$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208949.roa File: AS208949.roa (raw, json) Hash identifier: R4jUCpKoM1n4qyEIFvpst2GmyIgC8cTvD23sIB+qbSg= Subject key identifier: E8:1C:BB:96:C7:0F:1D:D0:13:3B:73:E4:30:9B:B9:54:D3:D1:36:DE Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 22929C92B89D9E7012C05F352E1B4CA44B76AA69 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208949.roa Signing time: Mon 05 Oct 2026 06:11:50 +0000 ROA not before: Mon 05 Oct 2026 06:06:50 +0000 ROA not after: Mon 04 Oct 2027 06:11:50 +0000 asID: 208949 IP address blocks: 79.182.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:92:9c:92:b8:9d:9e:70:12:c0:5f:35:2e:1b:4c:a4:4b:76:aa:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:06:50 2026 GMT Not After : Oct 4 06:11:50 2027 GMT Subject: CN=E81CBB96C70F1DD0133B73E4309BB954D3D136DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:18:45:0c:b9:45:f9:d0:1c:57:6f:4c:af: 6b:b2:58:9b:87:ec:0d:b7:f2:27:b5:9e:94:fb:d9: 8e:58:3d:48:b3:d3:20:8f:8e:7b:7a:6e:d3:e3:4b: b2:cf:e0:de:18:06:34:8a:31:95:9d:ee:0c:ad:5d: 2a:fe:54:95:26:b8:df:88:63:8f:ed:e0:65:de:55: 9b:0a:a2:cf:3a:8e:0b:d1:c1:19:d9:cd:7c:c1:0c: 29:17:54:28:71:3f:cf:72:76:68:e0:eb:10:50:e0: 45:87:61:9c:4e:6c:a8:a7:ea:9d:2b:c4:01:ac:69: 25:74:58:9f:a4:4a:f0:1f:cd:fd:7c:a2:c2:83:af: 04:59:68:43:48:09:c0:cb:1b:38:ee:0b:6f:d4:d1: cb:fe:46:73:2f:65:f6:40:d5:59:67:93:c9:94:93: 20:1f:a6:e1:49:10:d6:fb:89:6e:3e:07:69:4d:71: b9:95:c3:a5:67:05:ce:c3:53:6c:ba:f4:6f:6e:e2: ef:d1:2e:bb:0a:39:27:c4:3a:83:5a:a5:ba:29:6f: 72:e1:84:b6:0e:09:36:38:3e:ef:f6:77:e1:20:a5: 38:a8:81:11:16:c3:dc:37:1d:f6:30:fc:c2:f9:09: 9b:f8:58:eb:14:79:4e:31:c9:a8:1f:56:03:0e:e2: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:BB:96:C7:0F:1D:D0:13:3B:73:E4:30:9B:B9:54:D3:D1:36:DE X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.13.0/24 Signature Algorithm: sha256WithRSAEncryption cc:cd:f8:04:7d:f4:e1:0f:e9:2c:90:ca:ff:a6:42:69:8a:94: 67:09:22:d7:03:42:04:29:b0:41:95:ee:74:b9:4e:50:46:eb: 84:3d:43:54:d2:ea:7b:2f:f0:f3:32:95:01:09:25:7b:4b:7f: c7:f6:c2:c5:4e:7c:7b:28:c7:a7:8d:1a:41:88:d4:e1:bc:54: 4e:9a:1b:33:bd:b5:ef:e6:ef:49:84:dc:6b:60:cd:3b:3d:a3: 77:8a:9d:5f:38:e2:31:ca:83:6b:2a:0e:20:81:6d:38:23:b9: bd:2e:c2:ed:5a:20:76:e2:5d:7e:9f:5f:dd:33:f6:32:7f:9b: 95:3d:bd:e9:8e:2c:61:d6:ff:63:8a:4f:eb:16:9e:04:d2:2d: 8d:97:d7:ec:b9:69:5d:3c:e9:48:6b:ba:cc:ec:8e:70:7a:11: 9b:58:bb:94:fd:6e:60:de:85:ce:44:6d:da:a9:1b:ee:9e:a5: 81:cf:7f:89:38:d0:cd:f8:78:43:e5:62:24:ca:a9:76:1d:d5: dc:bd:5c:29:63:01:23:fb:25:2e:ba:df:de:b2:15:bf:bd:15: 06:30:0d:f0:ec:41:ad:40:3e:62:10:ed:46:89:27:53:c2:c1: 22:64:01:36:cf:03:a9:c1:5b:8a:2d:47:fb:06:e9:97:6d:60: 92:c7:04:2e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUIpKckridnnASwF81LhtMpEt2qmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA2NTBaFw0yNzEwMDQwNjExNTBaMDMxMTAvBgNV BAMTKEU4MUNCQjk2QzcwRjFERDAxMzNCNzNFNDMwOUJCOTU0RDNEMTM2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjBhFDLlF+dAcV29Mr2uyWJuH 7A238ie1npT72Y5YPUiz0yCPjnt6btPjS7LP4N4YBjSKMZWd7gytXSr+VJUmuN+I Y4/t4GXeVZsKos86jgvRwRnZzXzBDCkXVChxP89ydmjg6xBQ4EWHYZxObKin6p0r xAGsaSV0WJ+kSvAfzf18osKDrwRZaENICcDLGzjuC2/U0cv+RnMvZfZA1Vlnk8mU kyAfpuFJENb7iW4+B2lNcbmVw6VnBc7DU2y69G9u4u/RLrsKOSfEOoNapbopb3Lh hLYOCTY4Pu/2d+EgpTiogREWw9w3HfYw/ML5CZv4WOsUeU4xyagfVgMO4v2JAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU6By7lscPHdATO3PkMJu5VNPRNt4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDg5NDkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtg0wDQYJKoZIhvcNAQELBQADggEBAMzN+AR99OEP6SyQyv+mQmmK lGcJItcDQgQpsEGV7nS5TlBG64Q9Q1TS6nsv8PMylQEJJXtLf8f2wsVOfHsox6eN GkGI1OG8VE6aGzO9te/m70mE3GtgzTs9o3eKnV844jHKg2sqDiCBbTgjub0uwu1a IHbiXX6fX90z9jJ/m5U9vemOLGHW/2OKT+sWngTSLY2X1+y5aV086UhruszsjnB6 EZtYu5T9bmDehc5EbdqpG+6epYHPf4k40M34eEPlYiTKqXYd1dy9XCljASP7JS66 396yFb+9FQYwDfDsQa1APmIQ7UaJJ1PCwSJkATbPA6nBW4otR/sG6ZdtYJLHBC4= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:31 2026 by rpki-client