$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207083.roa File: AS207083.roa (raw, json) Hash identifier: zTfElF2Dc4lJqToTEvj3r3/+t2G/7yfEhyaDGXrf5gk= Subject key identifier: E9:9B:57:47:03:68:07:8E:C9:83:F8:F1:E4:18:15:1E:58:26:64:C0 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6036908D4D576D115FAC6FE256F3373D73ADB5AA Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207083.roa Signing time: Mon 05 Oct 2026 06:13:44 +0000 ROA not before: Mon 05 Oct 2026 06:08:44 +0000 ROA not after: Mon 04 Oct 2027 06:13:44 +0000 asID: 207083 IP address blocks: 109.66.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:36:90:8d:4d:57:6d:11:5f:ac:6f:e2:56:f3:37:3d:73:ad:b5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:44 2026 GMT Not After : Oct 4 06:13:44 2027 GMT Subject: CN=E99B57470368078EC983F8F1E418151E582664C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:bf:2d:b8:0a:32:5a:86:98:60:6d:c7:f5: 99:23:4f:12:33:fa:9a:3f:44:3c:4f:7e:7a:e8:69: 8b:7a:28:55:10:20:4d:30:2d:80:93:5d:8b:a2:d6: 2e:cd:a5:38:61:01:7c:c9:f4:97:f3:6a:31:06:c9: 56:67:3f:ca:26:dc:5f:93:30:ae:06:fa:61:db:1c: 32:a1:ad:33:0b:73:8f:f4:27:b8:d1:3d:14:e8:42: 9a:6c:5a:1f:20:b9:dc:b5:de:d0:45:1f:73:50:af: a8:a6:ac:17:5d:c7:7a:3d:87:96:da:cf:35:9e:88: b3:8c:90:56:34:c6:ad:11:95:12:61:e8:e4:0e:83: bd:be:47:d6:95:1f:6b:de:8d:20:9d:5d:6a:2b:d7: 1d:73:fc:0b:5b:23:7f:34:0e:e4:85:5e:f2:df:db: 96:49:84:bc:b6:0f:f8:c0:d2:0b:c7:62:b5:cf:da: bb:f0:31:e0:a8:77:5a:ab:04:fe:04:af:3d:d6:33: d9:d1:4f:af:27:d4:af:72:4c:90:5d:c9:14:db:1a: 05:8c:23:f8:6b:4c:4e:5d:7f:08:d5:c5:6e:24:b4: eb:10:8e:86:88:73:ca:99:fa:5a:64:7f:ca:6f:bd: b4:ae:bd:b8:51:f7:4f:56:5c:30:0f:99:75:64:2e: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9B:57:47:03:68:07:8E:C9:83:F8:F1:E4:18:15:1E:58:26:64:C0 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.67.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:f5:54:93:03:d8:13:fd:8b:e1:b0:27:64:d9:91:eb:c2:b1: 40:b3:a4:c8:8e:42:10:cd:93:cf:3d:f9:9b:a5:12:62:4a:5d: 32:1d:5d:3e:13:1e:b5:27:9b:a4:ad:12:7e:98:95:1a:88:3e: 8a:b2:48:5d:05:00:6d:56:fd:8d:27:c8:d0:c9:d5:06:51:f2: 8d:5b:95:4a:0d:03:d3:12:01:10:b9:04:f2:53:7e:bd:46:23: 13:11:48:c5:65:c5:75:6b:7f:53:aa:c1:66:2f:3f:85:c6:99: 8d:26:8a:d0:c6:d8:7b:a9:1e:05:e5:42:b0:01:10:a0:73:80: 5f:84:7c:d2:52:a6:14:a2:84:fd:44:a5:13:4f:13:c9:bc:8d: e1:b2:db:7c:9f:51:8c:ad:4f:a4:cc:00:1b:98:8a:c7:f8:84: 65:f0:6d:a1:7d:fd:c6:45:f1:c2:fe:e7:9c:9e:5c:2e:e3:bb: 8f:4c:6c:8e:6b:46:e4:1a:bb:04:a7:fc:66:23:00:83:f7:69: 25:46:49:3c:53:f9:00:73:b7:c7:10:c4:19:4d:a9:2a:60:81: 29:eb:49:d1:97:0f:b6:16:b1:6b:25:fc:57:bd:09:a7:07:45: bd:1b:40:e3:f7:b9:40:52:a9:36:9a:35:18:b3:43:54:22:7e: c5:a1:f3:8d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUYDaQjU1XbRFfrG/iVvM3PXOttaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDRaFw0yNzEwMDQwNjEzNDRaMDMxMTAvBgNV BAMTKEU5OUI1NzQ3MDM2ODA3OEVDOTgzRjhGMUU0MTgxNTFFNTgyNjY0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnb8tuAoyWoaYYG3H9ZkjTxIz +po/RDxPfnroaYt6KFUQIE0wLYCTXYui1i7NpThhAXzJ9JfzajEGyVZnP8om3F+T MK4G+mHbHDKhrTMLc4/0J7jRPRToQppsWh8gudy13tBFH3NQr6imrBddx3o9h5ba zzWeiLOMkFY0xq0RlRJh6OQOg72+R9aVH2vejSCdXWor1x1z/AtbI380DuSFXvLf 25ZJhLy2D/jA0gvHYrXP2rvwMeCod1qrBP4Erz3WM9nRT68n1K9yTJBdyRTbGgWM I/hrTE5dfwjVxW4ktOsQjoaIc8qZ+lpkf8pvvbSuvbhR909WXDAPmXVkLmSTAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU6ZtXRwNoB47Jg/jx5BgVHlgmZMAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDcwODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQkMwDQYJKoZIhvcNAQELBQADggEBABz1VJMD2BP9i+GwJ2TZkevC sUCzpMiOQhDNk889+ZulEmJKXTIdXT4THrUnm6StEn6YlRqIPoqySF0FAG1W/Y0n yNDJ1QZR8o1blUoNA9MSARC5BPJTfr1GIxMRSMVlxXVrf1OqwWYvP4XGmY0mitDG 2HupHgXlQrABEKBzgF+EfNJSphSihP1EpRNPE8m8jeGy23yfUYytT6TMABuYisf4 hGXwbaF9/cZF8cL+55yeXC7ju49MbI5rRuQauwSn/GYjAIP3aSVGSTxT+QBzt8cQ xBlNqSpggSnrSdGXD7YWsWsl/Fe9CacHRb0bQOP3uUBSqTaaNRizQ1QifsWh840= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:39 2026 by rpki-client