfMbQvxdzKWzxpLWmq+7RZViNk8MldW3CIJGRiPhp 4ULOveeL13J/iMFvwp6op6T/D5rdcnXKQPR8Ai0uERh4auzrUrz1gSZrvvm2Aa1O xSNadvjwP6oc6okpqwVTs6iT6mtvQQ1Be9La7vGWOM0kY/Gnuq8y4Pdg+e4ZAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUgfnkeqsb6XlyhaYaQc01hnV6hm8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzUzOTIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABPthADBABtQrIwDQYJKoZIhvcNAQELBQADggEBAHPUGch1NBYMJOHL BK86ZHH9TZq0oIfK2qBbP/6PxmRxdnnqQAEYJiEN1Y0kDV8no6umUnorre3BwacF Le34+eHQdq1AEBbMWBEndJjHewwCbcpmk49mQjKlRzkuw3oNI8Ah/X/xiJ626or8 aLcp3NmoBdOP3cG6jMC8fRPBtHOSATuLxyRQDmRgXebxlh26t0viEOPjEk1ci6Az 6KDKRSXS/npKV9YAXeBC7gyEBsif4V0svkC/P+9u9tMlSm0F1AMNqvwdWEdPGHHl kmhgr/g3o+y17w+Your9u6K+aFbpyDNmAB6dBGW/Y6c0f/RQ5lehKas9RBcaAXGj 96UC27Y= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:04 2026 by rpki-client