
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19949.roa
File: AS19949.roa (raw, json)
Hash identifier: r8xrLbAYl7RPHMx9FX05Xi/QNC2IZ+0eyGZcIE0RKDo=
Subject key identifier: CE:1D:1E:0F:C3:E3:BA:20:CF:94:C3:AB:B1:95:82:C0:50:CA:88:22
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 73FF08A0EBC9867EEBFCC6F796802631D4D45467
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19949.roa
Signing time: Fri 09 Oct 2026 01:50:08 +0000
ROA not before: Fri 09 Oct 2026 01:45:08 +0000
ROA not after: Fri 08 Oct 2027 01:50:08 +0000
asID: 19949
IP address blocks: 79.182.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ff:08:a0:eb:c9:86:7e:eb:fc:c6:f7:96:80:26:31:d4:d4:54:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 9 01:45:08 2026 GMT
Not After : Oct 8 01:50:08 2027 GMT
Subject: CN=CE1D1E0FC3E3BA20CF94C3ABB19582C050CA8822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:58:e2:8b:e8:c6:ab:1a:fc:88:1d:d2:9b:
8c:02:42:55:eb:03:60:98:61:b9:80:e8:6e:6b:9e:
c8:2c:b3:d6:ac:44:98:e4:02:7f:05:45:c6:48:78:
13:b3:55:b4:8e:47:06:03:74:20:59:b4:7c:bc:03:
21:4a:e0:88:d9:a4:5f:79:e5:b1:3c:30:02:21:53:
56:04:84:2b:83:28:5e:1a:02:fb:51:e1:52:ae:dd:
f2:76:aa:32:5d:4d:3c:47:8d:de:9c:bc:95:57:da:
f4:ea:c9:90:71:92:29:78:0d:12:e9:a3:95:20:09:
65:f7:69:2b:18:9f:55:3a:99:cc:5b:74:31:df:7a:
b7:71:15:ba:0c:67:fe:89:7f:35:f0:89:ba:cd:b7:
31:7b:a3:01:9b:c6:31:d6:cb:6d:a6:51:5e:60:0e:
63:63:d6:69:c7:71:a0:6b:18:75:24:5f:8a:54:6f:
ab:5d:6f:40:75:a1:6a:a9:f3:f1:58:97:a8:d6:d6:
94:8f:61:7d:01:04:0d:36:93:a2:98:34:67:1e:21:
28:4b:95:56:49:d7:4d:f2:c7:b9:6a:52:77:9f:ed:
c9:74:fb:4d:fd:cb:b1:a5:0e:94:66:cc:c7:70:00:
0e:90:d6:45:00:4d:f1:eb:ed:78:64:be:43:91:f9:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:1E:0F:C3:E3:BA:20:CF:94:C3:AB:B1:95:82:C0:50:CA:88:22
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS19949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d5:65:e2:80:33:9e:01:ae:64:f7:55:80:86:7e:e2:9c:7e:
33:e1:f3:6b:27:1f:23:c0:27:3c:bc:87:5b:56:47:09:16:1d:
c3:dc:74:57:db:90:e4:84:60:28:2a:ac:b6:7e:46:91:6a:ee:
25:0a:ac:32:e8:2c:8b:98:c1:6d:95:88:29:92:8f:90:b5:fa:
ff:e8:a4:4a:8d:97:3b:6a:d2:01:bc:0c:e1:20:e0:21:01:02:
91:14:45:ee:c4:89:f1:ec:9a:61:95:c4:00:a2:6b:d7:88:8c:
06:4e:e6:36:2d:e3:7b:75:c7:cb:30:87:b6:a2:95:ba:ff:ed:
d1:91:d8:fb:ef:c8:8b:f5:f8:11:37:ab:20:ff:0d:45:91:0b:
3e:d5:b2:ba:1f:14:f3:3e:86:e7:bb:cc:c9:c5:13:66:e5:b7:
05:bc:c5:e6:3f:87:ec:88:d5:80:8a:01:f2:d5:65:06:b9:96:
a5:81:ca:e8:ec:08:a7:67:c0:09:ab:b1:bb:5a:76:0c:20:1b:
7b:bd:db:0f:99:c2:d2:60:2f:b0:d8:56:9b:5b:17:66:36:79:
78:3a:c4:15:b4:e2:84:95:28:02:b7:72:ab:8c:3c:34:d4:f4:
f6:76:0a:bb:57:a4:a3:e7:e7:c7:2d:5d:d4:a5:4f:d9:e3:33:
35:31:c1:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:30 2026 by rpki-client