$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS148996.roa File: AS148996.roa (raw, json) Hash identifier: RwzPungWgbtpzUb0krJzmoqGSB16rpyE37OSgPqeCoo= Subject key identifier: 1A:05:DA:BB:C0:D3:7A:20:CB:6C:CE:37:26:B9:6C:13:C4:5D:89:E3 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4FDBFFC84AAB63C4BEE8E73DF622729C0A2862FB Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS148996.roa Signing time: Mon 05 Oct 2026 06:12:01 +0000 ROA not before: Mon 05 Oct 2026 06:07:01 +0000 ROA not after: Mon 04 Oct 2027 06:12:01 +0000 asID: 148996 IP address blocks: 79.182.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:db:ff:c8:4a:ab:63:c4:be:e8:e7:3d:f6:22:72:9c:0a:28:62:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:01 2026 GMT Not After : Oct 4 06:12:01 2027 GMT Subject: CN=1A05DABBC0D37A20CB6CCE3726B96C13C45D89E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:0d:cc:e3:c9:8f:97:d5:b7:62:46:8b:80: 19:e3:86:e2:86:b3:5a:92:42:cf:19:b8:a5:11:01: d0:36:25:40:ae:71:1f:7b:27:3b:15:1d:02:3e:d3: 31:2b:3f:83:19:7b:20:30:0a:af:c7:2e:c9:75:37: 93:bf:b1:13:b2:c1:36:81:e0:bd:ee:fb:9e:46:fc: 03:88:ef:97:66:0c:d8:6f:65:49:7a:52:4d:fa:f4: 09:8a:23:8e:37:bb:ce:24:4e:51:37:52:6b:dc:65: 72:47:f9:b7:b2:e4:af:80:c0:e6:1c:55:ec:fd:34: 26:99:0a:3d:54:c6:a8:1c:3e:c7:28:b4:d7:ce:32: 29:48:1d:5a:05:20:c4:ab:98:70:7f:96:4b:01:60: 1f:c4:76:94:46:de:cd:c1:a9:82:b2:82:7c:0c:03: d7:32:cd:a8:fb:63:52:a4:f0:c2:65:9d:d8:25:a7: 86:c0:b4:af:dd:ef:e9:10:4e:32:07:f8:71:9f:01: f8:d0:57:99:06:bd:8f:84:ab:58:8e:0e:5b:10:64: c4:31:76:a2:ba:51:e3:56:e2:84:a4:f5:d9:ab:0b: dc:a7:e6:86:06:0d:35:4c:e9:e9:eb:a3:e6:32:87: 85:9d:05:1b:83:57:2a:c2:c3:26:0c:c5:a7:98:9a: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:05:DA:BB:C0:D3:7A:20:CB:6C:CE:37:26:B9:6C:13:C4:5D:89:E3 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS148996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.19.0/24 Signature Algorithm: sha256WithRSAEncryption 30:d2:e8:5d:3c:5b:82:23:89:d9:00:dd:55:9d:99:20:00:4c: 15:12:7a:d7:49:8d:3f:a7:d3:b8:fe:f5:5b:95:74:58:32:39: b8:3d:84:ee:d8:e6:cb:66:fc:27:27:af:b6:e8:04:64:b4:e6: c8:f3:83:d2:9e:74:d2:03:e6:29:64:06:2b:3d:b9:8b:3e:fc: d5:3d:bd:a6:ad:93:b0:0b:4e:70:2a:0d:c6:41:d5:13:d7:f5: 80:a6:59:f7:61:70:12:86:89:5a:20:ef:46:08:6b:a2:54:ae: 9c:c4:b9:69:f5:c9:0c:e7:9d:16:97:ea:f0:0c:7b:0a:26:42: 94:c7:31:39:69:08:55:d8:e5:95:8f:7f:40:ae:39:d0:c1:1b: 7a:42:1b:de:3f:c7:ca:43:e4:cf:9f:68:0a:a1:06:0f:41:6d: 87:35:b9:64:63:39:5c:ef:30:5a:b6:34:6d:d9:8d:73:02:e4: a6:73:51:04:e9:83:54:92:d1:01:25:cb:df:ea:9f:f4:d5:96: 11:ff:20:b2:54:5d:c6:c9:79:7e:c6:d9:ec:c6:68:17:f3:55: 39:34:5b:33:ac:7c:98:ab:20:ea:9e:e8:c1:5f:6c:1b:f8:25: 32:42:e4:ba:79:aa:d5:08:70:4e:2a:b1:27:b3:7b:34:25:16: dc:e3:1e:71 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUT9v/yEqrY8S+6Oc99iJynAooYvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3MDFaFw0yNzEwMDQwNjEyMDFaMDMxMTAvBgNV BAMTKDFBMDVEQUJCQzBEMzdBMjBDQjZDQ0UzNzI2Qjk2QzEzQzQ1RDg5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoA3M48mPl9W3YkaLgBnjhuKG s1qSQs8ZuKURAdA2JUCucR97JzsVHQI+0zErP4MZeyAwCq/HLsl1N5O/sROywTaB 4L3u+55G/AOI75dmDNhvZUl6Uk369AmKI443u84kTlE3UmvcZXJH+bey5K+AwOYc Vez9NCaZCj1UxqgcPscotNfOMilIHVoFIMSrmHB/lksBYB/EdpRG3s3BqYKygnwM A9cyzaj7Y1Kk8MJlndglp4bAtK/d7+kQTjIH+HGfAfjQV5kGvY+Eq1iODlsQZMQx dqK6UeNW4oSk9dmrC9yn5oYGDTVM6enro+Yyh4WdBRuDVyrCwyYMxaeYmon9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUGgXau8DTeiDLbM43JrlsE8RdieMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDg5OTYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPthMwDQYJKoZIhvcNAQELBQADggEBADDS6F08W4IjidkA3VWdmSAA TBUSetdJjT+n07j+9VuVdFgyObg9hO7Y5stm/Ccnr7boBGS05sjzg9KedNID5ilk Bis9uYs+/NU9vaatk7ALTnAqDcZB1RPX9YCmWfdhcBKGiVog70YIa6JUrpzEuWn1 yQznnRaX6vAMewomQpTHMTlpCFXY5ZWPf0CuOdDBG3pCG94/x8pD5M+faAqhBg9B bYc1uWRjOVzvMFq2NG3ZjXMC5KZzUQTpg1SS0QEly9/qn/TVlhH/ILJUXcbJeX7G 2ezGaBfzVTk0WzOsfJirIOqe6MFfbBv4JTJC5Lp5qtUIcE4qsSezezQlFtzjHnE= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:31 2026 by rpki-client