$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208905.roa File: AS208905.roa (raw, json) Hash identifier: mI8gbBem7xiERVkPWXii24G84bhsfR/61aOaK0ByHkg= Subject key identifier: 3A:E1:B3:18:6C:3D:45:DB:03:85:E8:4C:9E:0C:96:5E:6F:7F:F8:8F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 220A88E72D59B869E070764129A9EC4860138178 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208905.roa Signing time: Mon 05 Oct 2026 06:13:48 +0000 ROA not before: Mon 05 Oct 2026 06:08:48 +0000 ROA not after: Mon 04 Oct 2027 06:13:48 +0000 asID: 208905 IP address blocks: 109.66.4.0/24 maxlen: 24 109.66.5.0/24 maxlen: 24 109.66.6.0/24 maxlen: 24 109.66.7.0/24 maxlen: 24 109.66.78.0/24 maxlen: 24 109.66.79.0/24 maxlen: 24 109.66.85.0/24 maxlen: 24 109.66.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0a:88:e7:2d:59:b8:69:e0:70:76:41:29:a9:ec:48:60:13:81:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:48 2026 GMT Not After : Oct 4 06:13:48 2027 GMT Subject: CN=3AE1B3186C3D45DB0385E84C9E0C965E6F7FF88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:eb:7c:1d:27:76:02:7f:c5:ee:70:83:a5:41: 38:43:a2:19:ab:ba:09:05:98:fc:01:55:ee:5b:37: 0a:0c:07:9d:f9:4c:5f:fd:d2:d5:d2:85:18:67:49: 5c:6a:2a:6d:66:22:63:d9:39:0e:e1:ae:da:da:27: e4:66:ae:5b:de:33:cd:c1:70:71:65:30:58:63:d5: 89:ac:98:37:6a:04:8a:f2:7c:ea:c3:92:14:83:94: 6b:40:fd:c0:3e:ad:5a:b3:a4:d9:fd:14:22:82:aa: e2:1c:9b:cf:cd:49:52:d5:f6:7e:fa:26:cf:d1:84: 9f:e7:d6:64:43:4d:23:0f:e4:0a:9b:13:20:92:9c: 77:a0:60:fe:ed:92:6b:01:8e:91:1b:ac:f5:1e:4a: 1a:83:5c:83:53:dc:bb:c1:e7:a7:b7:bc:2a:b6:66: 20:01:88:f0:13:9d:51:3b:d5:bc:b0:d2:b5:e2:f7: b6:77:38:8a:af:12:02:77:a2:e4:56:d5:31:a2:a8: da:21:54:39:bf:21:ac:69:ca:4f:21:d4:99:91:fb: f4:45:3e:f6:c3:03:fc:13:3c:79:bf:6b:cf:91:8f: 25:c6:24:e5:39:35:61:bf:bc:c5:42:3d:05:e7:99: 88:eb:17:25:6e:28:a8:f7:85:64:90:1b:54:39:bf: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:B3:18:6C:3D:45:DB:03:85:E8:4C:9E:0C:96:5E:6F:7F:F8:8F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208905.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.4.0/22 109.66.78.0/23 109.66.85.0-109.66.86.255 Signature Algorithm: sha256WithRSAEncryption 05:57:1e:94:8e:aa:e3:f5:14:cf:f3:2d:74:4a:44:ef:00:09: 74:45:b4:66:d7:29:29:f7:64:ef:b2:2d:79:a4:d1:2b:ad:ed: 28:a6:0c:f9:1b:29:ba:c4:03:5a:7e:95:0a:0a:11:6a:a6:3b: 67:a7:b3:8d:6d:a9:8d:0e:9b:bf:ea:d3:9f:e4:c7:ba:ab:61: 2e:98:39:4d:0e:c8:88:dc:6b:c3:9a:d2:ea:08:0d:26:a1:fe: ce:ff:11:98:59:2c:01:82:1a:17:36:a0:76:e5:06:25:c3:b0: 3c:a8:c8:f5:e4:02:64:26:75:69:1c:27:90:ab:7d:f4:c5:b6: a4:73:19:8f:bc:4d:07:95:42:6b:8e:9c:45:a9:d6:ca:70:24: 0e:95:db:10:f4:9f:c1:6c:9b:b1:aa:df:46:b8:95:0f:17:d1: 30:46:4f:96:98:5e:88:02:a5:09:c0:83:81:e6:b8:70:3b:43: 27:f0:7c:83:6c:46:d6:7b:bf:6a:92:0c:c6:9c:dd:4a:e1:26: e5:fe:98:ce:e2:45:a9:2e:b9:d2:fc:c8:7e:f9:f2:20:e7:b8: 0c:3d:be:77:a8:8e:fe:93:63:cf:d4:77:b5:df:38:6c:72:07: d1:4b:fd:64:cb:d0:65:83:e8:a4:18:71:5e:07:d9:8d:18:6f: 86:92:56:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIgqI5y1ZuGngcHZBKansSGATgXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDhaFw0yNzEwMDQwNjEzNDhaMDMxMTAvBgNV BAMTKDNBRTFCMzE4NkMzRDQ1REIwMzg1RTg0QzlFMEM5NjVFNkY3RkY4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp63wdJ3YCf8XucIOlQThDohmr ugkFmPwBVe5bNwoMB535TF/90tXShRhnSVxqKm1mImPZOQ7hrtraJ+RmrlveM83B cHFlMFhj1YmsmDdqBIryfOrDkhSDlGtA/cA+rVqzpNn9FCKCquIcm8/NSVLV9n76 Js/RhJ/n1mRDTSMP5AqbEyCSnHegYP7tkmsBjpEbrPUeShqDXINT3LvB56e3vCq2 ZiABiPATnVE71byw0rXi97Z3OIqvEgJ3ouRW1TGiqNohVDm/Iaxpyk8h1JmR+/RF PvbDA/wTPHm/a8+RjyXGJOU5NWG/vMVCPQXnmYjrFyVuKKj3hWSQG1Q5v/wXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOuGzGGw9RdsDhehMngyWXm9/+I8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDg5MDUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAE AgABMBoDBAJtQgQDBAFtQk4wDAMEAG1CVQMEAG1CVjANBgkqhkiG9w0BAQsFAAOC AQEABVcelI6q4/UUz/MtdEpE7wAJdEW0ZtcpKfdk77IteaTRK63tKKYM+RspusQD Wn6VCgoRaqY7Z6ezjW2pjQ6bv+rTn+THuqthLpg5TQ7IiNxrw5rS6ggNJqH+zv8R mFksAYIaFzagduUGJcOwPKjI9eQCZCZ1aRwnkKt99MW2pHMZj7xNB5VCa46cRanW ynAkDpXbEPSfwWybsarfRriVDxfRMEZPlpheiAKlCcCDgea4cDtDJ/B8g2xG1nu/ apIMxpzdSuEm5f6YzuJFqS650vzIfvnyIOe4DD2+d6iO/pNjz9R3td84bHIH0Uv9 ZMvQZYPopBhxXgfZjRhvhpJWDQ== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:42 2026 by rpki-client