$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS209557.roa File: AS209557.roa (raw, json) Hash identifier: +vCfm2iA0ugGwMM+GYnvlBDqzeOGGhyahREfSr3gck4= Subject key identifier: 51:06:06:ED:A2:71:E0:76:61:DA:AF:18:01:C5:B5:F3:2C:6E:E3:42 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5811522A21EA2E8ADA7C7BCD6935A585EB2561C5 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS209557.roa Signing time: Mon 05 Oct 2026 06:13:48 +0000 ROA not before: Mon 05 Oct 2026 06:08:48 +0000 ROA not after: Mon 04 Oct 2027 06:13:48 +0000 asID: 209557 IP address blocks: 109.66.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:11:52:2a:21:ea:2e:8a:da:7c:7b:cd:69:35:a5:85:eb:25:61:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:48 2026 GMT Not After : Oct 4 06:13:48 2027 GMT Subject: CN=510606EDA271E07661DAAF1801C5B5F32C6EE342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:5b:88:04:0e:80:7a:4b:d0:18:53:12:a6: 84:7b:34:98:49:85:8c:71:e7:48:63:8e:87:19:0f: 7c:f8:71:6e:0c:85:ac:2e:ab:00:88:f9:e6:c8:78: 78:92:01:6f:11:61:64:33:51:ef:29:b8:c9:e3:64: 27:3b:ce:6f:49:8a:8c:5a:95:dd:bd:19:f3:59:61: 34:33:33:40:4b:56:e9:fc:e9:0d:84:6d:64:4f:5f: 5d:f3:7c:78:18:de:29:0d:bc:35:c8:82:92:8a:52: 1e:32:de:d2:e1:37:67:a1:37:23:e0:77:df:c6:cb: c3:d5:00:c3:06:47:67:37:e7:6e:c0:1f:58:39:ff: 19:ba:a2:3b:3b:f0:61:02:55:7c:bc:ab:08:16:3a: 57:78:6d:e0:64:7a:95:c4:14:fa:62:a7:38:2a:72: b8:ae:0f:78:57:ae:19:ef:ab:c4:d9:5e:93:bd:58: 9c:0d:ae:e6:9b:c6:84:16:01:f0:95:5c:e3:cf:e8: 83:33:37:d4:a8:bd:e4:64:34:f5:26:a0:dc:ee:84: 7f:f6:d8:b5:9f:18:3d:12:aa:19:8d:e2:14:d7:a2: 84:5f:70:2d:aa:0b:02:2f:a8:48:f7:41:59:1f:26: 18:35:47:c3:8b:5c:23:1d:5c:03:ab:52:0a:a2:2f: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:06:06:ED:A2:71:E0:76:61:DA:AF:18:01:C5:B5:F3:2C:6E:E3:42 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS209557.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.88.0/23 Signature Algorithm: sha256WithRSAEncryption 58:cf:80:56:74:79:1e:c7:d6:5c:5e:92:a0:8c:9d:f2:b8:6e: 2f:c4:6b:f1:b5:d4:22:5f:73:12:30:e5:f5:ca:8b:94:16:1c: 63:c7:2a:f3:43:51:ca:56:4e:4c:24:d8:3d:f1:be:76:8d:f5: a6:47:c5:73:7e:7b:f5:fb:73:77:af:2d:70:71:5a:61:5e:f3: 19:43:b1:d4:b9:b3:5a:e1:cf:0c:68:62:4d:ae:9e:14:4e:69: ee:d8:ff:fe:5f:94:fb:bd:35:b4:df:99:d2:60:0b:c8:50:a5: 03:9b:ab:70:8a:89:4b:0d:26:85:bd:bc:7f:59:30:6f:ec:2b: bc:c1:16:af:07:ee:b6:b5:0b:da:77:e0:ac:ed:c6:e2:3a:29: 84:95:71:31:f3:41:c7:1f:16:f7:50:79:71:f5:97:02:ed:78: 87:3d:c9:ce:9e:c0:59:35:38:d4:1f:95:83:59:6c:b6:55:df: 5b:86:19:80:81:cf:5f:90:2a:15:d7:59:dd:7b:ef:ea:3a:ee: e4:4c:7b:df:07:3e:ca:b9:d8:c4:8e:61:8a:13:dc:da:2f:3c: 2e:6c:6c:a5:16:c5:b3:7c:ed:bf:01:78:71:29:a7:9a:71:6f: f3:c7:54:78:34:ce:8e:c0:1f:c2:23:37:76:cb:47:dd:5f:d1: c4:b1:29:e0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUWBFSKiHqLorafHvNaTWlheslYcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDhaFw0yNzEwMDQwNjEzNDhaMDMxMTAvBgNV BAMTKDUxMDYwNkVEQTI3MUUwNzY2MURBQUYxODAxQzVCNUYzMkM2RUUzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoFuIBA6AekvQGFMSpoR7NJhJ hYxx50hjjocZD3z4cW4MhawuqwCI+ebIeHiSAW8RYWQzUe8puMnjZCc7zm9Jioxa ld29GfNZYTQzM0BLVun86Q2EbWRPX13zfHgY3ikNvDXIgpKKUh4y3tLhN2ehNyPg d9/Gy8PVAMMGR2c3527AH1g5/xm6ojs78GECVXy8qwgWOld4beBkepXEFPpipzgq criuD3hXrhnvq8TZXpO9WJwNruabxoQWAfCVXOPP6IMzN9SoveRkNPUmoNzuhH/2 2LWfGD0SqhmN4hTXooRfcC2qCwIvqEj3QVkfJhg1R8OLXCMdXAOrUgqiL4BPAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUUQYG7aJx4HZh2q8YAcW18yxu40IwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDk1NTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQlgwDQYJKoZIhvcNAQELBQADggEBAFjPgFZ0eR7H1lxekqCMnfK4 bi/Ea/G11CJfcxIw5fXKi5QWHGPHKvNDUcpWTkwk2D3xvnaN9aZHxXN+e/X7c3ev LXBxWmFe8xlDsdS5s1rhzwxoYk2unhROae7Y//5flPu9NbTfmdJgC8hQpQObq3CK iUsNJoW9vH9ZMG/sK7zBFq8H7ra1C9p34KztxuI6KYSVcTHzQccfFvdQeXH1lwLt eIc9yc6ewFk1ONQflYNZbLZV31uGGYCBz1+QKhXXWd177+o67uRMe98HPsq52MSO YYoT3NovPC5sbKUWxbN87b8BeHEpp5pxb/PHVHg0zo7AH8IjN3bLR91f0cSxKeA= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:54 2026 by rpki-client