$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199393.roa File: AS199393.roa (raw, json) Hash identifier: R/MxCvB2rWk6rFnPk6KEv0TJlDWdj56SJUkNmQxn9H0= Subject key identifier: 93:7A:E5:31:8E:AA:CB:43:AF:E5:F7:63:60:1B:7A:12:8F:DD:6C:CA Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0D02ABDB61315DA048700BA168B16E30194B57B1 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199393.roa Signing time: Mon 05 Oct 2026 06:13:37 +0000 ROA not before: Mon 05 Oct 2026 06:08:37 +0000 ROA not after: Mon 04 Oct 2027 06:13:37 +0000 asID: 199393 IP address blocks: 109.66.0.0/22 maxlen: 24 109.66.0.0/24 maxlen: 24 109.66.1.0/24 maxlen: 24 109.66.2.0/24 maxlen: 24 109.66.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:02:ab:db:61:31:5d:a0:48:70:0b:a1:68:b1:6e:30:19:4b:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:37 2026 GMT Not After : Oct 4 06:13:37 2027 GMT Subject: CN=937AE5318EAACB43AFE5F763601B7A128FDD6CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:25:e8:61:21:af:d9:1b:f0:34:b7:35:57: 7c:68:42:37:dd:6c:13:b1:da:1f:36:07:3b:dc:35: bb:70:e4:3f:ec:09:ee:aa:b6:f6:a2:3e:da:11:eb: e3:cd:54:59:40:fb:86:d1:f5:42:46:b9:0b:4e:a8: 14:45:30:97:6e:ac:9f:32:60:2e:9b:d2:d0:5b:fc: 98:6e:7f:76:99:6d:7d:94:e8:8d:31:8a:83:e2:37: f0:f1:42:03:4a:35:f8:7e:2c:bf:67:37:9e:44:02: a9:f7:23:5e:54:6c:74:9c:fe:3c:83:c7:ca:70:87: dc:3d:e9:26:c4:7d:81:b1:13:59:51:67:7e:45:c9: 84:e7:70:e0:28:16:5b:53:8e:26:1a:04:e8:ce:1b: 5a:c1:ab:5b:f0:dc:d8:58:fa:75:18:7f:95:a1:38: dd:85:48:51:e5:06:2a:c3:19:39:70:c7:97:a7:97: 09:b3:86:e9:38:a7:8f:ee:83:da:96:f4:55:8c:e9: bb:f0:0b:40:e2:af:b2:74:e8:01:d6:aa:6c:5a:8d: 38:d4:9d:81:81:7f:15:f2:59:dd:a7:61:87:cf:9f: c0:f7:cf:0e:d1:ad:36:74:00:3d:a3:22:08:9d:8a: 34:bd:0a:ec:8d:99:6d:fc:54:2e:1c:27:d3:b8:b3: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:E5:31:8E:AA:CB:43:AF:E5:F7:63:60:1B:7A:12:8F:DD:6C:CA X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.0.0/22 Signature Algorithm: sha256WithRSAEncryption 04:39:4c:1f:f1:83:c7:c6:5a:ac:8e:ee:80:90:60:a7:5b:b6: 7c:75:e8:02:72:68:8e:83:f9:48:cc:40:b5:12:58:a9:df:ee: 5e:e5:54:49:68:a1:a9:25:a5:0b:ef:3d:2c:30:9e:ed:84:6f: 7f:79:47:f3:b3:de:54:5c:a3:20:5b:e0:86:5f:14:dd:40:4f: 18:b4:12:89:2e:d9:f1:bc:fa:26:92:c6:8c:49:3d:5d:cf:86: d6:32:fb:a4:6d:71:c8:c0:58:bc:46:32:4c:95:f4:07:e5:ec: e8:36:c0:51:72:1c:4c:26:87:25:4e:ec:ff:8f:90:44:0b:93: b6:33:ab:0d:59:1d:68:fb:f6:08:b8:45:64:23:77:ac:b4:59: c5:8d:68:9a:20:e3:22:26:24:31:2f:3b:af:b3:e4:ec:99:76: b6:c2:6d:50:fa:0b:a3:88:1b:11:4a:17:87:ca:87:a1:eb:09: f6:19:fd:92:c7:dd:0e:80:d4:6a:94:f9:fd:66:07:09:95:41: 41:e5:b6:74:d4:6b:bd:2d:be:72:30:ef:fd:4b:8f:2c:53:2e: d9:e2:35:3c:44:12:05:d1:c2:50:16:4f:fb:85:27:75:20:c6: 40:9f:4f:14:98:9d:21:f4:4e:ef:26:c7:23:08:c0:bb:ce:a6: 1b:de:32:ad -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUDQKr22ExXaBIcAuhaLFuMBlLV7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzdaFw0yNzEwMDQwNjEzMzdaMDMxMTAvBgNV BAMTKDkzN0FFNTMxOEVBQUNCNDNBRkU1Rjc2MzYwMUI3QTEyOEZERDZDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfyXoYSGv2RvwNLc1V3xoQjfd bBOx2h82BzvcNbtw5D/sCe6qtvaiPtoR6+PNVFlA+4bR9UJGuQtOqBRFMJdurJ8y YC6b0tBb/Jhuf3aZbX2U6I0xioPiN/DxQgNKNfh+LL9nN55EAqn3I15UbHSc/jyD x8pwh9w96SbEfYGxE1lRZ35FyYTncOAoFltTjiYaBOjOG1rBq1vw3NhY+nUYf5Wh ON2FSFHlBirDGTlwx5enlwmzhuk4p4/ug9qW9FWM6bvwC0Dir7J06AHWqmxajTjU nYGBfxXyWd2nYYfPn8D3zw7RrTZ0AD2jIgidijS9CuyNmW38VC4cJ9O4s80lAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUk3rlMY6qy0Ov5fdjYBt6Eo/dbMowHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxOTkzOTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJtQgAwDQYJKoZIhvcNAQELBQADggEBAAQ5TB/xg8fGWqyO7oCQYKdb tnx16AJyaI6D+UjMQLUSWKnf7l7lVElooaklpQvvPSwwnu2Eb395R/Oz3lRcoyBb 4IZfFN1ATxi0Eoku2fG8+iaSxoxJPV3PhtYy+6RtccjAWLxGMkyV9Afl7Og2wFFy HEwmhyVO7P+PkEQLk7Yzqw1ZHWj79gi4RWQjd6y0WcWNaJog4yImJDEvO6+z5OyZ drbCbVD6C6OIGxFKF4fKh6HrCfYZ/ZLH3Q6A1GqU+f1mBwmVQUHltnTUa70tvnIw 7/1LjyxTLtniNTxEEgXRwlAWT/uFJ3UgxkCfTxSYnSH0Tu8mxyMIwLvOphveMq0= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:45 2026 by rpki-client