$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: EJVLdqbSBYs0V8w/1VXjLfL8UOs3cYD5FYJlaUtElgE= Subject key identifier: 2C:C1:59:52:4C:0D:15:3A:BF:3E:9E:A9:08:D9:3A:C9:41:D5:85:4B Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 23DCBBA16579068C7A0F2FB45DC5615B460584A9 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16276.roa Signing time: Mon 05 Oct 2026 06:13:46 +0000 ROA not before: Mon 05 Oct 2026 06:08:46 +0000 ROA not after: Mon 04 Oct 2027 06:13:46 +0000 asID: 16276 IP address blocks: 79.176.152.0/24 maxlen: 24 109.66.49.0/24 maxlen: 24 109.66.59.0/24 maxlen: 24 109.66.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:dc:bb:a1:65:79:06:8c:7a:0f:2f:b4:5d:c5:61:5b:46:05:84:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:46 2026 GMT Not After : Oct 4 06:13:46 2027 GMT Subject: CN=2CC159524C0D153ABF3E9EA908D93AC941D5854B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:b8:83:84:5d:c9:35:a4:99:15:47:d2:f2: 71:a8:ce:c7:94:da:2d:6b:a2:8b:aa:97:30:89:88: 0b:4d:77:eb:1f:ff:05:2f:05:32:e6:7a:9f:f1:ea: d6:f8:cc:36:1f:3c:ef:18:5a:2d:dd:c5:88:dc:d7: 86:99:39:dc:a1:54:97:09:c9:5c:d1:d4:7b:a6:9d: b9:0c:6c:85:9a:62:75:a8:9a:ed:17:61:15:e1:15: 93:66:65:f2:cf:53:e2:f2:f5:da:24:c1:5c:2f:df: 02:98:9a:c1:d4:63:13:df:50:c4:26:ec:2b:dd:d7: c5:71:7e:6b:33:95:b7:a6:9a:bc:dd:5b:72:55:c2: 43:53:01:12:e6:3d:bb:97:21:92:55:a5:41:9d:02: 73:65:3a:5a:81:ad:e4:f3:78:fc:7a:3f:03:85:71: 4d:b8:a6:56:99:48:2d:f2:79:f8:ca:f3:ef:d7:3f: 25:43:b6:6e:82:4e:b6:c4:89:58:fc:4f:d2:70:f9: 34:46:ea:72:6f:04:b1:78:54:b3:36:6f:08:b7:d3: a8:5d:48:dc:06:23:b9:df:6f:20:c9:f3:fe:35:f1: 95:d6:e0:94:fa:c2:36:aa:59:99:c3:66:a1:53:7b: bd:f2:a6:9b:78:b0:79:27:c6:cf:b7:f9:b4:90:a4: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:59:52:4C:0D:15:3A:BF:3E:9E:A9:08:D9:3A:C9:41:D5:85:4B X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.152.0/24 109.66.49.0/24 109.66.59.0/24 109.66.76.0/24 Signature Algorithm: sha256WithRSAEncryption 98:15:b0:ef:6f:7b:b5:d0:30:54:65:33:fd:31:35:f9:84:99: 88:94:1b:0e:94:45:27:1a:da:45:e1:b1:ab:fb:ab:3d:2e:96: dd:f0:3b:02:87:57:8a:76:39:4f:71:ac:38:01:b4:1a:90:05: 91:38:45:1c:a0:2e:a9:67:9f:86:3a:58:57:12:ec:ce:5c:b4: 92:2b:9e:f5:12:0f:e3:65:ce:a3:98:db:48:7c:cf:e7:ea:ea: 6e:2b:98:48:80:c6:3d:1a:1f:83:ac:a9:c9:70:ba:25:97:7a: f6:23:7a:d7:aa:da:36:b8:b4:a8:b4:21:c6:fc:ac:72:a9:9f: 7d:69:da:63:9d:9f:94:42:bb:40:50:a0:98:67:53:02:37:14: dd:be:29:da:0a:a9:5c:ec:f6:52:bf:62:44:08:55:88:59:42: 23:22:86:6d:3a:a4:09:c6:42:9a:3f:4c:70:ba:91:a4:48:97: a3:bc:ef:a1:41:36:ae:fa:2d:c1:ee:0f:0f:9b:c8:3c:86:94: 5f:fb:5c:e6:16:16:e6:66:8b:e1:b2:d5:da:45:fc:03:ab:9b: ba:4d:f9:00:00:5c:a1:01:02:5d:dc:be:06:38:da:b5:0a:c4: 1c:24:8c:da:57:40:80:fa:d3:4a:eb:75:1a:ab:60:80:5c:fd: 0c:d2:e5:05 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUI9y7oWV5Box6Dy+0XcVhW0YFhKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDZaFw0yNzEwMDQwNjEzNDZaMDMxMTAvBgNV BAMTKDJDQzE1OTUyNEMwRDE1M0FCRjNFOUVBOTA4RDkzQUM5NDFENTg1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQLriDhF3JNaSZFUfS8nGozseU 2i1roouqlzCJiAtNd+sf/wUvBTLmep/x6tb4zDYfPO8YWi3dxYjc14aZOdyhVJcJ yVzR1HumnbkMbIWaYnWomu0XYRXhFZNmZfLPU+Ly9dokwVwv3wKYmsHUYxPfUMQm 7Cvd18VxfmszlbemmrzdW3JVwkNTARLmPbuXIZJVpUGdAnNlOlqBreTzePx6PwOF cU24plaZSC3yefjK8+/XPyVDtm6CTrbEiVj8T9Jw+TRG6nJvBLF4VLM2bwi306hd SNwGI7nfbyDJ8/418ZXW4JT6wjaqWZnDZqFTe73yppt4sHknxs+3+bSQpK1PAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQULMFZUkwNFTq/Pp6pCNk6yUHVhUswHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNjI3Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQC AAEwGAMEAE+wmAMEAG1CMQMEAG1COwMEAG1CTDANBgkqhkiG9w0BAQsFAAOCAQEA mBWw7297tdAwVGUz/TE1+YSZiJQbDpRFJxraReGxq/urPS6W3fA7AodXinY5T3Gs OAG0GpAFkThFHKAuqWefhjpYVxLszly0kiue9RIP42XOo5jbSHzP5+rqbiuYSIDG PRofg6ypyXC6JZd69iN616raNri0qLQhxvyscqmffWnaY52flEK7QFCgmGdTAjcU 3b4p2gqpXOz2Ur9iRAhViFlCIyKGbTqkCcZCmj9McLqRpEiXo7zvoUE2rvotwe4P D5vIPIaUX/tc5hYW5maL4bLV2kX8A6ubuk35AABcoQECXdy+BjjatQrEHCSM2ldA gPrTSut1GqtggFz9DNLlBQ== -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:04 2026 by rpki-client