$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199856.roa File: AS199856.roa (raw, json) Hash identifier: 7j2bgE2505dzdA8zDb9qHt74JxuZgve31naBC5QItyo= Subject key identifier: 68:21:84:6A:74:57:69:F1:52:68:9C:39:75:44:B9:B6:74:94:82:90 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 79F4FE7E4F725DED8E0A5CB938A13FF654601F97 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199856.roa Signing time: Thu 22 Oct 2026 20:50:22 +0000 ROA not before: Thu 22 Oct 2026 20:45:22 +0000 ROA not after: Thu 21 Oct 2027 20:50:22 +0000 asID: 199856 IP address blocks: 79.176.200.0/24 maxlen: 24 79.182.120.0/24 maxlen: 24 79.182.200.0/24 maxlen: 24 79.183.207.0/24 maxlen: 24 109.64.200.0/24 maxlen: 24 109.64.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f4:fe:7e:4f:72:5d:ed:8e:0a:5c:b9:38:a1:3f:f6:54:60:1f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 22 20:45:22 2026 GMT Not After : Oct 21 20:50:22 2027 GMT Subject: CN=6821846A745769F152689C397544B9B674948290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:34:87:8c:58:6c:66:14:ad:57:be:9a:4c: ce:52:a4:e9:7b:42:6f:19:80:21:7c:cc:89:3c:f4: 82:6d:7b:9c:f0:c8:ad:10:1f:70:17:4d:80:ae:8f: f4:33:be:a6:54:e3:c9:dc:89:0d:97:34:6d:21:36: 2d:7d:91:35:d7:c3:45:e7:5e:52:e2:bd:11:08:c0: 9e:62:c3:db:e2:93:58:a1:c9:92:c6:0e:84:04:05: 81:08:f3:31:0b:d2:5c:58:2d:f0:17:12:cb:41:02: 8b:e7:81:8e:7e:1a:5a:f3:a1:68:61:64:1a:0e:ec: 0c:27:72:45:47:88:fc:23:89:9e:8e:74:c4:6a:81: 5f:33:97:bc:22:1c:79:10:73:9a:cf:35:ba:43:d9: da:3d:59:11:5c:66:41:4b:ff:83:f0:88:7d:36:42: 40:08:64:e9:03:c3:0d:4f:c8:d1:5d:91:31:e5:d5: b9:3a:2c:8e:6f:ad:2f:cd:14:46:a0:5d:0c:d0:83: a4:2e:e1:2b:a9:29:d0:5f:27:c4:b5:5a:b7:55:9b: 92:f5:84:74:f6:61:fe:ea:8d:53:c7:7b:01:a6:fd: a9:c7:90:cb:d0:bb:6f:d4:19:2f:0d:e0:36:f8:b7: d4:3e:88:0c:fe:47:77:32:1a:3a:01:a5:3b:6d:b5: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:84:6A:74:57:69:F1:52:68:9C:39:75:44:B9:B6:74:94:82:90 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS199856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.200.0/24 79.182.120.0/24 79.182.200.0/24 79.183.207.0/24 109.64.200.0/24 109.64.255.0/24 Signature Algorithm: sha256WithRSAEncryption 32:f7:c6:34:19:17:61:58:e9:88:b0:c9:59:56:fe:39:1a:ef: 5c:7d:60:e8:ac:e2:d6:32:e1:3f:f6:73:52:15:b6:87:e4:65: 63:90:b0:bc:91:00:c7:a7:c1:a4:80:f7:19:87:a3:fe:2c:05: f2:42:c8:b7:4a:ca:66:9f:63:c8:a1:c0:ef:07:ea:1a:6c:b3: 5d:f8:fb:38:87:61:93:41:07:93:f1:1e:00:85:e2:bf:ef:24: 5b:42:83:a7:ed:a1:52:83:a3:88:20:7d:23:4e:2c:f6:08:34: ab:27:38:0c:94:0d:c4:89:cd:99:50:8b:2d:96:3a:43:21:c3: 64:d9:ca:e0:39:9b:a2:54:10:a5:af:15:b4:d3:a7:79:55:3f: 23:b0:cc:27:e0:8b:eb:d1:79:e5:dd:e4:03:fb:3c:b9:59:71: 9b:6f:fc:b7:fb:82:21:1d:8f:d2:74:b8:f8:48:5a:71:45:1e: e0:08:88:be:b1:b4:ca:aa:67:07:e1:b0:61:3f:fd:45:9f:e7: 52:ca:a8:41:00:41:61:d9:9b:04:ca:09:bb:94:77:7c:5e:e2: a4:75:9b:b8:98:7a:cc:33:15:93:b6:58:a2:b5:49:c4:80:6f: 61:6c:74:65:ae:8a:e3:2f:45:88:0f:4d:86:b4:68:38:04:b3: 64:a0:e5:29 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUefT+fk9yXe2OCly5OKE/9lRgH5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjIyMDQ1MjJaFw0yNzEwMjEyMDUwMjJaMDMxMTAvBgNV BAMTKDY4MjE4NDZBNzQ1NzY5RjE1MjY4OUMzOTc1NDRCOUI2NzQ5NDgyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cTSHjFhsZhStV76aTM5SpOl7 Qm8ZgCF8zIk89IJte5zwyK0QH3AXTYCuj/QzvqZU48nciQ2XNG0hNi19kTXXw0Xn XlLivREIwJ5iw9vik1ihyZLGDoQEBYEI8zEL0lxYLfAXEstBAovngY5+GlrzoWhh ZBoO7AwnckVHiPwjiZ6OdMRqgV8zl7wiHHkQc5rPNbpD2do9WRFcZkFL/4PwiH02 QkAIZOkDww1PyNFdkTHl1bk6LI5vrS/NFEagXQzQg6Qu4SupKdBfJ8S1WrdVm5L1 hHT2Yf7qjVPHewGm/anHkMvQu2/UGS8N4Db4t9Q+iAz+R3cyGjoBpTtttbLLAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUaCGEanRXafFSaJw5dUS5tnSUgpAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxOTk4NTYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoE AgABMCQDBABPsMgDBABPtngDBABPtsgDBABPt88DBABtQMgDBABtQP8wDQYJKoZI hvcNAQELBQADggEBADL3xjQZF2FY6YiwyVlW/jka71x9YOis4tYy4T/2c1IVtofk ZWOQsLyRAMenwaSA9xmHo/4sBfJCyLdKymafY8ihwO8H6hpss134+ziHYZNBB5Px HgCF4r/vJFtCg6ftoVKDo4ggfSNOLPYINKsnOAyUDcSJzZlQiy2WOkMhw2TZyuA5 m6JUEKWvFbTTp3lVPyOwzCfgi+vReeXd5AP7PLlZcZtv/Lf7giEdj9J0uPhIWnFF HuAIiL6xtMqqZwfhsGE//UWf51LKqEEAQWHZmwTKCbuUd3xe4qR1m7iYeswzFZO2 WKK1ScSAb2FsdGWuiuMvRYgPTYa0aDgEs2Sg5Sk= -----END CERTIFICATE-----Generated at Wed Oct 28 03:07:35 2026 by rpki-client