$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS151407.roa File: AS151407.roa (raw, json) Hash identifier: 3IqFfVBnba4tfsTga5lp1xutKm9yrLjvGcHk/O7Gx3s= Subject key identifier: 6D:43:FC:2A:EC:F1:5A:A5:9E:64:99:89:76:8B:F5:F1:E4:7C:5A:4D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5503F039FBC9904F2C50E8522028417A9EE0DB93 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS151407.roa Signing time: Mon 05 Oct 2026 06:13:50 +0000 ROA not before: Mon 05 Oct 2026 06:08:50 +0000 ROA not after: Mon 04 Oct 2027 06:13:50 +0000 asID: 151407 IP address blocks: 109.66.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:03:f0:39:fb:c9:90:4f:2c:50:e8:52:20:28:41:7a:9e:e0:db:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:50 2026 GMT Not After : Oct 4 06:13:50 2027 GMT Subject: CN=6D43FC2AECF15AA59E649989768BF5F1E47C5A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:95:2f:7b:ee:33:0b:a1:8d:47:af:f3:2b: 48:77:e3:7c:ed:1b:04:67:4a:45:54:31:2e:bd:f8: b4:a7:3b:62:0b:9c:19:9b:4d:39:85:21:9f:8e:c0: 96:2b:ce:56:1d:66:3b:c0:4e:5e:a4:d4:13:91:9d: 98:fb:18:a0:91:78:62:17:1e:b1:98:c3:bf:b8:e6: d5:c4:70:d2:53:6e:b8:5d:24:6a:5e:1c:f9:c9:98: db:75:5f:9b:c9:f3:09:fa:74:64:f2:7d:34:ca:13: f8:31:7b:50:6e:75:20:b2:ed:57:d0:e3:5e:02:7c: 1d:98:51:ad:13:ae:eb:52:a0:9a:89:8b:5d:76:07: 0f:31:4f:60:48:2f:aa:c9:04:1a:dd:de:06:46:dd: f7:4b:07:ef:8e:a3:cc:bc:56:14:31:4b:a4:aa:76: b8:70:a1:2b:fe:20:c8:a6:1b:d5:80:b9:4d:64:e2: 68:ab:16:14:68:8b:d5:1d:47:28:98:e6:b7:c6:97: 2b:dd:fc:21:09:b3:cc:f9:19:2a:8a:35:89:d8:ce: c9:18:5b:8e:a0:9e:66:7d:0e:ce:06:d2:16:a5:a8: 9a:60:0a:c0:86:8a:e5:68:cd:c5:86:3f:e7:4f:b1: 9a:db:59:d2:ac:56:4d:80:5d:13:89:b3:d9:50:60: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:FC:2A:EC:F1:5A:A5:9E:64:99:89:76:8B:F5:F1:E4:7C:5A:4D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS151407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.99.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:7f:23:a3:77:84:65:9d:ce:ca:31:bc:55:9c:fa:6d:ae:bf: 26:3b:3e:67:24:91:fd:c3:2c:a6:ce:4d:54:03:68:d7:6f:b7: 5b:7d:60:eb:9c:04:40:ac:21:1c:11:16:2e:a2:ff:35:3a:5a: 55:77:94:82:f7:1b:61:9a:f3:14:33:50:fb:46:03:0f:a4:f9: 33:93:19:c2:b8:0b:a9:d5:22:ea:41:00:a1:af:5b:27:8f:4f: e3:04:0d:74:16:46:5d:e4:97:45:bf:29:9b:6c:c7:16:53:ea: 2b:39:85:a2:01:11:4e:e8:34:6a:ce:02:26:8b:92:bd:c6:02: 6d:ad:ae:77:1e:80:dd:ce:3a:f5:47:93:05:e0:ec:43:85:67: 7c:95:5f:c9:4d:ff:8c:82:c5:8b:23:89:84:c4:ed:8d:2e:5d: 30:c1:2c:e6:97:72:dd:dd:4a:4e:46:b3:a4:b1:18:c8:e8:94: 46:3d:b4:48:36:0f:0f:3c:2c:20:5f:4a:f4:f5:b7:e0:2f:06: 98:c0:e8:08:45:f5:6c:0c:1e:5a:56:7f:9f:d1:03:cd:ae:0d: fa:a5:61:1a:c6:d5:ed:15:23:85:46:dc:fa:b2:b6:5b:07:f2: 6f:11:9f:8f:55:89:86:6f:6a:7c:aa:2e:4a:01:a1:f9:a8:3b: 97:d1:9d:9c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUVQPwOfvJkE8sUOhSIChBep7g25MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NTBaFw0yNzEwMDQwNjEzNTBaMDMxMTAvBgNV BAMTKDZENDNGQzJBRUNGMTVBQTU5RTY0OTk4OTc2OEJGNUYxRTQ3QzVBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxpUve+4zC6GNR6/zK0h343zt GwRnSkVUMS69+LSnO2ILnBmbTTmFIZ+OwJYrzlYdZjvATl6k1BORnZj7GKCReGIX HrGYw7+45tXEcNJTbrhdJGpeHPnJmNt1X5vJ8wn6dGTyfTTKE/gxe1BudSCy7VfQ 414CfB2YUa0TrutSoJqJi112Bw8xT2BIL6rJBBrd3gZG3fdLB++Oo8y8VhQxS6Sq drhwoSv+IMimG9WAuU1k4mirFhRoi9UdRyiY5rfGlyvd/CEJs8z5GSqKNYnYzskY W46gnmZ9Ds4G0halqJpgCsCGiuVozcWGP+dPsZrbWdKsVk2AXROJs9lQYHo9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUbUP8KuzxWqWeZJmJdov18eR8Wk0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTE0MDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQmMwDQYJKoZIhvcNAQELBQADggEBAA1/I6N3hGWdzsoxvFWc+m2u vyY7Pmckkf3DLKbOTVQDaNdvt1t9YOucBECsIRwRFi6i/zU6WlV3lIL3G2Ga8xQz UPtGAw+k+TOTGcK4C6nVIupBAKGvWyePT+MEDXQWRl3kl0W/KZtsxxZT6is5haIB EU7oNGrOAiaLkr3GAm2trncegN3OOvVHkwXg7EOFZ3yVX8lN/4yCxYsjiYTE7Y0u XTDBLOaXct3dSk5Gs6SxGMjolEY9tEg2Dw88LCBfSvT1t+AvBpjA6AhF9WwMHlpW f5/RA82uDfqlYRrG1e0VI4VG3PqytlsH8m8Rn49ViYZvanyqLkoBofmoO5fRnZw= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:49 2026 by rpki-client