$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16125.roa File: AS16125.roa (raw, json) Hash identifier: 9TXy1c+DCi17hmasf879y840bcb35OqbIlw+Eq6egxo= Subject key identifier: E1:48:AF:98:15:CC:96:AB:4B:49:04:75:29:42:93:71:F8:62:56:48 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 57C68463D0A4D92F5FF81683516A6A051EFED867 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16125.roa Signing time: Tue 06 Oct 2026 05:23:57 +0000 ROA not before: Tue 06 Oct 2026 05:18:57 +0000 ROA not after: Tue 05 Oct 2027 05:23:57 +0000 asID: 16125 IP address blocks: 79.180.124.0/24 maxlen: 24 79.183.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c6:84:63:d0:a4:d9:2f:5f:f8:16:83:51:6a:6a:05:1e:fe:d8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 05:18:57 2026 GMT Not After : Oct 5 05:23:57 2027 GMT Subject: CN=E148AF9815CC96AB4B49047529429371F8625648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:ca:32:77:86:53:42:69:f8:61:16:53:57: 50:aa:50:11:0f:57:0e:0f:82:24:ec:03:0e:57:5a: 6d:ce:b1:0e:3d:72:c6:51:fc:89:64:f1:d9:67:25: 67:39:36:5b:2a:75:3f:96:10:d9:55:6f:bf:b6:58: 87:c3:da:44:5d:c6:2b:cc:b0:44:99:59:0d:06:70: e5:65:15:01:44:51:b3:ff:ea:7b:a3:66:6f:54:f4: b6:f6:63:97:a6:f7:84:83:48:69:ae:d9:2c:f3:0c: 79:25:c6:9a:5b:27:0d:71:ff:aa:bb:8c:a5:36:77: 4a:74:fc:3d:b4:f8:b7:55:a1:52:07:0a:ec:67:66: 0d:8c:e7:13:d0:76:5e:9d:08:42:b1:17:04:bc:39: 42:25:1c:8c:2f:87:d9:d0:5d:f1:82:9f:dd:de:47: 68:69:47:1e:85:a6:3e:9d:86:5c:34:3c:ad:a1:90: ef:5c:2f:e2:ac:65:97:97:ca:c6:d4:96:26:00:d2: 16:fc:53:e5:0d:00:32:6a:02:fa:9b:03:15:a2:64: 13:34:a1:d9:d0:90:15:82:5c:96:d7:de:c4:a5:f4: 2b:7b:7a:f5:7f:52:31:eb:07:a4:91:ab:9c:2b:f0: 6f:6c:d6:09:f3:34:be:84:a2:a6:53:38:87:e4:bb: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:48:AF:98:15:CC:96:AB:4B:49:04:75:29:42:93:71:F8:62:56:48 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.124.0/24 79.183.140.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f7:53:83:b8:ff:ff:6c:c8:ab:19:b7:b2:9a:24:58:40:a7: 03:db:21:ed:4e:3f:78:71:13:2e:46:be:f5:7d:28:59:20:25: ef:25:f2:ad:4b:ce:f0:73:35:ae:a3:a1:d9:04:14:7c:01:68: 08:ac:8d:33:80:29:b8:55:7d:9a:2f:a9:d6:e4:46:fe:ed:8d: c6:40:e5:a3:8e:8d:7a:1d:92:b6:09:04:4f:74:97:04:c7:28: aa:54:da:23:35:d1:e0:1e:98:0d:eb:b5:0e:42:1a:be:0d:bc: 03:d7:28:f7:95:46:47:35:0d:93:9e:93:58:bd:bb:9d:52:c5: b8:08:45:4a:b1:ed:55:f0:77:a7:a5:2d:95:27:09:9b:e3:42: 7c:59:93:27:79:77:83:cd:46:55:cf:e6:83:bd:ea:d6:0d:c7: cb:33:1e:7d:dc:04:c9:e0:96:64:08:00:d9:0b:35:12:8c:ca: e8:6e:bb:4c:d5:c2:ba:7b:2d:4b:fa:18:be:4f:a7:e8:ce:7f: 1d:b2:c0:fa:83:a8:45:8d:85:b6:9b:3f:2f:97:8d:81:a7:8f: ff:0a:52:98:6f:e0:e6:06:05:3f:e1:50:3f:bc:d2:e4:86:72: b1:58:b8:c2:67:cf:1d:74:e3:91:ea:ba:ea:73:ff:04:e6:95: 3f:69:d1:50 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUV8aEY9Ck2S9f+BaDUWpqBR7+2GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYwNTE4NTdaFw0yNzEwMDUwNTIzNTdaMDMxMTAvBgNV BAMTKEUxNDhBRjk4MTVDQzk2QUI0QjQ5MDQ3NTI5NDI5MzcxRjg2MjU2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDI8oyd4ZTQmn4YRZTV1CqUBEP Vw4PgiTsAw5XWm3OsQ49csZR/Ilk8dlnJWc5NlsqdT+WENlVb7+2WIfD2kRdxivM sESZWQ0GcOVlFQFEUbP/6nujZm9U9Lb2Y5em94SDSGmu2SzzDHklxppbJw1x/6q7 jKU2d0p0/D20+LdVoVIHCuxnZg2M5xPQdl6dCEKxFwS8OUIlHIwvh9nQXfGCn93e R2hpRx6Fpj6dhlw0PK2hkO9cL+KsZZeXysbUliYA0hb8U+UNADJqAvqbAxWiZBM0 odnQkBWCXJbX3sSl9Ct7evV/UjHrB6SRq5wr8G9s1gnzNL6EoqZTOIfku9XzAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQU4UivmBXMlqtLSQR1KUKTcfhiVkgwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNjEyNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAE+0fAMEAE+3jDANBgkqhkiG9w0BAQsFAAOCAQEAUvdTg7j//2zIqxm3 spokWECnA9sh7U4/eHETLka+9X0oWSAl7yXyrUvO8HM1rqOh2QQUfAFoCKyNM4Ap uFV9mi+p1uRG/u2NxkDlo46Neh2StgkET3SXBMcoqlTaIzXR4B6YDeu1DkIavg28 A9co95VGRzUNk56TWL27nVLFuAhFSrHtVfB3p6UtlScJm+NCfFmTJ3l3g81GVc/m g73q1g3HyzMefdwEyeCWZAgA2Qs1EozK6G67TNXCunstS/oYvk+n6M5/HbLA+oOo RY2Ftps/L5eNgaeP/wpSmG/g5gYFP+FQP7zS5IZysVi4wmfPHXTjkeq66nP/BOaV P2nRUA== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:57 2026 by rpki-client