$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152726.roa File: AS152726.roa (raw, json) Hash identifier: 0/RDPPKMmvfHJVADAvSM/X2wt7MbVTf9/aDdvm1dZHg= Subject key identifier: 53:C4:92:75:6D:43:A0:45:C2:32:48:A0:93:3A:D1:32:6D:A1:ED:02 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1FE4946E208F75DB3D22FB14B1BC8881F88F5F17 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152726.roa Signing time: Fri 09 Oct 2026 18:12:59 +0000 ROA not before: Fri 09 Oct 2026 18:07:59 +0000 ROA not after: Fri 08 Oct 2027 18:12:59 +0000 asID: 152726 IP address blocks: 79.180.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 10:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e4:94:6e:20:8f:75:db:3d:22:fb:14:b1:bc:88:81:f8:8f:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 9 18:07:59 2026 GMT Not After : Oct 8 18:12:59 2027 GMT Subject: CN=53C492756D43A045C23248A0933AD1326DA1ED02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3d:cf:23:07:d1:e8:61:3e:22:73:ec:54:85: bb:de:f0:cc:6b:96:ad:48:ea:39:74:bf:38:37:05: e0:87:d1:af:ff:24:9e:28:cd:ee:6f:54:0f:8a:c3: 89:e5:65:e6:7e:44:63:d7:cb:ee:3d:c6:53:30:a8: 62:65:48:98:6a:ad:d2:ee:e1:bb:43:a2:ee:6f:9a: 33:4e:4b:09:39:0f:4f:2d:6e:38:9c:5c:03:76:a2: 2d:46:16:0b:78:9a:20:08:c2:68:42:3a:43:1f:98: d6:ca:b2:54:54:8b:0b:da:1c:58:94:81:cd:bf:54: c0:95:98:03:8f:57:c3:b8:df:63:53:cf:c4:b7:6f: b5:af:9a:1f:56:b3:bc:cb:0d:73:14:ce:f9:9e:9c: de:02:5e:32:46:a3:fd:7f:35:e2:19:41:64:cf:42: 7b:98:8e:f1:d1:92:dd:21:0b:24:5a:83:42:7f:93: 12:55:42:84:a6:c5:35:28:81:26:66:14:73:d1:4c: 80:2a:c7:17:1e:b3:20:42:3d:0d:e7:4e:f1:7c:47: ae:0c:21:01:9f:b5:46:9c:f8:a9:68:66:ca:89:e8: 6e:70:80:ca:f7:40:5e:a5:57:9d:b0:1d:99:ba:3f: 13:7b:b0:78:92:13:e0:19:7b:1b:0d:9e:4a:94:d3: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C4:92:75:6D:43:A0:45:C2:32:48:A0:93:3A:D1:32:6D:A1:ED:02 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.16.0/24 Signature Algorithm: sha256WithRSAEncryption af:d4:df:a3:74:68:89:11:0f:0c:aa:13:18:d9:19:50:d1:d2: 2f:5f:5f:fb:e6:f7:b2:a0:84:26:5c:3e:fc:ae:ac:dc:0e:84: ca:f4:34:3a:67:2e:d9:e2:e9:d6:81:43:8e:ed:96:22:71:4f: db:42:63:ca:44:2d:62:1c:a8:56:c6:96:dd:25:24:0a:b6:10: 1f:2c:16:88:d6:02:3c:17:4d:c1:df:7a:5f:4d:25:2e:a8:bf: 69:a8:85:b9:01:1d:64:86:85:82:ca:c9:e0:2a:98:71:42:d9: ae:a1:fa:30:36:0c:c3:dc:6b:24:3d:e8:df:77:b7:b7:34:0e: 63:4f:64:47:4d:ea:90:31:ed:7a:ba:b6:55:a9:6f:46:84:ab: cc:52:f1:68:2b:82:11:8e:08:0d:47:e6:f4:b6:0c:7c:98:bc: 24:2b:7a:ac:8d:96:46:03:7a:fd:54:87:3c:f9:ab:d3:a0:e7: 78:ad:6a:b3:cf:23:88:ee:ff:2d:32:ba:ed:fd:44:28:c6:9e: db:86:71:e5:4e:40:10:4b:b4:2f:0f:55:ac:bd:91:f5:e5:9b: 3b:6a:e1:fb:a0:a4:04:be:37:1b:1d:31:1d:28:b1:11:4f:f2: ca:c6:5c:42:20:49:79:81:95:6c:a7:5f:8b:ec:a4:22:78:dc: fd:ad:b5:df -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUH+SUbiCPdds9IvsUsbyIgfiPXxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDkxODA3NTlaFw0yNzEwMDgxODEyNTlaMDMxMTAvBgNV BAMTKDUzQzQ5Mjc1NkQ0M0EwNDVDMjMyNDhBMDkzM0FEMTMyNkRBMUVEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPc8jB9HoYT4ic+xUhbve8Mxr lq1I6jl0vzg3BeCH0a//JJ4oze5vVA+Kw4nlZeZ+RGPXy+49xlMwqGJlSJhqrdLu 4btDou5vmjNOSwk5D08tbjicXAN2oi1GFgt4miAIwmhCOkMfmNbKslRUiwvaHFiU gc2/VMCVmAOPV8O432NTz8S3b7Wvmh9Ws7zLDXMUzvmenN4CXjJGo/1/NeIZQWTP QnuYjvHRkt0hCyRag0J/kxJVQoSmxTUogSZmFHPRTIAqxxcesyBCPQ3nTvF8R64M IQGftUac+KloZsqJ6G5wgMr3QF6lV52wHZm6PxN7sHiSE+AZexsNnkqU002JAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUU8SSdW1DoEXCMkigkzrRMm2h7QIwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTI3MjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtBAwDQYJKoZIhvcNAQELBQADggEBAK/U36N0aIkRDwyqExjZGVDR 0i9fX/vm97KghCZcPvyurNwOhMr0NDpnLtni6daBQ47tliJxT9tCY8pELWIcqFbG lt0lJAq2EB8sFojWAjwXTcHfel9NJS6ov2mohbkBHWSGhYLKyeAqmHFC2a6h+jA2 DMPcayQ96N93t7c0DmNPZEdN6pAx7Xq6tlWpb0aEq8xS8WgrghGOCA1H5vS2DHyY vCQreqyNlkYDev1Uhzz5q9Og53itarPPI4ju/y0yuu39RCjGntuGceVOQBBLtC8P Vay9kfXlmztq4fugpAS+NxsdMR0osRFP8srGXEIgSXmBlWynX4vspCJ43P2ttd8= -----END CERTIFICATE-----Generated at Mon Oct 12 02:19:32 2026 by rpki-client