$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198566.roa File: AS198566.roa (raw, json) Hash identifier: 2ut+JKM0WGn99g9THbJykAlJ2wuHsdDL5ymh/UFg5so= Subject key identifier: 55:4B:A4:DA:59:B6:9C:E2:7E:29:B5:EC:30:A8:96:E9:D0:0D:4C:B3 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 39EA3083BF9C7A9BD18EE35F010E2D13624FF8FE Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198566.roa Signing time: Mon 05 Oct 2026 06:13:38 +0000 ROA not before: Mon 05 Oct 2026 06:08:38 +0000 ROA not after: Mon 04 Oct 2027 06:13:38 +0000 asID: 198566 IP address blocks: 79.182.68.0/24 maxlen: 24 79.182.237.0/24 maxlen: 24 79.183.32.0/24 maxlen: 24 79.183.34.0/24 maxlen: 24 79.183.36.0/24 maxlen: 24 79.183.38.0/24 maxlen: 24 79.183.45.0/24 maxlen: 24 79.183.47.0/24 maxlen: 24 79.183.49.0/24 maxlen: 24 79.183.51.0/24 maxlen: 24 79.183.53.0/24 maxlen: 24 79.183.55.0/24 maxlen: 24 79.183.57.0/24 maxlen: 24 79.183.84.0/24 maxlen: 24 79.183.86.0/24 maxlen: 24 79.183.95.0/24 maxlen: 24 79.183.97.0/24 maxlen: 24 79.183.99.0/24 maxlen: 24 79.183.104.0/24 maxlen: 24 79.183.117.0/24 maxlen: 24 79.183.119.0/24 maxlen: 24 79.183.121.0/24 maxlen: 24 79.183.124.0/24 maxlen: 24 79.183.127.0/24 maxlen: 24 109.66.36.0/24 maxlen: 24 109.66.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:30:83:bf:9c:7a:9b:d1:8e:e3:5f:01:0e:2d:13:62:4f:f8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:38 2026 GMT Not After : Oct 4 06:13:38 2027 GMT Subject: CN=554BA4DA59B69CE27E29B5EC30A896E9D00D4CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:87:50:e3:97:84:da:ae:c2:45:58:07:8b: 11:ff:5a:d3:cc:a8:5e:6f:06:5e:5a:d1:62:0e:41: bb:90:42:68:e2:e1:b1:2c:59:cb:7e:fd:08:37:03: 3b:81:09:ae:b7:a2:87:b7:03:d0:a0:d9:00:e7:72: f5:95:0b:90:36:5c:5d:b7:78:83:09:3b:24:98:80: a8:c4:f2:66:38:bb:1f:6f:12:a9:98:79:1f:a8:0e: 15:18:1f:15:89:dc:52:52:ea:52:69:0e:41:f7:86: cb:99:ae:32:e7:fe:6f:52:6f:bc:70:0f:6e:e0:79: e8:44:83:6d:87:ef:8b:43:2c:c0:c7:03:48:c0:71: d1:5b:7b:6c:2b:2b:a9:e1:40:54:52:4d:08:5c:31: 79:df:a3:12:22:5e:ce:5f:25:8e:4b:ae:de:4e:df: 8c:ab:54:6d:fd:8d:2b:7d:35:de:9b:91:7a:f7:90: 0d:0b:e4:c6:36:f2:b8:d4:92:e6:59:a5:8b:05:2c: 96:ac:b6:e8:31:dc:56:08:3e:ac:9e:94:2d:84:8f: b7:6e:8d:d1:10:15:f0:5c:6a:ff:da:2b:f0:12:66: 00:22:4e:7c:64:ca:c3:a3:f2:98:b8:f9:ad:0e:eb: 3b:6b:2f:b0:a2:ee:79:f9:82:5d:c2:0c:20:e0:55: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4B:A4:DA:59:B6:9C:E2:7E:29:B5:EC:30:A8:96:E9:D0:0D:4C:B3 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS198566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.68.0/24 79.182.237.0/24 79.183.32.0/24 79.183.34.0/24 79.183.36.0/24 79.183.38.0/24 79.183.45.0/24 79.183.47.0/24 79.183.49.0/24 79.183.51.0/24 79.183.53.0/24 79.183.55.0/24 79.183.57.0/24 79.183.84.0/24 79.183.86.0/24 79.183.95.0/24 79.183.97.0/24 79.183.99.0/24 79.183.104.0/24 79.183.117.0/24 79.183.119.0/24 79.183.121.0/24 79.183.124.0/24 79.183.127.0/24 109.66.36.0/24 109.66.206.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:6f:5b:02:da:5a:5a:9a:7f:40:b6:e7:3e:93:2e:54:f8:da: ec:f5:60:e9:23:5f:0d:dd:6e:06:2f:6a:a2:13:6a:5a:b7:cd: 9e:c8:10:d7:37:50:52:3f:3d:05:b0:00:9c:b0:f6:11:a0:75: a4:8d:29:09:c5:97:c2:8d:ef:89:1a:60:c2:28:20:0e:bf:6f: aa:c9:76:c2:37:f6:66:61:85:c4:02:bf:96:1c:3c:70:01:2b: f1:4c:f3:de:07:58:55:a2:39:c7:ea:6c:cc:7f:24:22:7f:43: b7:cf:c0:28:ee:94:93:66:f8:2d:cf:d9:91:9f:f1:0d:00:f6: 67:54:f9:a8:f7:0e:82:9e:e4:a4:ec:8f:f6:00:22:1c:86:3d: 38:fa:15:f6:18:72:5a:06:74:3a:ae:5d:63:67:3f:37:d9:ea: 14:de:c4:38:cd:09:09:21:07:a3:47:3f:7d:a8:82:0e:7b:27: 3a:96:dd:f7:a7:40:62:66:43:22:ee:28:5e:6b:0f:8c:16:75: 28:82:ef:9f:4a:6f:88:c3:bb:fa:57:54:7e:e5:a1:9c:8b:49: 39:0b:30:e8:dc:11:db:4a:54:22:13:e1:70:f7:c6:96:a2:60: 06:20:f6:a7:b0:8a:d2:2a:db:9a:7f:d7:d0:ec:ef:fe:ae:9f: bb:e7:cd:59 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUOeowg7+cepvRjuNfAQ4tE2JP+P4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzhaFw0yNzEwMDQwNjEzMzhaMDMxMTAvBgNV BAMTKDU1NEJBNERBNTlCNjlDRTI3RTI5QjVFQzMwQTg5NkU5RDAwRDRDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UodQ45eE2q7CRVgHixH/WtPM qF5vBl5a0WIOQbuQQmji4bEsWct+/Qg3AzuBCa63ooe3A9Cg2QDncvWVC5A2XF23 eIMJOySYgKjE8mY4ux9vEqmYeR+oDhUYHxWJ3FJS6lJpDkH3hsuZrjLn/m9Sb7xw D27geehEg22H74tDLMDHA0jAcdFbe2wrK6nhQFRSTQhcMXnfoxIiXs5fJY5Lrt5O 34yrVG39jSt9Nd6bkXr3kA0L5MY28rjUkuZZpYsFLJastugx3FYIPqyelC2Ej7du jdEQFfBcav/aK/ASZgAiTnxkysOj8pi4+a0O6ztrL7Ci7nn5gl3CDCDgVW6vAgMB AAGjggLgMIIC3DAdBgNVHQ4EFgQUVUuk2lm2nOJ+KbXsMKiW6dANTLMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxOTg1NjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgbkGCCsGAQUFBwEHAQH/BIGpMIGm MIGjBAIAATCBnAMEAE+2RAMEAE+27QMEAE+3IAMEAE+3IgMEAE+3JAMEAE+3JgME AE+3LQMEAE+3LwMEAE+3MQMEAE+3MwMEAE+3NQMEAE+3NwMEAE+3OQMEAE+3VAME AE+3VgMEAE+3XwMEAE+3YQMEAE+3YwMEAE+3aAMEAE+3dQMEAE+3dwMEAE+3eQME AE+3fAMEAE+3fwMEAG1CJAMEAG1CzjANBgkqhkiG9w0BAQsFAAOCAQEAmm9bAtpa Wpp/QLbnPpMuVPja7PVg6SNfDd1uBi9qohNqWrfNnsgQ1zdQUj89BbAAnLD2EaB1 pI0pCcWXwo3viRpgwiggDr9vqsl2wjf2ZmGFxAK/lhw8cAEr8Uzz3gdYVaI5x+ps zH8kIn9Dt8/AKO6Uk2b4Lc/ZkZ/xDQD2Z1T5qPcOgp7kpOyP9gAiHIY9OPoV9hhy WgZ0Oq5dY2c/N9nqFN7EOM0JCSEHo0c/faiCDnsnOpbd96dAYmZDIu4oXmsPjBZ1 KILvn0pviMO7+ldUfuWhnItJOQsw6NwR20pUIhPhcPfGlqJgBiD2p7CK0irbmn/X 0Ozv/q6fu+fNWQ== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:22 2026 by rpki-client