
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207588.roa
File: AS207588.roa (raw, json)
Hash identifier: vonavKFFAAgx9I5B1JM31qHsp5kdCx0QEnxLjPzessU=
Subject key identifier: 9A:35:B3:89:93:C1:EA:47:E2:26:41:6E:74:A4:76:D2:9E:73:1A:CF
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 27DAF8C27D9B404373347FDB72319BCBE2C3FDBE
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207588.roa
Signing time: Tue 06 Oct 2026 09:52:00 +0000
ROA not before: Tue 06 Oct 2026 09:47:00 +0000
ROA not after: Tue 05 Oct 2027 09:52:00 +0000
asID: 207588
IP address blocks: 79.176.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:da:f8:c2:7d:9b:40:43:73:34:7f:db:72:31:9b:cb:e2:c3:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 6 09:47:00 2026 GMT
Not After : Oct 5 09:52:00 2027 GMT
Subject: CN=9A35B38993C1EA47E226416E74A476D29E731ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:d9:fc:85:fc:5f:3a:d1:5e:40:aa:a8:aa:
69:d7:66:c4:b6:5f:49:2c:3e:b3:08:a8:c6:c8:e2:
8f:48:0b:68:eb:93:59:91:51:5c:b4:86:f4:a6:d0:
64:3f:77:71:a0:35:d0:60:34:15:5a:26:14:84:9e:
24:ca:73:40:3c:9c:5e:3d:61:1e:7a:b7:0c:09:9c:
c6:d6:ce:73:7f:ba:10:68:08:cf:bb:dc:b5:c6:a5:
af:24:6d:1e:8f:74:2c:c4:69:f5:98:6a:cd:bd:12:
a1:1c:e8:8e:56:04:2a:09:73:1a:94:8d:7e:61:bf:
9d:b6:e7:f8:23:d7:17:af:52:7e:41:06:5d:fa:e7:
2c:22:b9:83:3b:3a:07:d2:41:28:cd:13:75:7d:a8:
4e:b4:0d:f9:d7:11:a8:9f:da:8a:5c:c8:9e:d1:16:
81:d2:60:9a:bb:32:e2:26:47:4e:5d:ae:48:c9:52:
61:54:3f:4a:71:fb:cc:4c:74:67:ac:ba:db:1f:be:
98:b3:8a:59:53:82:35:cb:00:ec:a1:ec:31:95:3f:
d0:ab:13:6e:03:53:86:a7:6f:53:1f:bb:15:f6:ca:
71:53:7c:82:52:df:1b:5b:23:a4:d4:8f:fd:7a:a6:
65:0b:5c:20:41:fd:a9:b9:fd:ef:55:29:38:40:a0:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:B3:89:93:C1:EA:47:E2:26:41:6E:74:A4:76:D2:9E:73:1A:CF
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:85:3c:a9:f2:ef:7a:b5:f9:0b:13:7f:47:01:32:07:00:79:
eb:35:7d:41:29:05:1b:8e:30:4f:12:ed:72:1b:42:07:bc:66:
80:af:b9:e4:3a:ab:39:ba:9e:2e:c9:89:f7:71:01:39:56:46:
b2:7c:5b:b6:40:6e:f4:83:8e:21:b4:13:a1:1a:d8:93:41:d4:
9b:c8:56:84:85:2b:3a:c4:40:47:29:01:00:8c:63:d2:fc:cb:
45:98:f2:f5:06:1b:8e:38:65:19:ff:18:c5:0c:0e:11:99:a5:
04:6e:b8:53:60:78:05:66:52:9a:17:44:50:48:e9:8b:f8:67:
ec:7b:67:9c:83:60:bc:36:c1:2b:78:03:1b:62:5d:6a:bd:22:
d5:f0:d9:3d:0a:05:20:c8:77:57:61:a7:81:fb:33:89:60:c0:
b8:92:db:17:ad:20:38:2d:f9:50:dc:57:f6:32:b2:df:d8:fa:
7d:31:1f:f0:cd:05:9a:45:6b:76:bb:b9:da:13:d2:e4:9c:2c:
75:d2:ff:c6:36:95:ae:08:43:9a:1e:e5:7e:9a:cb:e9:7e:46:
2e:df:27:40:39:ec:26:6a:93:1e:47:0b:22:02:f6:61:01:32:
af:eb:cd:1b:79:78:63:14:17:45:0e:e7:92:7c:38:fe:0e:c5:
70:23:65:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:43 2026 by rpki-client