$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152626.roa File: AS152626.roa (raw, json) Hash identifier: nrRJXf8VVbxdur138wsDTtQiGyMp1BbAgv64kMdSPIg= Subject key identifier: 1D:A4:58:DB:D0:5A:0F:0C:81:ED:06:57:AF:E1:0C:37:82:EA:FC:13 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 25C770956637F282BD140DA7BBA6EDFA3E0E6DCB Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152626.roa Signing time: Fri 16 Oct 2026 00:59:55 +0000 ROA not before: Fri 16 Oct 2026 00:54:55 +0000 ROA not after: Fri 15 Oct 2027 00:59:55 +0000 asID: 152626 IP address blocks: 109.65.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c7:70:95:66:37:f2:82:bd:14:0d:a7:bb:a6:ed:fa:3e:0e:6d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 16 00:54:55 2026 GMT Not After : Oct 15 00:59:55 2027 GMT Subject: CN=1DA458DBD05A0F0C81ED0657AFE10C3782EAFC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:d7:7d:69:dc:53:46:3b:69:06:95:b1:b3: cf:e2:67:2a:5e:d6:57:d2:5a:0d:d5:7b:66:94:e2: 19:d8:b7:f5:f8:dd:c9:e8:6d:3a:7e:10:56:b8:8f: cd:b4:9d:03:f8:14:34:c9:af:a9:a5:8a:cb:42:1e: 9b:1f:15:50:fd:e1:d7:f4:bf:8f:95:54:33:d6:ae: 50:c0:db:89:19:48:e1:43:97:aa:09:b2:4e:ba:dd: 4e:79:0c:88:6d:69:05:1f:11:b2:a5:14:91:49:fc: 4d:a9:0d:4e:16:97:96:49:4a:98:b9:be:1c:81:e9: 78:b6:7b:7c:ec:a3:90:88:38:8c:42:f5:db:6e:ba: 01:13:c0:ac:75:79:84:79:db:40:f1:4c:6f:60:cc: 1d:1e:7e:55:76:7b:92:33:90:2a:a8:7a:1b:98:2d: 7e:9b:d5:da:c9:43:c5:4e:f4:a1:2f:a9:69:4f:40: cf:8d:59:4c:10:a3:b7:c7:3c:90:8b:b5:5c:d5:70: 84:ec:64:96:66:4b:a3:f5:9a:cd:65:1f:2f:91:20: 8a:d1:16:20:96:b1:b4:24:ad:21:2c:34:f0:7f:87: 2c:c7:76:df:e9:96:0c:01:e0:fa:9e:59:6b:61:96: 25:8a:18:74:49:dc:79:21:78:71:18:bc:73:f0:ed: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A4:58:DB:D0:5A:0F:0C:81:ED:06:57:AF:E1:0C:37:82:EA:FC:13 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152626.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.65.0/24 Signature Algorithm: sha256WithRSAEncryption a4:b4:35:80:38:ee:78:39:43:b2:80:84:51:d8:cb:64:8e:51: 36:2c:7c:2e:78:d9:af:a5:aa:77:a8:46:65:aa:35:21:72:c9: 5b:cc:7e:68:8d:f1:cb:ec:77:73:2f:0c:44:1d:d5:26:72:f6: a4:ac:81:a1:49:6b:70:a0:f1:81:87:13:16:4e:61:7c:4e:f5: 9c:c6:69:62:75:4b:23:6c:11:66:12:44:15:b7:7b:5f:be:90: 75:6c:d9:1e:3e:db:01:2c:c0:38:67:ab:bd:c5:72:e3:28:4b: 2f:53:59:0d:9d:28:ef:e8:2e:df:93:0d:36:71:37:3a:6a:ef: 51:4f:cb:9e:1b:51:88:41:1b:79:50:57:a9:75:d4:42:c4:6b: 8a:ca:8b:de:7f:ec:78:a3:dc:a6:f1:41:4b:34:51:32:a5:86: 06:a4:bd:2e:d5:fc:68:7c:da:f4:f3:40:a2:e6:e6:d6:0c:2f: cc:92:d0:76:2e:7b:bf:d8:8c:4f:a8:9c:14:c9:34:6b:89:68: 03:21:aa:a1:b1:41:27:75:09:a0:04:fa:5d:44:d0:f9:b6:6f: 40:d7:3b:6d:4a:bf:66:70:83:61:3e:06:2f:5d:d6:8c:05:6a: 06:e6:c5:50:e4:18:2d:f3:40:1f:92:01:01:a2:2f:ca:e1:90: d3:51:f2:bc -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUJcdwlWY38oK9FA2nu6bt+j4ObcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTYwMDU0NTVaFw0yNzEwMTUwMDU5NTVaMDMxMTAvBgNV BAMTKDFEQTQ1OERCRDA1QTBGMEM4MUVEMDY1N0FGRTEwQzM3ODJFQUZDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSp9d9adxTRjtpBpWxs8/iZype 1lfSWg3Ve2aU4hnYt/X43cnobTp+EFa4j820nQP4FDTJr6mlistCHpsfFVD94df0 v4+VVDPWrlDA24kZSOFDl6oJsk663U55DIhtaQUfEbKlFJFJ/E2pDU4Wl5ZJSpi5 vhyB6Xi2e3zso5CIOIxC9dtuugETwKx1eYR520DxTG9gzB0eflV2e5IzkCqoehuY LX6b1drJQ8VO9KEvqWlPQM+NWUwQo7fHPJCLtVzVcITsZJZmS6P1ms1lHy+RIIrR FiCWsbQkrSEsNPB/hyzHdt/plgwB4PqeWWthliWKGHRJ3HkheHEYvHPw7W5vAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUHaRY29BaDwyB7QZXr+EMN4Lq/BMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTI2MjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQUEwDQYJKoZIhvcNAQELBQADggEBAKS0NYA47ng5Q7KAhFHYy2SO UTYsfC542a+lqneoRmWqNSFyyVvMfmiN8cvsd3MvDEQd1SZy9qSsgaFJa3Cg8YGH ExZOYXxO9ZzGaWJ1SyNsEWYSRBW3e1++kHVs2R4+2wEswDhnq73FcuMoSy9TWQ2d KO/oLt+TDTZxNzpq71FPy54bUYhBG3lQV6l11ELEa4rKi95/7Hij3KbxQUs0UTKl hgakvS7V/Gh82vTzQKLm5tYML8yS0HYue7/YjE+onBTJNGuJaAMhqqGxQSd1CaAE +l1E0Pm2b0DXO21Kv2Zwg2E+Bi9d1owFagbmxVDkGC3zQB+SAQGiL8rhkNNR8rw= -----END CERTIFICATE-----Generated at Wed Oct 28 13:01:53 2026 by rpki-client