
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: PMPHSMulrOnMe+5fOpfCTYKTqkiLZoNp0fcIDyECYGE=
Subject key identifier: 56:6A:AE:2E:C6:75:3B:22:08:6A:53:EC:2B:3B:E1:47:9B:38:C8:9F
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 1864954E3DC090F163FFD1FB036E6E08CC8B4137
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS197537.roa
Signing time: Mon 05 Oct 2026 06:12:58 +0000
ROA not before: Mon 05 Oct 2026 06:07:58 +0000
ROA not after: Mon 04 Oct 2027 06:12:58 +0000
asID: 197537
IP address blocks: 79.180.4.0/22 maxlen: 23
109.64.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:64:95:4e:3d:c0:90:f1:63:ff:d1:fb:03:6e:6e:08:cc:8b:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:07:58 2026 GMT
Not After : Oct 4 06:12:58 2027 GMT
Subject: CN=566AAE2EC6753B22086A53EC2B3BE1479B38C89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:2f:d6:bd:bf:14:21:84:9e:fa:86:7b:8c:
8e:83:d7:1b:f0:7c:4b:af:71:31:cc:e5:e5:41:15:
5d:a8:9c:7e:d6:8b:61:26:59:8d:54:97:ae:9a:8a:
11:44:ef:bc:c6:4a:cb:2d:2e:42:cd:ad:b6:f9:ff:
71:b2:ac:82:88:14:0e:e5:13:5e:65:b4:bf:4a:0a:
e7:31:d1:fc:2f:57:a8:a9:67:c0:36:95:a9:f2:d1:
4d:1a:7a:28:12:2d:8f:c5:5b:99:02:c3:5e:d8:e4:
e9:ff:e9:47:f9:c5:76:99:d9:98:56:b2:35:b8:66:
16:15:1b:cf:12:57:33:09:ea:11:87:1d:3e:6b:c2:
4e:f7:92:d5:50:62:a4:de:c1:1c:22:7c:b3:cb:28:
40:a7:cf:9d:ec:2c:3a:a2:e3:1f:d4:20:60:b6:20:
9a:6a:7f:46:4f:af:67:56:bc:f7:e1:91:af:78:3f:
c4:4e:3d:b9:81:51:a7:9c:5d:b1:ff:af:b9:ee:35:
6a:3d:d9:48:7f:a1:fc:54:58:ed:54:6a:54:44:be:
4a:16:41:89:f5:c7:d8:52:d8:3d:c7:bf:9a:cb:2d:
7c:68:61:74:92:c0:9b:e8:6d:95:c2:8b:0d:59:91:
0f:7a:d7:51:13:6a:ba:0f:c6:3c:70:4b:3f:d4:da:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:AE:2E:C6:75:3B:22:08:6A:53:EC:2B:3B:E1:47:9B:38:C8:9F
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.4.0/22
109.64.194.0/23
Signature Algorithm: sha256WithRSAEncryption
da:8c:15:58:9e:87:c8:b3:6e:4c:65:20:1b:d8:bd:07:6e:47:
6a:35:a4:00:6a:ac:61:3b:7f:ac:eb:b7:8e:2e:bb:f6:93:6b:
38:bc:9e:4e:62:cf:67:58:11:4f:75:7d:6f:5d:a7:58:d7:1e:
c4:d4:ce:d3:ff:10:6d:2c:cd:70:48:4c:f6:0c:a2:da:b7:d6:
ad:d9:9e:fc:67:82:bf:83:4a:85:41:80:9d:77:93:f2:5a:c8:
8e:62:dc:3c:13:f8:71:9c:c6:33:2b:97:24:10:c0:3a:bf:6e:
75:e3:50:67:0c:99:8c:4c:cf:82:db:af:2f:79:a2:b9:61:88:
d8:00:79:be:e8:58:d7:14:98:a5:dc:30:cf:90:fa:86:e9:f4:
10:8e:21:99:49:ca:f3:a7:49:37:38:45:4d:15:36:9c:f6:76:
33:91:2d:85:9f:76:00:65:3e:31:90:e5:7e:e8:23:8a:ee:71:
a5:b0:ce:db:df:c1:ec:18:05:1c:99:6a:7c:4f:2b:25:ca:ea:
0f:c5:81:26:8d:80:1c:5d:7c:a8:29:b8:3b:f3:6c:b7:e2:36:
aa:22:4e:d2:52:01:41:7e:c2:51:63:4b:19:78:d3:d8:b8:88:
14:10:3a:7c:2d:77:f2:47:d1:77:2f:78:b1:0d:4f:6e:20:82:
c0:ce:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:47:10 2026 by rpki-client