$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198510.roa File: AS198510.roa (raw, json) Hash identifier: ucOdH7pJbMPV72Ra1eN0fRwmpB1ksiYP6dAQ6ZA27xc= Subject key identifier: 99:D1:19:57:C6:24:66:47:31:9D:81:48:D6:FF:50:53:52:E2:E3:DB Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1390A1830EB678E98504B06655FDFC17271EA624 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198510.roa Signing time: Mon 05 Oct 2026 06:11:10 +0000 ROA not before: Mon 05 Oct 2026 06:06:10 +0000 ROA not after: Mon 04 Oct 2027 06:11:10 +0000 asID: 198510 IP address blocks: 79.176.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:90:a1:83:0e:b6:78:e9:85:04:b0:66:55:fd:fc:17:27:1e:a6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:06:10 2026 GMT Not After : Oct 4 06:11:10 2027 GMT Subject: CN=99D11957C6246647319D8148D6FF505352E2E3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:8c:d9:65:4d:6b:d0:76:d7:c7:06:3f:4c: eb:4f:1b:ba:16:4f:a2:2e:ed:c4:4d:2b:71:ab:b4: f2:bc:a1:09:9d:e4:ab:df:7f:15:d2:7e:3b:7f:0f: 19:4e:58:0b:43:55:a7:bf:81:90:74:04:98:47:15: 74:39:38:e6:a8:2c:2c:cb:b0:0e:6f:7c:e6:35:2b: f3:22:c7:8b:1c:a0:44:dd:81:97:9f:8b:44:fb:8f: b7:d7:64:1e:ef:3b:8f:92:8d:74:29:d6:f3:46:fa: bb:6e:20:dd:33:fd:7a:79:59:17:34:58:25:2a:c2: 87:64:b8:a3:40:19:b5:e3:a6:57:cc:db:14:1f:fc: 37:12:b2:51:cc:41:1a:04:9c:bf:8c:4e:ef:01:e4: da:51:2f:bc:c4:b0:24:56:c8:1a:b9:42:da:b3:c8: 05:4b:61:1c:bc:e5:68:74:fb:a9:28:75:2b:1a:5b: a9:44:f0:f7:d3:1d:78:4c:29:3d:ca:99:ab:9e:a6: fb:0f:e8:43:b9:c0:62:7d:78:2e:7a:8e:51:d9:6e: 65:c3:cb:d7:b0:8e:25:de:e4:a1:13:82:c7:71:99: d8:47:c6:ac:59:89:8f:2e:1c:4e:47:68:67:8b:e9: 92:63:1c:43:8c:63:6c:c2:b6:e2:5d:35:16:4f:03: 68:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:19:57:C6:24:66:47:31:9D:81:48:D6:FF:50:53:52:E2:E3:DB X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198510.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.1.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:cc:ac:e6:48:c8:c7:88:b4:37:f8:8f:9e:94:a5:e5:fd:f8: b4:01:62:13:ce:06:cd:ff:31:76:d1:e3:aa:76:23:3d:88:c9: 7a:95:63:08:12:87:58:4c:6e:4e:38:a5:bb:d0:d5:20:6d:b8: 24:9a:2b:a5:6d:b6:04:06:62:14:3a:07:71:3a:1c:bc:8c:d1: 1a:c7:4f:47:b0:75:25:ae:c1:c3:24:17:2c:64:59:f8:f5:bb: 04:9b:4a:21:f3:f7:4c:65:52:01:6b:2f:e8:ad:c8:e4:0a:7c: 96:5c:95:b7:48:00:3f:b3:9e:e6:78:d2:31:40:70:bc:f7:ea: 12:28:91:db:16:7b:7a:f1:c7:ae:2a:e6:e3:1c:1a:36:ef:cb: 51:bb:d0:28:88:2c:28:c3:66:ef:8e:bb:f0:17:75:4b:b4:f1: 31:aa:5b:af:bd:53:e8:9c:86:5b:ab:01:9e:cf:27:41:47:24: 55:ee:02:0e:8e:87:ae:cd:1e:46:fb:5e:7b:06:05:35:7d:5b: 30:70:0d:d0:b8:00:f8:b2:d1:0d:71:82:17:d8:37:8d:46:4e: 16:db:64:93:60:0c:95:3d:85:5d:d7:39:c7:75:d3:b0:ed:1c: 67:34:01:40:b9:41:be:ce:f0:77:cf:84:24:0f:9c:b3:bb:47: 92:2d:2e:1a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUE5Chgw62eOmFBLBmVf38FycepiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA2MTBaFw0yNzEwMDQwNjExMTBaMDMxMTAvBgNV BAMTKDk5RDExOTU3QzYyNDY2NDczMTlEODE0OEQ2RkY1MDUzNTJFMkUzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY4ozZZU1r0HbXxwY/TOtPG7oW T6Iu7cRNK3GrtPK8oQmd5KvffxXSfjt/DxlOWAtDVae/gZB0BJhHFXQ5OOaoLCzL sA5vfOY1K/Mix4scoETdgZefi0T7j7fXZB7vO4+SjXQp1vNG+rtuIN0z/Xp5WRc0 WCUqwodkuKNAGbXjplfM2xQf/DcSslHMQRoEnL+MTu8B5NpRL7zEsCRWyBq5Qtqz yAVLYRy85Wh0+6kodSsaW6lE8PfTHXhMKT3KmauepvsP6EO5wGJ9eC56jlHZbmXD y9ewjiXe5KETgsdxmdhHxqxZiY8uHE5HaGeL6ZJjHEOMY2zCtuJdNRZPA2hlAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUmdEZV8YkZkcxnYFI1v9QU1Li49swHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxOTg1MTAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPsAEwDQYJKoZIhvcNAQELBQADggEBAC/MrOZIyMeItDf4j56UpeX9 +LQBYhPOBs3/MXbR46p2Iz2IyXqVYwgSh1hMbk44pbvQ1SBtuCSaK6VttgQGYhQ6 B3E6HLyM0RrHT0ewdSWuwcMkFyxkWfj1uwSbSiHz90xlUgFrL+ityOQKfJZclbdI AD+znuZ40jFAcLz36hIokdsWe3rxx64q5uMcGjbvy1G70CiILCjDZu+Ou/AXdUu0 8TGqW6+9U+ichlurAZ7PJ0FHJFXuAg6Oh67NHkb7XnsGBTV9WzBwDdC4APiy0Q1x ghfYN41GThbbZJNgDJU9hV3XOcd107DtHGc0AUC5Qb7O8HfPhCQPnLO7R5ItLho= -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:01 2026 by rpki-client