$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199707.roa File: AS199707.roa (raw, json) Hash identifier: OdMAlCMIBPEm+R/hSFVQ8oQi4KD7EYuO+6VXGtSyNmw= Subject key identifier: DC:1D:E9:88:30:EF:7F:5E:E3:FB:53:DA:E4:9B:2B:5B:FE:80:7F:1E Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 73AA36CDD395387BC970FDA93E976A52FD9C5C27 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199707.roa Signing time: Thu 08 Oct 2026 06:23:26 +0000 ROA not before: Thu 08 Oct 2026 06:18:26 +0000 ROA not after: Thu 07 Oct 2027 06:23:26 +0000 asID: 199707 IP address blocks: 79.176.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:aa:36:cd:d3:95:38:7b:c9:70:fd:a9:3e:97:6a:52:fd:9c:5c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 8 06:18:26 2026 GMT Not After : Oct 7 06:23:26 2027 GMT Subject: CN=DC1DE98830EF7F5EE3FB53DAE49B2B5BFE807F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:81:90:cc:ab:14:19:3a:48:90:52:1a:a3: 30:5c:b2:63:64:bb:3c:a3:5c:2c:84:ed:67:c6:3b: bc:80:f6:52:c9:f1:9a:d4:46:7b:c9:1c:a8:c6:e8: 73:d4:29:e5:e3:8d:49:7e:af:b9:bd:b2:33:46:18: 63:1a:e6:9c:85:97:ac:13:45:0c:e5:b2:b0:42:b0: be:d0:18:73:99:43:43:c8:7a:45:83:61:78:fb:b6: 47:6f:e7:26:53:b1:e5:ea:21:8d:a8:4b:bb:a5:79: 52:8d:3b:b7:6e:b5:7c:6c:e1:12:7d:fd:55:7e:87: 0d:f4:2b:9f:c0:aa:ab:14:a5:fe:97:6c:e9:ae:61: 5c:3b:ab:0a:11:04:d7:66:60:07:a2:b2:73:b8:ec: 8f:eb:70:8f:45:d1:b8:fd:52:96:05:df:9f:8c:1d: 48:f5:ae:9a:11:de:7d:09:af:ff:f5:2e:e8:61:db: 20:6a:b4:1c:a0:cc:38:8b:70:a9:64:f0:86:69:88: 33:51:1a:77:a2:df:3f:e1:dd:da:d0:53:98:12:5a: 02:d9:56:08:ed:a4:a5:38:a2:f6:38:b5:77:24:c3: d4:ed:81:63:4b:8c:01:c0:5a:35:58:95:96:1a:68: 52:4f:24:b9:5a:bf:b2:5d:22:a3:a1:5d:00:49:5d: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:E9:88:30:EF:7F:5E:E3:FB:53:DA:E4:9B:2B:5B:FE:80:7F:1E X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.26.0/24 Signature Algorithm: sha256WithRSAEncryption 80:cb:42:56:ed:69:e6:02:99:67:12:96:9c:23:ae:94:68:b2: b8:6a:6d:6d:14:a8:e0:04:b9:85:ca:e6:9f:c5:aa:e7:3a:2d: dc:99:28:e7:57:16:71:7b:42:39:78:1a:cb:1c:fc:9a:b7:eb: 61:68:46:c2:0d:c9:9b:ec:fd:bc:a5:30:58:59:3a:5b:cf:3b: 4a:e3:03:2c:63:76:96:b6:76:b4:d6:7e:f2:32:77:7e:b7:63: 5e:cc:bb:eb:f4:63:f8:8e:58:51:0e:01:45:ab:f8:3f:28:ac: c6:1c:ec:52:7c:d3:01:cd:b7:b5:ae:a9:cb:42:6a:85:08:35: 6f:22:3f:4a:4a:58:9f:74:05:fe:96:58:a0:33:da:54:ab:40: 48:96:97:9d:ac:ac:c1:e9:b9:82:96:91:af:de:d5:30:e4:5d: 2c:fb:70:49:7d:3d:62:b3:5c:b2:f1:ba:49:d5:b1:8b:90:06: ee:17:73:56:ac:e7:30:5e:81:f5:3b:d5:c0:a8:a4:70:90:74: e0:02:61:dd:a0:53:ef:a3:02:fd:fb:50:18:38:53:90:ec:df: 7a:0f:0c:70:a7:e1:84:fe:a5:a2:1d:27:8f:33:c7:2b:1a:47: 4e:5a:9a:30:ab:59:0a:90:8b:51:b3:a7:52:b2:ad:f7:22:ed: da:77:5b:50 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUc6o2zdOVOHvJcP2pPpdqUv2cXCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDgwNjE4MjZaFw0yNzEwMDcwNjIzMjZaMDMxMTAvBgNV BAMTKERDMURFOTg4MzBFRjdGNUVFM0ZCNTNEQUU0OUIyQjVCRkU4MDdGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M4GQzKsUGTpIkFIaozBcsmNk uzyjXCyE7WfGO7yA9lLJ8ZrURnvJHKjG6HPUKeXjjUl+r7m9sjNGGGMa5pyFl6wT RQzlsrBCsL7QGHOZQ0PIekWDYXj7tkdv5yZTseXqIY2oS7uleVKNO7dutXxs4RJ9 /VV+hw30K5/AqqsUpf6XbOmuYVw7qwoRBNdmYAeisnO47I/rcI9F0bj9UpYF35+M HUj1rpoR3n0Jr//1Luhh2yBqtBygzDiLcKlk8IZpiDNRGnei3z/h3drQU5gSWgLZ VgjtpKU4ovY4tXckw9TtgWNLjAHAWjVYlZYaaFJPJLlav7JdIqOhXQBJXY25AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU3B3piDDvf17j+1Pa5JsrW/6Afx4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxOTk3MDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPsBowDQYJKoZIhvcNAQELBQADggEBAIDLQlbtaeYCmWcSlpwjrpRo srhqbW0UqOAEuYXK5p/Fquc6LdyZKOdXFnF7Qjl4Gssc/Jq362FoRsINyZvs/byl MFhZOlvPO0rjAyxjdpa2drTWfvIyd363Y17Mu+v0Y/iOWFEOAUWr+D8orMYc7FJ8 0wHNt7WuqctCaoUINW8iP0pKWJ90Bf6WWKAz2lSrQEiWl52srMHpuYKWka/e1TDk XSz7cEl9PWKzXLLxuknVsYuQBu4Xc1as5zBegfU71cCopHCQdOACYd2gU++jAv37 UBg4U5Ds33oPDHCn4YT+paIdJ48zxysaR05amjCrWQqQi1Gzp1Kyrfci7dp3W1A= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:34 2026 by rpki-client