$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: pkvi6T1LVN6jhcrGlrpedPe1iMcHg8S39oMmBK0/W5s= Subject key identifier: B4:85:CD:B7:02:C0:09:A6:33:85:C4:04:A5:41:22:DF:4B:70:A4:7D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 546261A8A7DBEE96C75531EBCDEFBE271A0D4E86 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16509.roa Signing time: Wed 07 Oct 2026 16:25:30 +0000 ROA not before: Wed 07 Oct 2026 16:20:30 +0000 ROA not after: Wed 06 Oct 2027 16:25:30 +0000 asID: 16509 IP address blocks: 79.182.9.0/24 maxlen: 24 79.182.112.0/24 maxlen: 24 109.66.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:61:a8:a7:db:ee:96:c7:55:31:eb:cd:ef:be:27:1a:0d:4e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 7 16:20:30 2026 GMT Not After : Oct 6 16:25:30 2027 GMT Subject: CN=B485CDB702C009A63385C404A54122DF4B70A47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:df:00:12:96:cb:bd:bd:84:64:be:e2:04: 28:dc:cf:74:51:7c:4d:f5:3f:98:7d:c8:24:32:7f: 9d:13:cb:9f:89:41:dd:12:ee:c8:7d:d9:ce:95:a2: 9c:80:ed:7d:3f:57:fe:f6:c1:93:de:88:18:b9:ca: 48:8d:06:04:8f:4e:e8:46:e9:bd:10:f7:e1:ed:23: ff:30:71:1c:de:46:53:06:0a:18:e0:49:87:03:f8: 4b:c8:f6:92:56:15:74:ed:be:e6:d2:32:5b:6b:5c: e2:45:b1:16:64:30:dd:61:b0:82:0b:c2:37:af:ff: 3d:28:c4:be:c1:9d:ea:b0:b2:4d:82:f9:41:a7:e8: 80:ee:6c:91:75:4e:fe:32:7a:f0:32:4d:48:22:20: cb:8e:4d:50:3e:28:12:59:b8:a4:1e:68:a1:82:1a: cb:c6:26:6b:d9:cf:96:a2:27:01:35:3e:0d:4f:a1: 6a:7e:b0:54:ed:33:9f:33:b2:50:f1:19:01:54:11: f6:4d:6e:cd:33:61:03:b5:5b:65:70:b1:8a:5c:73: 7b:33:f6:c2:11:54:2c:d8:26:92:20:60:46:9a:8f: 29:20:8a:36:c4:51:d2:19:bb:39:0b:67:b5:94:0b: 0b:be:7a:60:80:cd:55:45:e2:cc:3e:49:17:e5:7c: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:CD:B7:02:C0:09:A6:33:85:C4:04:A5:41:22:DF:4B:70:A4:7D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.9.0/24 79.182.112.0/24 109.66.18.0/24 Signature Algorithm: sha256WithRSAEncryption 58:2c:32:8f:10:03:4e:28:5b:50:ba:df:fb:e1:52:ab:23:c2: 5f:59:1e:58:0d:24:8d:54:51:41:1f:c4:0a:0b:3f:8f:fa:fc: 55:4d:ae:c4:14:2e:d9:56:50:80:78:c1:6b:3d:a2:b6:09:de: 03:f4:c2:e6:2d:8b:ee:a3:ab:71:45:38:84:8b:da:b5:d8:7e: b0:c5:09:53:79:39:35:9d:58:1f:7f:c4:49:f2:64:a3:22:bf: fd:35:4d:92:21:9d:a6:b6:73:58:f9:f5:54:82:cd:5e:ea:b5: e9:2c:ed:1a:5a:d9:b0:23:ac:ba:cb:e0:05:fa:0c:35:d7:0a: c9:4e:b0:06:a9:1a:9f:e3:a7:58:03:07:d7:e7:d8:3c:ef:8b: 93:ac:be:d1:40:d0:b9:2a:ba:ef:aa:be:e3:a3:ad:05:13:4a: 57:f3:be:7b:7d:d4:c9:da:89:b8:61:6d:15:bb:96:5e:35:f4: 0c:92:6f:95:3b:19:02:fa:e3:64:d2:18:18:1a:bd:65:5b:3e: 94:83:86:4c:f4:9b:7c:87:8b:42:9e:bb:0c:d8:ab:6d:88:38: 51:c4:a5:23:41:ea:c0:06:90:d1:9b:50:d4:95:53:12:fd:e5: a3:d1:87:a6:77:09:61:c0:ef:3f:eb:c5:bc:32:2b:9a:81:20: ca:04:20:1b -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUVGJhqKfb7pbHVTHrze++JxoNToYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDcxNjIwMzBaFw0yNzEwMDYxNjI1MzBaMDMxMTAvBgNV BAMTKEI0ODVDREI3MDJDMDA5QTYzMzg1QzQwNEE1NDEyMkRGNEI3MEE0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBt8AEpbLvb2EZL7iBCjcz3RR fE31P5h9yCQyf50Ty5+JQd0S7sh92c6VopyA7X0/V/72wZPeiBi5ykiNBgSPTuhG 6b0Q9+HtI/8wcRzeRlMGChjgSYcD+EvI9pJWFXTtvubSMltrXOJFsRZkMN1hsIIL wjev/z0oxL7Bneqwsk2C+UGn6IDubJF1Tv4yevAyTUgiIMuOTVA+KBJZuKQeaKGC GsvGJmvZz5aiJwE1Pg1PoWp+sFTtM58zslDxGQFUEfZNbs0zYQO1W2VwsYpcc3sz 9sIRVCzYJpIgYEaajykgijbEUdIZuzkLZ7WUCwu+emCAzVVF4sw+SRflfGDbAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUtIXNtwLACaYzhcQEpUEi30twpH0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNjUwOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAE+2CQMEAE+2cAMEAG1CEjANBgkqhkiG9w0BAQsFAAOCAQEAWCwyjxAD TihbULrf++FSqyPCX1keWA0kjVRRQR/ECgs/j/r8VU2uxBQu2VZQgHjBaz2itgne A/TC5i2L7qOrcUU4hIvatdh+sMUJU3k5NZ1YH3/ESfJkoyK//TVNkiGdprZzWPn1 VILNXuq16SztGlrZsCOsusvgBfoMNdcKyU6wBqkan+OnWAMH1+fYPO+Lk6y+0UDQ uSq676q+46OtBRNKV/O+e33UydqJuGFtFbuWXjX0DJJvlTsZAvrjZNIYGBq9ZVs+ lIOGTPSbfIeLQp67DNirbYg4UcSlI0HqwAaQ0ZtQ1JVTEv3lo9GHpncJYcDvP+vF vDIrmoEgygQgGw== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:23 2026 by rpki-client