$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: 1XMjMBbodPVTChsPZsV53IxcPfNwtwKCNdS56rgszHM= Subject key identifier: 86:88:CA:4A:AE:EE:54:EA:36:13:9E:EF:80:44:09:A6:7B:1B:90:C4 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 56AFAC29A0AA88FBBC02200871EB30948C232C64 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152868.roa Signing time: Mon 05 Oct 2026 06:13:45 +0000 ROA not before: Mon 05 Oct 2026 06:08:45 +0000 ROA not after: Mon 04 Oct 2027 06:13:45 +0000 asID: 152868 IP address blocks: 79.180.100.0/24 maxlen: 24 79.180.102.0/24 maxlen: 24 109.64.229.0/24 maxlen: 24 109.66.16.0/24 maxlen: 24 109.66.19.0/24 maxlen: 24 109.66.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:af:ac:29:a0:aa:88:fb:bc:02:20:08:71:eb:30:94:8c:23:2c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:45 2026 GMT Not After : Oct 4 06:13:45 2027 GMT Subject: CN=8688CA4AAEEE54EA36139EEF804409A67B1B90C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6c:5c:77:05:5f:e4:5f:1c:02:24:fd:b2:99: f7:4b:f9:12:0a:21:02:72:f2:f4:88:83:ac:4a:31: 53:ff:f1:37:c6:f1:94:81:20:78:94:f1:3d:1a:96: 45:8e:81:d2:e5:e6:d2:e1:10:bd:a1:2a:4d:27:77: 5b:83:fd:6d:3f:dd:4e:2a:ac:2f:27:be:f4:29:4c: 02:0f:33:22:83:2f:db:7b:81:8c:38:82:ee:f5:59: 42:21:34:ba:85:59:99:32:fe:52:6b:18:23:87:60: 74:aa:91:38:9b:37:fe:51:36:6a:d7:07:16:d3:8c: 16:b9:63:e5:25:0e:b3:52:30:0c:6d:6f:a1:5e:dc: 9c:85:3a:ba:8a:8d:00:a7:b3:cc:13:a8:7b:d4:09: 03:80:3f:45:3f:a4:a2:67:00:f5:f8:7f:33:20:0f: c6:ed:e4:05:8d:c2:4b:0f:36:c7:73:49:2f:ba:92: 7f:ca:2e:0b:4d:a7:3b:d5:48:e9:98:06:ab:88:7e: 46:cc:a1:ac:6a:71:fc:9b:88:0a:92:5e:6d:37:6e: 03:53:07:6f:35:ef:0e:9d:c0:4a:68:50:8e:29:dc: 80:81:fb:ac:15:e2:eb:1b:bd:a6:54:48:ba:e1:97: e7:ce:e0:b5:79:48:24:cb:69:26:f4:e6:4e:28:0e: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:CA:4A:AE:EE:54:EA:36:13:9E:EF:80:44:09:A6:7B:1B:90:C4 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.100.0/24 79.180.102.0/24 109.64.229.0/24 109.66.16.0/24 109.66.19.0/24 109.66.69.0/24 Signature Algorithm: sha256WithRSAEncryption 99:81:ea:5c:ff:e6:8a:91:bb:ab:58:8a:5e:af:b7:b4:35:28: ea:45:bd:8c:32:3e:8c:c0:91:fd:19:59:43:f1:15:9c:85:9d: 88:d8:7a:b3:41:c9:c2:50:83:cb:c8:d4:97:60:70:7b:13:92: e5:c4:cb:e3:0a:c3:bb:fc:40:4c:af:4e:fc:93:1d:d1:98:9a: 3d:39:4a:2d:5c:08:f2:0f:cf:b4:f1:f4:28:7e:4f:90:c4:5b: 5a:00:bb:04:70:81:bb:d6:f6:df:5d:c2:fc:b9:63:98:86:d3: 28:3a:04:bc:d4:21:4a:11:1c:10:fb:4c:d3:18:ce:37:0a:16: 59:aa:2a:b7:49:a8:4e:22:a3:44:7a:4b:d2:5a:88:ab:70:51: 42:5d:6b:a7:7f:72:95:df:de:68:a0:ee:b1:5d:0d:00:dd:85: 74:d2:8f:1f:a6:fe:de:c9:32:4a:f6:78:40:d9:4f:c6:3f:08: 72:70:3c:e9:87:65:9f:0e:3d:3c:d2:a4:28:3f:97:72:5c:5f: d9:21:fa:5f:86:1f:28:1a:db:70:e9:b7:2d:e2:77:02:23:e9: 83:e0:84:94:92:bc:58:c0:75:aa:36:f1:10:a5:4b:0c:70:7a: e7:b7:57:cd:27:3c:f1:d9:96:87:15:a5:5f:e1:a4:ba:b1:09: 07:4e:d6:cf -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUVq+sKaCqiPu8AiAIceswlIwjLGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDVaFw0yNzEwMDQwNjEzNDVaMDMxMTAvBgNV BAMTKDg2ODhDQTRBQUVFRTU0RUEzNjEzOUVFRjgwNDQwOUE2N0IxQjkwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbFx3BV/kXxwCJP2ymfdL+RIK IQJy8vSIg6xKMVP/8TfG8ZSBIHiU8T0alkWOgdLl5tLhEL2hKk0nd1uD/W0/3U4q rC8nvvQpTAIPMyKDL9t7gYw4gu71WUIhNLqFWZky/lJrGCOHYHSqkTibN/5RNmrX BxbTjBa5Y+UlDrNSMAxtb6Fe3JyFOrqKjQCns8wTqHvUCQOAP0U/pKJnAPX4fzMg D8bt5AWNwksPNsdzSS+6kn/KLgtNpzvVSOmYBquIfkbMoaxqcfybiAqSXm03bgNT B2817w6dwEpoUI4p3ICB+6wV4usbvaZUSLrhl+fO4LV5SCTLaSb05k4oDt6lAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUhojKSq7uVOo2E57vgEQJpnsbkMQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTI4Njgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoE AgABMCQDBABPtGQDBABPtGYDBABtQOUDBABtQhADBABtQhMDBABtQkUwDQYJKoZI hvcNAQELBQADggEBAJmB6lz/5oqRu6tYil6vt7Q1KOpFvYwyPozAkf0ZWUPxFZyF nYjYerNBycJQg8vI1JdgcHsTkuXEy+MKw7v8QEyvTvyTHdGYmj05Si1cCPIPz7Tx 9Ch+T5DEW1oAuwRwgbvW9t9dwvy5Y5iG0yg6BLzUIUoRHBD7TNMYzjcKFlmqKrdJ qE4io0R6S9JaiKtwUUJda6d/cpXf3mig7rFdDQDdhXTSjx+m/t7JMkr2eEDZT8Y/ CHJwPOmHZZ8OPTzSpCg/l3JcX9kh+l+GHyga23Dpty3idwIj6YPghJSSvFjAdao2 8RClSwxweue3V80nPPHZlocVpV/hpLqxCQdO1s8= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:36 2026 by rpki-client