$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa File: AS142146.roa (raw, json) Hash identifier: sDaKLzsNEs7at5DUx2b4lMwFMaG2U3KuGp+G1wamacA= Subject key identifier: A8:18:DC:BB:E7:76:66:82:A6:45:58:92:2A:E0:07:AB:7E:78:29:C1 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 39377C9A020CD3124A2381477C0689A2C8157ACF Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa Signing time: Mon 05 Oct 2026 06:13:35 +0000 ROA not before: Mon 05 Oct 2026 06:08:35 +0000 ROA not after: Mon 04 Oct 2027 06:13:35 +0000 asID: 142146 IP address blocks: 109.66.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:37:7c:9a:02:0c:d3:12:4a:23:81:47:7c:06:89:a2:c8:15:7a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:35 2026 GMT Not After : Oct 4 06:13:35 2027 GMT Subject: CN=A818DCBBE7766682A64558922AE007AB7E7829C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:5f:d5:22:f6:cf:23:13:a6:4d:4b:65:1f: e9:21:12:f3:ef:3e:2c:5c:64:8e:52:f2:3f:08:36: 93:e9:f2:b2:14:39:fe:a6:bf:bf:9b:fe:db:bd:7b: ea:52:0e:bd:98:39:34:2a:49:7b:da:39:f2:0d:cb: f9:bf:7c:05:98:ea:d4:6b:d7:c3:ec:e0:e7:1d:53: af:b6:e1:b7:68:f7:4f:bf:11:34:3d:8f:b4:8a:b1: 72:d0:d9:18:3c:ea:11:ea:a2:17:12:93:b9:8f:a1: 1a:1d:e4:1f:d4:d9:b2:60:9e:9a:95:07:81:03:f1: 17:c7:2e:9d:9f:89:22:fc:d8:3c:ad:d8:28:04:9d: 47:ca:10:5a:e0:4d:cd:0e:0f:3a:6b:7e:22:54:80: 4f:ba:11:a2:95:66:2f:4e:2d:9d:1c:e4:b1:21:57: ae:c9:f4:c9:88:17:1b:a0:85:e1:a2:9d:21:15:5d: 09:ff:9e:01:0b:ca:ff:04:87:b6:85:8f:fa:72:bb: 75:c8:66:a7:c9:2e:4f:88:4b:aa:d2:97:cd:05:b9: 08:fb:ef:0e:14:39:99:29:6d:5e:5f:5e:fa:45:86: c2:2b:4a:ce:42:a2:ff:29:d2:0d:9d:85:97:81:cf: 18:2e:e7:f0:6e:31:43:88:f6:d4:7b:5e:17:01:64: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:18:DC:BB:E7:76:66:82:A6:45:58:92:2A:E0:07:AB:7E:78:29:C1 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.25.0/24 Signature Algorithm: sha256WithRSAEncryption 46:6c:3e:f3:a9:73:86:b0:1f:9b:01:ce:03:51:4a:c0:66:8f: 24:f0:2d:ee:15:18:5c:97:35:f1:c8:3f:b8:f8:92:c3:11:83: 77:a6:a2:53:f7:8d:96:ea:47:c0:cb:2f:22:1d:33:dd:f7:e4: 7c:1a:69:13:5d:98:70:fa:0e:55:7b:33:ca:d5:fd:c8:9b:c8: 38:54:2e:0d:6c:d7:28:d9:a9:79:3a:4e:85:5a:d7:44:53:a6: 6e:36:ee:da:7b:ae:71:13:13:be:16:42:29:d4:c0:23:db:1c: d3:73:dd:e1:81:bd:cc:f8:7e:b5:28:fd:4b:bd:fb:25:92:7d: 47:16:fe:56:8e:e6:16:64:b7:08:29:20:f6:29:9b:96:3f:95: ff:52:da:38:14:91:bb:d9:19:fd:6c:66:7f:0b:93:9d:52:21: d9:0e:07:1d:55:7b:76:26:8e:0e:4a:c2:c5:95:8e:1a:a0:29: fc:f1:d0:22:8d:00:d1:d0:1b:dd:a1:5f:27:f2:ff:bf:88:bc: cd:e3:d1:95:ef:5f:5f:bd:48:e6:24:b4:01:b8:bb:af:5a:15: 46:60:5f:71:51:ae:e7:a9:e7:3e:a1:5b:a7:ab:cf:f6:b0:30: 96:35:34:fd:b8:06:60:3f:1d:9c:3f:46:d8:c4:20:b3:51:96: 8e:29:fc:88 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUOTd8mgIM0xJKI4FHfAaJosgVes8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzVaFw0yNzEwMDQwNjEzMzVaMDMxMTAvBgNV BAMTKEE4MThEQ0JCRTc3NjY2ODJBNjQ1NTg5MjJBRTAwN0FCN0U3ODI5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqF/VIvbPIxOmTUtlH+khEvPv PixcZI5S8j8INpPp8rIUOf6mv7+b/tu9e+pSDr2YOTQqSXvaOfINy/m/fAWY6tRr 18Ps4OcdU6+24bdo90+/ETQ9j7SKsXLQ2Rg86hHqohcSk7mPoRod5B/U2bJgnpqV B4ED8RfHLp2fiSL82Dyt2CgEnUfKEFrgTc0ODzprfiJUgE+6EaKVZi9OLZ0c5LEh V67J9MmIFxugheGinSEVXQn/ngELyv8Eh7aFj/pyu3XIZqfJLk+IS6rSl80FuQj7 7w4UOZkpbV5fXvpFhsIrSs5Cov8p0g2dhZeBzxgu5/BuMUOI9tR7XhcBZLIFAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUqBjcu+d2ZoKmRViSKuAHq354KcEwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDIxNDYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQhkwDQYJKoZIhvcNAQELBQADggEBAEZsPvOpc4awH5sBzgNRSsBm jyTwLe4VGFyXNfHIP7j4ksMRg3emolP3jZbqR8DLLyIdM9335HwaaRNdmHD6DlV7 M8rV/cibyDhULg1s1yjZqXk6ToVa10RTpm427tp7rnETE74WQinUwCPbHNNz3eGB vcz4frUo/Uu9+yWSfUcW/laO5hZktwgpIPYpm5Y/lf9S2jgUkbvZGf1sZn8Lk51S IdkOBx1Ve3Ymjg5KwsWVjhqgKfzx0CKNANHQG92hXyfy/7+IvM3j0ZXvX1+9SOYk tAG4u69aFUZgX3FRruep5z6hW6erz/awMJY1NP24BmA/HZw/RtjEILNRlo4p/Ig= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:53 2026 by rpki-client