$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS174.roa File: AS174.roa (raw, json) Hash identifier: PkLyUkiGytYHlEPt0BZC8sLZIj9oX+jzJgyZjnKJ+jM= Subject key identifier: 56:77:59:F2:D5:AB:F8:08:3F:68:41:50:43:55:F1:15:E8:C3:56:8B Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6BF996CCCA8A23B6904744A5DB8FD3670D595784 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS174.roa Signing time: Mon 05 Oct 2026 06:13:38 +0000 ROA not before: Mon 05 Oct 2026 06:08:38 +0000 ROA not after: Mon 04 Oct 2027 06:13:38 +0000 asID: 174 IP address blocks: 109.66.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f9:96:cc:ca:8a:23:b6:90:47:44:a5:db:8f:d3:67:0d:59:57:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:38 2026 GMT Not After : Oct 4 06:13:38 2027 GMT Subject: CN=567759F2D5ABF8083F6841504355F115E8C3568B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:7e:59:5a:63:ad:b7:2d:ec:25:0d:07:91: 43:2a:99:cf:7f:8c:ab:c7:59:a7:f9:7f:12:19:97: 69:01:88:ea:c7:39:4e:a5:b9:e3:3a:04:01:ba:10: 1f:65:11:4f:4c:9f:6a:38:69:cb:b8:3a:2b:1e:22: b2:e7:da:0d:95:18:26:db:00:29:2e:4b:01:53:a6: e2:87:39:c9:be:e3:c2:57:ca:93:06:b1:07:f4:5c: d0:85:6d:fe:ee:da:3e:59:5b:79:62:b5:3d:10:99: 58:cf:b3:75:25:65:49:1c:8d:47:dd:0b:79:f0:be: 17:34:59:96:7f:83:f5:c9:07:4b:ea:a3:10:41:27: 8a:a4:fe:d2:cb:8a:c2:bb:c9:a6:66:da:32:87:25: 2d:5d:56:66:91:41:42:08:b1:22:a2:db:11:36:28: 13:57:27:6e:48:39:71:56:e2:05:5c:9a:9c:37:3a: 5b:27:88:0a:f2:89:98:7e:32:40:38:26:ca:6b:ac: 3d:96:d5:3f:ad:c4:6c:75:c0:fb:0d:44:3e:c3:c0: ce:41:b3:3a:e6:d9:75:45:3a:81:05:51:4c:40:05: a5:c1:5d:7a:d8:94:28:d1:d3:25:62:92:11:89:c0: 36:39:fa:0f:ac:63:4f:4a:e1:db:68:f4:27:af:c3: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:59:F2:D5:AB:F8:08:3F:68:41:50:43:55:F1:15:E8:C3:56:8B X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.32.0/22 Signature Algorithm: sha256WithRSAEncryption 63:7b:3e:56:35:3f:92:f4:e4:f6:73:63:c0:a5:36:20:81:72: 3a:65:cc:a2:22:d3:d5:b0:91:9d:b0:f3:57:17:b0:53:c3:7a: 47:48:a1:b9:d2:6e:8f:ac:1a:3b:c9:2f:de:6f:4a:de:c5:33: 37:ce:dd:e2:ac:63:ae:25:3b:2e:cd:63:78:54:30:4f:1e:69: 05:48:6e:c9:af:a0:ae:df:0d:ca:dc:11:ea:84:c4:a4:db:fc: e0:b4:33:bc:c6:bf:c9:1b:c1:8d:5f:59:d0:36:0e:b1:68:1d: 5f:25:2b:be:0d:d7:3b:14:b8:66:c2:bf:d7:24:c4:d0:98:0a: 30:73:59:ab:9f:bd:88:0d:fa:77:86:a0:88:5c:9c:6d:68:d2: 1b:2b:ec:09:c3:58:b8:c0:81:f4:11:90:46:34:16:f4:6f:0b: 6b:62:d1:32:71:b5:19:fb:29:b5:39:f5:20:45:f3:b0:a4:61: f4:e8:25:7d:a9:5f:66:9a:ff:20:ac:4e:4f:08:38:1e:91:29: 1c:1c:46:b7:8b:ac:63:c9:dd:ef:7f:8a:4b:58:81:2b:69:c1: 77:3e:2d:a4:ff:8e:e5:63:78:05:86:68:f7:8d:90:7f:d5:c8: 76:c0:60:4a:ba:5f:75:88:9c:6d:ca:df:f6:b2:14:81:01:cb: 81:d4:df:46 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUa/mWzMqKI7aQR0Sl24/TZw1ZV4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzhaFw0yNzEwMDQwNjEzMzhaMDMxMTAvBgNV BAMTKDU2Nzc1OUYyRDVBQkY4MDgzRjY4NDE1MDQzNTVGMTE1RThDMzU2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnH5ZWmOtty3sJQ0HkUMqmc9/ jKvHWaf5fxIZl2kBiOrHOU6lueM6BAG6EB9lEU9Mn2o4acu4OiseIrLn2g2VGCbb ACkuSwFTpuKHOcm+48JXypMGsQf0XNCFbf7u2j5ZW3litT0QmVjPs3UlZUkcjUfd C3nwvhc0WZZ/g/XJB0vqoxBBJ4qk/tLLisK7yaZm2jKHJS1dVmaRQUIIsSKi2xE2 KBNXJ25IOXFW4gVcmpw3OlsniAryiZh+MkA4JsprrD2W1T+txGx1wPsNRD7DwM5B szrm2XVFOoEFUUxABaXBXXrYlCjR0yVikhGJwDY5+g+sY09K4dto9CevwyjVAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUVndZ8tWr+Ag/aEFQQ1XxFejDVoswHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJtQiAwDQYJKoZIhvcNAQELBQADggEBAGN7PlY1P5L05PZzY8ClNiCBcjpl zKIi09WwkZ2w81cXsFPDekdIobnSbo+sGjvJL95vSt7FMzfO3eKsY64lOy7NY3hU ME8eaQVIbsmvoK7fDcrcEeqExKTb/OC0M7zGv8kbwY1fWdA2DrFoHV8lK74N1zsU uGbCv9ckxNCYCjBzWaufvYgN+neGoIhcnG1o0hsr7AnDWLjAgfQRkEY0FvRvC2ti 0TJxtRn7KbU59SBF87CkYfToJX2pX2aa/yCsTk8IOB6RKRwcRreLrGPJ3e9/iktY gStpwXc+LaT/juVjeAWGaPeNkH/VyHbAYEq6X3WInG3K3/ayFIEBy4HU30Y= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:44 2026 by rpki-client