$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: GvfzGGVQxuTc3g7kXSE2obxLN0F4pCqkggv6IZzXHFw= Subject key identifier: 14:2B:57:3B:A9:69:2E:D1:CA:DF:31:0A:4C:2B:CA:4F:73:05:1E:93 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 038AEA2CCD8B1A97BEBB449ABA09C2EBA180E4AB Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa Signing time: Mon 05 Oct 2026 06:13:40 +0000 ROA not before: Mon 05 Oct 2026 06:08:40 +0000 ROA not after: Mon 04 Oct 2027 06:13:40 +0000 asID: 147281 IP address blocks: 79.176.4.0/24 maxlen: 24 79.180.8.0/24 maxlen: 24 79.182.10.0/24 maxlen: 24 79.182.11.0/24 maxlen: 24 79.183.3.0/24 maxlen: 24 109.64.4.0/24 maxlen: 24 109.65.1.0/24 maxlen: 24 109.65.2.0/24 maxlen: 24 109.66.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8a:ea:2c:cd:8b:1a:97:be:bb:44:9a:ba:09:c2:eb:a1:80:e4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:40 2026 GMT Not After : Oct 4 06:13:40 2027 GMT Subject: CN=142B573BA9692ED1CADF310A4C2BCA4F73051E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:48:e5:67:e7:90:34:1a:6d:1d:22:de:04: 9f:8a:15:c2:3e:50:b1:0d:b6:ae:9b:05:fe:69:dc: 0a:66:77:cf:e6:94:43:e9:cc:7c:ae:44:f7:68:b1: cd:90:1a:d7:12:83:a0:b3:09:e1:4b:25:51:8e:34: e8:00:51:f3:ff:84:ab:f5:e9:09:86:85:d4:3a:17: 20:2c:a9:0e:a2:42:a5:d0:02:e9:da:0b:6c:23:3a: 8f:22:8f:97:64:4f:73:24:18:f9:38:29:36:98:03: 67:0e:d9:19:65:a2:9c:98:ff:e8:f4:e4:ed:45:ea: ea:4c:9a:d8:9d:c9:1c:4c:a4:00:80:55:76:58:29: cc:d0:3c:99:0c:9e:f0:53:a1:a1:19:3b:5b:a7:ff: d9:53:9e:1a:57:24:d0:d8:4e:95:2e:4a:f0:b8:3e: b2:aa:4d:70:16:d8:40:ff:52:99:3a:bb:ba:0f:43: d9:1e:b4:89:7c:60:07:1c:74:5e:6b:02:92:3b:8c: b2:c0:0f:d0:dc:e6:43:b0:68:56:98:98:78:02:e8: e6:9a:97:aa:39:45:30:36:c6:73:4f:3c:d5:5d:82: ae:98:75:86:66:c9:45:8d:a7:4f:7e:ab:7b:49:e8: e2:27:5a:de:86:84:08:64:29:40:65:a2:8d:45:d6: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2B:57:3B:A9:69:2E:D1:CA:DF:31:0A:4C:2B:CA:4F:73:05:1E:93 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.4.0/24 79.180.8.0/24 79.182.10.0/23 79.183.3.0/24 109.64.4.0/24 109.65.1.0-109.65.2.255 109.66.42.0/24 Signature Algorithm: sha256WithRSAEncryption b3:82:98:46:3a:d0:e9:85:23:02:cf:4e:c4:bd:5a:f8:5d:c2: b7:83:65:f1:b4:e4:18:6a:90:57:0b:1d:87:b6:b4:62:1a:6b: 8e:67:88:aa:59:3c:e0:16:7d:fc:9d:02:3f:8c:da:c6:10:1a: 86:ca:ae:08:80:04:c2:28:fc:2a:04:6c:c6:f6:cd:ab:57:9d: c9:a1:0b:96:84:29:87:d0:e4:e4:d4:a7:80:2c:d1:2f:a1:b6: 53:bb:54:7e:97:5e:e6:cd:39:41:be:52:f2:20:46:6d:6a:d9: e2:65:2b:0e:84:24:eb:a8:f8:b6:30:05:6f:f3:62:ca:61:37: dd:8e:59:33:9b:ca:7d:ef:d3:4a:66:4f:91:2f:e4:44:15:06: e9:8c:39:36:25:26:2a:06:66:04:bc:48:8a:52:da:d1:8a:5a: ae:07:51:9b:cb:3c:0d:75:e8:24:0e:69:07:6f:57:79:83:a3: e3:33:bd:cd:63:b2:d6:a4:18:d6:c0:3c:cb:b8:70:c9:cd:ac: 55:d4:59:20:94:87:7b:c5:b3:87:ac:00:c1:8d:58:82:55:71: b2:72:66:e7:f9:c2:23:96:a4:74:e2:f9:aa:eb:6f:f8:c2:1f: a0:76:8b:a6:d1:0b:bc:c4:c9:18:1b:5b:65:6f:ff:1b:45:99: f1:44:84:d6 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUA4rqLM2LGpe+u0SaugnC66GA5KswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDBaFw0yNzEwMDQwNjEzNDBaMDMxMTAvBgNV BAMTKDE0MkI1NzNCQTk2OTJFRDFDQURGMzEwQTRDMkJDQTRGNzMwNTFFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AUjlZ+eQNBptHSLeBJ+KFcI+ ULENtq6bBf5p3Apmd8/mlEPpzHyuRPdosc2QGtcSg6CzCeFLJVGONOgAUfP/hKv1 6QmGhdQ6FyAsqQ6iQqXQAunaC2wjOo8ij5dkT3MkGPk4KTaYA2cO2RllopyY/+j0 5O1F6upMmtidyRxMpACAVXZYKczQPJkMnvBToaEZO1un/9lTnhpXJNDYTpUuSvC4 PrKqTXAW2ED/Upk6u7oPQ9ketIl8YAccdF5rApI7jLLAD9Dc5kOwaFaYmHgC6Oaa l6o5RTA2xnNPPNVdgq6YdYZmyUWNp09+q3tJ6OInWt6GhAhkKUBloo1F1h49AgMB AAGjggJxMIICbTAdBgNVHQ4EFgQUFCtXO6lpLtHK3zEKTCvKT3MFHpMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MDgE AgABMDIDBABPsAQDBABPtAgDBAFPtgoDBABPtwMDBABtQAQwDAMEAG1BAQMEAG1B AgMEAG1CKjANBgkqhkiG9w0BAQsFAAOCAQEAs4KYRjrQ6YUjAs9OxL1a+F3Ct4Nl 8bTkGGqQVwsdh7a0YhprjmeIqlk84BZ9/J0CP4zaxhAahsquCIAEwij8KgRsxvbN q1edyaELloQph9Dk5NSngCzRL6G2U7tUfpde5s05Qb5S8iBGbWrZ4mUrDoQk66j4 tjAFb/NiymE33Y5ZM5vKfe/TSmZPkS/kRBUG6Yw5NiUmKgZmBLxIilLa0YpargdR m8s8DXXoJA5pB29XeYOj4zO9zWOy1qQY1sA8y7hwyc2sVdRZIJSHe8Wzh6wAwY1Y glVxsnJm5/nCI5akdOL5qutv+MIfoHaLptELvMTJGBtbZW//G0WZ8USE1g== -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:57 2026 by rpki-client