$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS139874.roa File: AS139874.roa (raw, json) Hash identifier: c8emWN4sgVc8A+D5JeQKtJzQVLruS1TjkWHacPF69r4= Subject key identifier: 11:B9:6B:53:AD:3B:6F:4A:05:01:DE:DC:2D:4E:25:3C:F5:F0:81:26 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 750A34421594C6DAC718587A838C1F84601D0E37 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS139874.roa Signing time: Mon 05 Oct 2026 06:13:29 +0000 ROA not before: Mon 05 Oct 2026 06:08:29 +0000 ROA not after: Mon 04 Oct 2027 06:13:29 +0000 asID: 139874 IP address blocks: 109.66.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0a:34:42:15:94:c6:da:c7:18:58:7a:83:8c:1f:84:60:1d:0e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:29 2026 GMT Not After : Oct 4 06:13:29 2027 GMT Subject: CN=11B96B53AD3B6F4A0501DEDC2D4E253CF5F08126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:8c:f9:2c:ae:0b:22:47:5b:e3:65:e4:09: f0:15:69:a8:ce:1f:01:63:c3:17:a4:63:93:40:61: 7e:6c:0a:53:0a:04:fa:f5:24:e1:6d:ff:c8:59:f5: 73:03:c3:25:c1:17:88:15:c4:66:fa:f4:f4:b2:6e: f8:0e:85:9f:fd:1d:d2:15:7a:85:5d:46:6c:0d:db: 35:c8:db:fb:4f:b8:99:84:c1:47:74:3c:a9:52:eb: 40:1b:7e:f6:eb:7a:39:c1:02:05:18:19:ea:d8:a5: 28:c5:36:6a:5e:16:b3:23:a8:47:c3:4d:a2:9d:03: 37:f5:c4:45:a7:d6:e5:16:91:1a:5b:b9:01:83:75: 5f:ae:8b:02:00:28:cf:fe:8f:c8:a0:af:ab:70:5d: a4:82:5f:07:d4:36:10:3a:02:5a:a3:1a:0e:d1:0a: 8f:5a:c2:9d:e1:eb:e5:5e:06:ee:72:1c:5d:eb:bf: a8:09:25:aa:0d:e3:a9:27:0e:d5:50:8d:15:51:67: 93:2e:50:50:ee:a8:f9:b9:25:e0:78:79:df:13:23: f3:29:3b:71:17:d3:ee:57:50:21:c4:84:22:7e:6a: 88:69:c3:b2:be:3c:b2:0c:d1:1e:c8:1c:15:05:e9: 3f:b9:e7:4a:2c:5b:92:df:ca:d9:d2:4b:15:f0:c5: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:6B:53:AD:3B:6F:4A:05:01:DE:DC:2D:4E:25:3C:F5:F0:81:26 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS139874.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.22.0/23 Signature Algorithm: sha256WithRSAEncryption 19:8d:d0:c1:aa:71:1f:28:72:7c:59:1b:4a:16:1e:a0:30:1d: 98:55:44:45:4e:e8:61:ed:15:a1:02:80:c8:c4:dc:21:d0:84: d5:e2:09:c0:88:f3:7d:c4:22:6c:36:17:37:75:35:aa:27:96: 14:e2:5f:72:1e:17:cb:69:fb:4c:30:37:16:d8:51:23:4f:34: 39:60:94:96:ee:3b:ba:1d:74:57:f0:84:0e:36:fc:31:52:99: f8:05:40:5b:b6:3e:06:56:ea:0c:36:b6:0b:4e:97:71:71:1d: 07:36:f2:76:ff:9e:64:0e:ba:ae:61:85:d2:3b:ec:1b:20:1e: f1:ed:64:0b:f3:5b:fb:b1:69:96:4a:1e:ae:64:38:75:fd:b9: b8:5d:d1:f5:97:59:5f:1f:31:2e:b8:61:82:dc:1b:34:5e:64: 16:bf:ff:0d:ed:f4:a5:48:b3:c1:52:4e:0f:67:d5:c4:47:aa: b1:5c:81:9a:97:1d:57:b7:a9:fe:f1:63:6b:43:6d:e4:ac:fd: b9:68:e7:e1:51:d7:ea:5a:42:07:df:74:b7:ae:9f:1c:56:14: 8a:6c:52:09:6c:2c:1d:5a:f3:fc:d2:d0:f8:f1:3b:ff:b8:b8: cc:8d:11:b1:40:99:0a:c5:0c:d8:97:64:f9:0f:de:84:ec:0b: 3f:b6:a9:9b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUdQo0QhWUxtrHGFh6g4wfhGAdDjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MjlaFw0yNzEwMDQwNjEzMjlaMDMxMTAvBgNV BAMTKDExQjk2QjUzQUQzQjZGNEEwNTAxREVEQzJENEUyNTNDRjVGMDgxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36Iz5LK4LIkdb42XkCfAVaajO HwFjwxekY5NAYX5sClMKBPr1JOFt/8hZ9XMDwyXBF4gVxGb69PSybvgOhZ/9HdIV eoVdRmwN2zXI2/tPuJmEwUd0PKlS60AbfvbrejnBAgUYGerYpSjFNmpeFrMjqEfD TaKdAzf1xEWn1uUWkRpbuQGDdV+uiwIAKM/+j8igr6twXaSCXwfUNhA6AlqjGg7R Co9awp3h6+VeBu5yHF3rv6gJJaoN46knDtVQjRVRZ5MuUFDuqPm5JeB4ed8TI/Mp O3EX0+5XUCHEhCJ+aohpw7K+PLIM0R7IHBUF6T+550osW5LfytnSSxXwxVjnAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUEblrU607b0oFAd7cLU4lPPXwgSYwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzk4NzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQhYwDQYJKoZIhvcNAQELBQADggEBABmN0MGqcR8ocnxZG0oWHqAw HZhVREVO6GHtFaECgMjE3CHQhNXiCcCI833EImw2Fzd1NaonlhTiX3IeF8tp+0ww NxbYUSNPNDlglJbuO7oddFfwhA42/DFSmfgFQFu2PgZW6gw2tgtOl3FxHQc28nb/ nmQOuq5hhdI77BsgHvHtZAvzW/uxaZZKHq5kOHX9ubhd0fWXWV8fMS64YYLcGzRe ZBa//w3t9KVIs8FSTg9n1cRHqrFcgZqXHVe3qf7xY2tDbeSs/blo5+FR1+paQgff dLeunxxWFIpsUglsLB1a8/zS0PjxO/+4uMyNEbFAmQrFDNiXZPkP3oTsCz+2qZs= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:49 2026 by rpki-client