$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137409.roa File: AS137409.roa (raw, json) Hash identifier: KpE6op4BAqArSjHMopB14JO48dLLJYdXxBYBfZrfEgA= Subject key identifier: D6:57:58:37:D0:A1:B3:E7:56:D4:46:EA:73:9A:EE:E7:3E:86:A2:77 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 032CBB804F5E8DD282E43B0A5A60D8D9365D2AE0 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137409.roa Signing time: Mon 05 Oct 2026 06:13:13 +0000 ROA not before: Mon 05 Oct 2026 06:08:13 +0000 ROA not after: Mon 04 Oct 2027 06:13:13 +0000 asID: 137409 IP address blocks: 109.66.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2c:bb:80:4f:5e:8d:d2:82:e4:3b:0a:5a:60:d8:d9:36:5d:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:13 2026 GMT Not After : Oct 4 06:13:13 2027 GMT Subject: CN=D6575837D0A1B3E756D446EA739AEEE73E86A277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:50:c4:5e:e2:0b:86:93:c9:78:07:69:f7:64: 49:5b:c9:de:39:8a:ec:21:a6:2b:6d:3e:9d:25:e5: 43:d6:86:d0:96:c2:80:49:c5:75:c9:7b:3e:70:34: 63:44:d7:9b:33:87:aa:21:91:ba:4e:04:0b:40:df: 26:26:a1:57:da:c5:eb:2f:1e:6d:11:11:84:88:dc: 8f:d1:77:db:85:2c:19:30:fb:c1:3a:7f:6c:9f:af: 52:b2:89:a2:d5:21:d2:18:7e:7f:13:2e:9a:5d:95: 43:92:e2:7f:51:c4:b9:aa:51:1f:40:43:7c:8e:b2: 52:ca:ea:39:18:26:8e:6a:8c:77:39:a2:02:f0:51: e4:43:e8:e6:b0:4f:93:0a:b8:6d:15:a4:8d:a6:3c: 1d:c3:60:e0:4e:f5:92:26:dc:fc:59:ee:ba:03:65: 8d:10:b0:bc:88:b4:56:64:83:fe:d5:3a:98:ba:21: 64:80:70:20:ec:9d:27:c8:40:83:f7:4a:2c:30:0d: f1:d9:9d:e2:a1:1e:88:cc:1f:e8:6d:34:2d:21:4c: 1f:0f:10:06:d2:62:c9:37:e4:16:72:25:b7:b7:8f: b4:9f:38:29:80:35:9c:84:89:7c:f1:1b:7b:ae:b4: da:d2:bc:49:c3:33:e0:b6:33:25:95:8a:47:54:0e: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:58:37:D0:A1:B3:E7:56:D4:46:EA:73:9A:EE:E7:3E:86:A2:77 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS137409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.138.0/24 Signature Algorithm: sha256WithRSAEncryption 00:1c:50:83:0b:c8:2b:13:6b:38:ab:3c:57:38:0a:5c:bc:d6: b9:d8:c7:2a:a9:16:e9:bd:e2:e5:45:0b:b8:df:3d:0e:61:be: a3:66:91:71:db:19:8c:39:07:6f:2b:6d:26:eb:46:5a:91:f0: fa:f8:c7:c1:26:85:a3:8b:f5:13:30:46:bd:47:04:96:a9:c7: 7d:69:9e:3c:43:66:73:86:db:7d:46:69:b0:45:ee:51:31:5a: ea:53:4b:86:59:61:38:b1:84:29:f4:4b:04:89:64:eb:02:fd: f4:a6:41:68:f8:7f:98:4d:d4:19:9a:81:c9:63:74:bf:c9:5f: a0:5e:ad:b7:4c:34:86:33:1b:2c:54:bb:17:17:14:52:be:44: 40:cf:c3:f9:8c:52:f8:b2:a6:53:65:22:88:71:83:ea:cd:fd: ee:88:c8:62:3b:4f:44:a8:24:e4:d1:30:3a:c7:aa:6c:5c:0a: 64:f0:9c:af:dc:ad:77:a5:f1:cf:ef:54:fe:55:5a:72:9a:62: 0f:58:19:8e:4e:01:75:67:76:b5:0e:4e:03:26:7c:8a:b6:fc: 00:42:59:94:bf:f9:5a:02:93:79:7e:fa:d4:3f:37:38:28:b2: 97:6f:50:94:b2:9c:7c:45:8f:82:c9:09:51:82:4b:2e:0e:9b: 16:29:e5:f8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUAyy7gE9ejdKC5DsKWmDY2TZdKuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MTNaFw0yNzEwMDQwNjEzMTNaMDMxMTAvBgNV BAMTKEQ2NTc1ODM3RDBBMUIzRTc1NkQ0NDZFQTczOUFFRUU3M0U4NkEyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSUMRe4guGk8l4B2n3ZElbyd45 iuwhpittPp0l5UPWhtCWwoBJxXXJez5wNGNE15szh6ohkbpOBAtA3yYmoVfaxesv Hm0REYSI3I/Rd9uFLBkw+8E6f2yfr1KyiaLVIdIYfn8TLppdlUOS4n9RxLmqUR9A Q3yOslLK6jkYJo5qjHc5ogLwUeRD6OawT5MKuG0VpI2mPB3DYOBO9ZIm3PxZ7roD ZY0QsLyItFZkg/7VOpi6IWSAcCDsnSfIQIP3SiwwDfHZneKhHojMH+htNC0hTB8P EAbSYsk35BZyJbe3j7SfOCmANZyEiXzxG3uutNrSvEnDM+C2MyWVikdUDnirAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU1ldYN9Chs+dW1Ebqc5ru5z6GoncwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzc0MDkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQoowDQYJKoZIhvcNAQELBQADggEBAAAcUIMLyCsTazirPFc4Cly8 1rnYxyqpFum94uVFC7jfPQ5hvqNmkXHbGYw5B28rbSbrRlqR8Pr4x8EmhaOL9RMw Rr1HBJapx31pnjxDZnOG231GabBF7lExWupTS4ZZYTixhCn0SwSJZOsC/fSmQWj4 f5hN1BmagcljdL/JX6BerbdMNIYzGyxUuxcXFFK+REDPw/mMUviyplNlIohxg+rN /e6IyGI7T0SoJOTRMDrHqmxcCmTwnK/crXel8c/vVP5VWnKaYg9YGY5OAXVndrUO TgMmfIq2/ABCWZS/+VoCk3l++tQ/NzgospdvUJSynHxFj4LJCVGCSy4OmxYp5fg= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:48 2026 by rpki-client