$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142561.roa File: AS142561.roa (raw, json) Hash identifier: fbZk19bBsAK7Khkkz+MO9IqLd7E645UHWNYaOSEAaqk= Subject key identifier: F2:52:03:50:5C:40:FB:18:2C:D9:2D:97:B5:4B:AC:1C:CA:08:F3:E7 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4B8D72AFB3E0855EB3A2EEA2801152E0EB95F3CE Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142561.roa Signing time: Mon 05 Oct 2026 06:13:45 +0000 ROA not before: Mon 05 Oct 2026 06:08:45 +0000 ROA not after: Mon 04 Oct 2027 06:13:45 +0000 asID: 142561 IP address blocks: 109.66.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8d:72:af:b3:e0:85:5e:b3:a2:ee:a2:80:11:52:e0:eb:95:f3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:45 2026 GMT Not After : Oct 4 06:13:45 2027 GMT Subject: CN=F25203505C40FB182CD92D97B54BAC1CCA08F3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:af:4c:ca:57:02:3d:53:47:ad:cf:ff:16: fa:b3:ea:ae:b0:f1:22:d7:e2:3e:67:b5:fc:31:3f: 06:e2:5c:1d:5a:21:be:b2:63:b4:b5:c7:21:d1:d3: 95:6b:71:9b:26:77:c1:20:bb:1f:d4:f4:fe:83:cc: 2a:e7:15:48:0d:52:47:84:5d:62:30:55:fd:c8:db: 6e:ea:6c:a0:aa:15:d3:36:e2:6b:f5:be:ea:ba:bb: 47:a7:55:97:84:7e:9a:a8:7d:c4:58:59:6e:91:18: dd:29:f4:b6:3c:3a:0c:bc:17:8b:03:4f:2d:fd:4f: 6a:c8:6b:e0:44:15:27:c4:4e:e0:60:ae:42:6c:7d: 37:c2:bd:b6:5f:db:53:c3:e8:57:37:ae:1d:b1:4f: 84:22:a8:76:1e:68:5e:45:35:e3:bd:25:45:94:c5: 7a:43:9c:d0:a3:04:31:dc:39:02:2a:ab:5a:ea:79: 75:c1:c1:7f:cb:06:58:23:46:2a:6a:0c:fc:ac:d1: c3:75:d1:8e:ac:c9:46:c7:b3:83:33:f0:a9:5c:06: b7:7b:83:a7:b3:3a:fe:d3:17:d3:ce:32:bc:1a:8c: e0:20:b8:19:11:90:0e:d1:7f:d3:9f:2d:fc:33:d4: 07:43:bf:d2:d2:0e:f7:5a:8b:4a:3b:c5:d3:da:5a: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:03:50:5C:40:FB:18:2C:D9:2D:97:B5:4B:AC:1C:CA:08:F3:E7 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.71.0/24 Signature Algorithm: sha256WithRSAEncryption 60:2c:5f:65:d6:48:76:d4:7d:a3:8f:35:e6:7c:e3:02:d1:14: f3:c7:13:0b:44:b6:7c:92:3c:9d:e2:1f:25:a6:c6:42:e7:de: f0:35:d8:39:6a:b7:65:08:83:02:b6:38:88:83:21:96:e6:cb: f9:e5:b5:e1:94:39:7a:b0:f2:57:78:4b:c7:49:5b:3f:7c:5d: 2a:72:a4:67:2f:34:8a:93:01:91:e2:1b:61:5d:e6:41:43:2e: db:2a:10:1a:d9:0d:8f:f4:e9:24:25:18:72:cb:b0:2c:1a:33: 2e:2b:54:a0:d1:60:63:5f:9d:50:88:ab:1a:12:e8:b7:f9:b6: d8:9e:33:b4:d9:e8:b6:93:9f:cf:f9:eb:9c:eb:64:e9:95:2d: 03:99:36:ce:6b:12:0e:0c:ea:06:f4:70:9f:f5:52:a8:75:33: 4e:28:fd:6c:9d:45:80:e5:eb:00:3e:5e:43:86:18:1b:29:14: 79:ec:e5:73:e1:0e:91:7c:4c:ab:4a:58:45:e4:64:d3:e6:ae: 2f:de:77:40:a5:60:5f:40:7e:dd:99:3d:30:3e:d9:8a:e4:0e: bd:d9:f0:f0:27:51:10:df:aa:f5:1d:37:ee:d9:98:fe:e7:ec: ab:73:3e:3a:21:10:43:1b:1f:bb:14:2e:db:12:a4:a4:40:4f: 59:bb:aa:10 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUS41yr7PghV6zou6igBFS4OuV884wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDVaFw0yNzEwMDQwNjEzNDVaMDMxMTAvBgNV BAMTKEYyNTIwMzUwNUM0MEZCMTgyQ0Q5MkQ5N0I1NEJBQzFDQ0EwOEYzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TK9MylcCPVNHrc//Fvqz6q6w 8SLX4j5ntfwxPwbiXB1aIb6yY7S1xyHR05VrcZsmd8Egux/U9P6DzCrnFUgNUkeE XWIwVf3I227qbKCqFdM24mv1vuq6u0enVZeEfpqofcRYWW6RGN0p9LY8Ogy8F4sD Ty39T2rIa+BEFSfETuBgrkJsfTfCvbZf21PD6Fc3rh2xT4QiqHYeaF5FNeO9JUWU xXpDnNCjBDHcOQIqq1rqeXXBwX/LBlgjRipqDPys0cN10Y6syUbHs4Mz8KlcBrd7 g6ezOv7TF9POMrwajOAguBkRkA7Rf9OfLfwz1AdDv9LSDvdai0o7xdPaWhRjAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU8lIDUFxA+xgs2S2XtUusHMoI8+cwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDI1NjEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQkcwDQYJKoZIhvcNAQELBQADggEBAGAsX2XWSHbUfaOPNeZ84wLR FPPHEwtEtnySPJ3iHyWmxkLn3vA12Dlqt2UIgwK2OIiDIZbmy/nlteGUOXqw8ld4 S8dJWz98XSpypGcvNIqTAZHiG2Fd5kFDLtsqEBrZDY/06SQlGHLLsCwaMy4rVKDR YGNfnVCIqxoS6Lf5ttieM7TZ6LaTn8/565zrZOmVLQOZNs5rEg4M6gb0cJ/1Uqh1 M04o/WydRYDl6wA+XkOGGBspFHns5XPhDpF8TKtKWEXkZNPmri/ed0ClYF9Aft2Z PTA+2YrkDr3Z8PAnURDfqvUdN+7ZmP7n7KtzPjohEEMbH7sULtsSpKRAT1m7qhA= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:13 2026 by rpki-client