$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152179.roa File: AS152179.roa (raw, json) Hash identifier: CTKqdTtuKp5FhmEOFF1i6RskBeO92LHEHk4FbCqf5Co= Subject key identifier: B4:3B:F4:B3:0B:F1:AA:95:4A:AF:7F:D1:A9:6D:76:94:5B:CE:D3:81 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0CAD2C7133B2D8F66C6D12835642E488E1EAEE30 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152179.roa Signing time: Mon 05 Oct 2026 06:13:45 +0000 ROA not before: Mon 05 Oct 2026 06:08:45 +0000 ROA not after: Mon 04 Oct 2027 06:13:45 +0000 asID: 152179 IP address blocks: 79.180.108.0/24 maxlen: 24 109.66.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ad:2c:71:33:b2:d8:f6:6c:6d:12:83:56:42:e4:88:e1:ea:ee:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:45 2026 GMT Not After : Oct 4 06:13:45 2027 GMT Subject: CN=B43BF4B30BF1AA954AAF7FD1A96D76945BCED381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:bf:69:a5:0a:bb:36:15:d2:62:df:32:4a: 2b:85:3b:f0:91:0d:c7:c2:bf:bc:a1:4d:f9:1c:96: 35:3a:e0:b4:e3:17:4e:e9:21:70:91:b6:6c:55:f7: 74:d0:e6:90:bd:e5:8b:12:b9:6e:7e:ce:66:2e:80: 2f:cf:d1:a1:d7:52:97:1c:54:a2:70:f1:ce:8d:a1: 4a:fa:cb:71:86:2f:23:f8:aa:33:15:21:81:6b:aa: 96:3c:54:e9:8f:74:c2:fb:e3:d3:30:52:b9:84:41: dd:90:63:f6:9d:4c:93:44:74:5d:4a:e5:30:0b:ec: 56:b4:f5:b1:b4:db:74:1b:1e:c0:9b:45:4c:59:4e: 05:d8:64:68:7b:d7:6a:6b:78:11:6b:c0:46:33:d0: ce:e4:9a:9c:3c:7d:89:15:c9:08:8c:2f:38:db:07: d3:99:ac:92:b6:a4:64:54:d8:41:21:0e:21:af:ee: 10:91:e8:35:a3:73:c7:2d:47:55:9d:e0:be:47:1e: 6b:cd:97:45:db:6b:a9:55:c0:2e:0f:7d:2a:d5:39: dd:79:d8:86:bf:aa:ee:60:14:19:2b:00:46:5c:2d: 9e:d9:96:fa:f4:da:f6:7c:12:92:b3:0a:36:18:71: 47:cb:07:14:a2:73:d0:d6:b7:e6:2c:9b:78:d4:a1: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:F4:B3:0B:F1:AA:95:4A:AF:7F:D1:A9:6D:76:94:5B:CE:D3:81 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152179.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.108.0/24 109.66.70.0/24 Signature Algorithm: sha256WithRSAEncryption bd:ed:1a:27:89:e0:1e:3d:a3:f7:e8:ec:64:3b:16:0b:ae:f5: ce:f0:41:bd:52:1c:8d:34:2d:d3:02:1e:59:d0:b6:0a:06:3d: b0:59:05:f9:11:3a:0d:63:e2:6b:fe:50:d0:ce:26:94:35:7b: 7e:fe:34:9e:54:15:16:c1:ee:8c:1c:c5:8b:fe:c8:67:e2:a5: e1:16:1b:4b:f5:3f:cb:55:d1:ad:de:6d:b7:70:7c:e7:81:3e: 30:7e:91:75:6f:d8:f8:65:6f:37:dc:4b:76:ec:ec:a7:1d:90: 11:cd:cf:06:c2:02:ed:77:53:6d:64:6e:db:aa:c0:6e:b3:12: 41:99:7b:66:33:03:37:81:5d:39:99:4c:97:f0:58:db:24:c5: 65:a7:07:3f:c2:c0:76:06:be:ee:06:be:2f:4a:e7:76:32:24: 3a:e1:b3:96:f4:1d:64:a8:dd:37:18:c3:28:59:7c:2e:e8:5a: f0:7d:cc:dd:dc:e1:88:0e:17:e3:80:8d:06:eb:c9:e5:73:31: 40:fc:1d:db:79:22:a5:18:71:4f:c6:de:ec:cd:71:68:f2:0f: ee:10:19:0a:d3:3e:13:87:5f:cf:f7:a6:31:5e:e3:7a:37:c8: fe:11:a6:19:9d:ee:7b:4b:5d:53:50:bc:1b:ca:24:1f:52:3a: 7b:bc:8d:e8 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUDK0scTOy2PZsbRKDVkLkiOHq7jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDVaFw0yNzEwMDQwNjEzNDVaMDMxMTAvBgNV BAMTKEI0M0JGNEIzMEJGMUFBOTU0QUFGN0ZEMUE5NkQ3Njk0NUJDRUQzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXL9ppQq7NhXSYt8ySiuFO/CR DcfCv7yhTfkcljU64LTjF07pIXCRtmxV93TQ5pC95YsSuW5+zmYugC/P0aHXUpcc VKJw8c6NoUr6y3GGLyP4qjMVIYFrqpY8VOmPdML749MwUrmEQd2QY/adTJNEdF1K 5TAL7Fa09bG023QbHsCbRUxZTgXYZGh712preBFrwEYz0M7kmpw8fYkVyQiMLzjb B9OZrJK2pGRU2EEhDiGv7hCR6DWjc8ctR1Wd4L5HHmvNl0Xba6lVwC4PfSrVOd15 2Ia/qu5gFBkrAEZcLZ7Zlvr02vZ8EpKzCjYYcUfLBxSic9DWt+Ysm3jUoTaLAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUtDv0swvxqpVKr3/RqW12lFvO04EwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTIxNzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABPtGwDBABtQkYwDQYJKoZIhvcNAQELBQADggEBAL3tGieJ4B49o/fo 7GQ7Fguu9c7wQb1SHI00LdMCHlnQtgoGPbBZBfkROg1j4mv+UNDOJpQ1e37+NJ5U FRbB7owcxYv+yGfipeEWG0v1P8tV0a3ebbdwfOeBPjB+kXVv2PhlbzfcS3bs7Kcd kBHNzwbCAu13U21kbtuqwG6zEkGZe2YzAzeBXTmZTJfwWNskxWWnBz/CwHYGvu4G vi9K53YyJDrhs5b0HWSo3TcYwyhZfC7oWvB9zN3c4YgOF+OAjQbryeVzMUD8Hdt5 IqUYcU/G3uzNcWjyD+4QGQrTPhOHX8/3pjFe43o3yP4Rphmd7ntLXVNQvBvKJB9S Onu8jeg= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:52 2026 by rpki-client