$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS209753.roa File: AS209753.roa (raw, json) Hash identifier: +ZkyBsaf/0crEGhXCBZpNrLJRNpj3w7/vsN542L8BK8= Subject key identifier: FF:E9:B5:D5:3B:92:C0:D4:5E:72:C5:2E:C1:EB:68:6B:6F:D5:E4:C9 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 53C891A378E5926C7AD536282642D13ED910726A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS209753.roa Signing time: Tue 06 Oct 2026 09:55:19 +0000 ROA not before: Tue 06 Oct 2026 09:50:19 +0000 ROA not after: Tue 05 Oct 2027 09:55:19 +0000 asID: 209753 IP address blocks: 79.176.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c8:91:a3:78:e5:92:6c:7a:d5:36:28:26:42:d1:3e:d9:10:72:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 09:50:19 2026 GMT Not After : Oct 5 09:55:19 2027 GMT Subject: CN=FFE9B5D53B92C0D45E72C52EC1EB686B6FD5E4C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:d2:6b:76:a4:8a:0f:38:ab:8a:eb:32:80: 73:a9:62:a8:cb:3d:58:04:3f:b2:7a:2a:3f:a0:15: 83:64:47:27:50:01:1c:90:58:0d:5f:42:12:cf:a5: d2:10:5d:26:3c:18:34:fd:23:76:de:b2:c0:01:8f: bd:77:4a:6e:43:62:a9:01:fa:f6:6c:d3:4b:cd:b0: 9b:ae:d9:2c:4a:9b:08:29:fb:ab:51:51:b2:af:b7: 96:e5:b3:2c:b1:aa:5e:1d:89:6b:b2:5e:3f:5e:e9: 8e:f3:0f:ef:4d:9a:93:ad:17:da:b9:52:15:5c:1c: 63:94:34:15:20:b8:58:2a:10:2b:eb:59:f8:77:39: 1d:ee:0c:6f:d5:e2:89:dd:87:45:a8:27:d0:c9:a7: 40:c3:bb:f4:52:36:a1:44:bb:88:02:9e:b8:0a:c5: 48:81:cc:95:a6:2d:bc:60:f5:7a:c5:30:c1:d1:7d: f9:25:e3:04:e9:eb:41:ff:9d:ef:9e:b9:b3:a3:61: aa:83:a0:58:6d:73:88:2b:8b:9a:b6:da:7c:80:9d: 18:a5:d0:aa:0d:aa:3d:59:63:06:11:53:ba:b9:b2: 23:b2:f2:79:88:23:46:fe:13:02:68:db:3a:60:e2: c6:8b:30:a3:34:42:bb:18:ff:14:80:ed:b2:97:15: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E9:B5:D5:3B:92:C0:D4:5E:72:C5:2E:C1:EB:68:6B:6F:D5:E4:C9 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS209753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.25.0/24 Signature Algorithm: sha256WithRSAEncryption 14:17:49:17:2b:94:4c:32:1f:b1:59:e9:86:bb:42:57:9d:60: 9a:61:8f:8f:bb:f5:a8:1e:bb:5a:a5:0c:26:7e:3a:96:c8:6f: 87:52:b4:44:88:93:b0:e5:3e:b0:90:14:b9:e1:c5:0b:84:78: 1d:f7:8f:a6:8e:e2:e4:57:a1:28:6d:37:43:d6:20:a7:22:ee: 90:0d:80:41:88:1b:96:94:e3:d2:ba:b2:cf:79:24:c9:0e:92: 97:eb:88:eb:0b:4d:68:c1:93:0d:74:18:01:1e:6c:b4:ad:9a: cc:a0:ab:3d:4b:d8:8a:e5:86:80:10:30:30:81:07:7b:2c:59: 87:ce:61:00:6a:e9:21:39:68:19:94:b0:ac:b8:54:6e:13:92: c0:60:ee:5d:2c:79:2a:26:73:ab:a2:c6:2d:30:35:61:45:70: 99:f5:fd:f9:73:b4:ca:ff:51:b2:fa:33:58:d6:a4:96:b7:0f: 37:8e:d3:e1:5b:2b:bb:b0:63:98:44:cd:e7:e6:28:53:9d:2f: 69:c7:b8:b6:90:e6:4f:a3:3c:6f:3c:45:65:06:b3:a0:a6:f7: e0:5c:64:07:5c:3e:55:b7:15:41:ec:a6:d3:14:4d:e1:d4:dd: 8c:76:68:44:57:f7:39:f6:4a:0b:56:c2:41:39:5e:9e:d2:d3: ae:e8:a1:0c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUU8iRo3jlkmx61TYoJkLRPtkQcmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYwOTUwMTlaFw0yNzEwMDUwOTU1MTlaMDMxMTAvBgNV BAMTKEZGRTlCNUQ1M0I5MkMwRDQ1RTcyQzUyRUMxRUI2ODZCNkZENUU0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdd9JrdqSKDziriusygHOpYqjL PVgEP7J6Kj+gFYNkRydQARyQWA1fQhLPpdIQXSY8GDT9I3bessABj713Sm5DYqkB +vZs00vNsJuu2SxKmwgp+6tRUbKvt5blsyyxql4diWuyXj9e6Y7zD+9NmpOtF9q5 UhVcHGOUNBUguFgqECvrWfh3OR3uDG/V4ondh0WoJ9DJp0DDu/RSNqFEu4gCnrgK xUiBzJWmLbxg9XrFMMHRffkl4wTp60H/ne+eubOjYaqDoFhtc4gri5q22nyAnRil 0KoNqj1ZYwYRU7q5siOy8nmII0b+EwJo2zpg4saLMKM0QrsY/xSA7bKXFefVAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU/+m11TuSwNRecsUuwetoa2/V5MkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDk3NTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPsBkwDQYJKoZIhvcNAQELBQADggEBABQXSRcrlEwyH7FZ6Ya7Qled YJphj4+79ageu1qlDCZ+OpbIb4dStESIk7DlPrCQFLnhxQuEeB33j6aO4uRXoSht N0PWIKci7pANgEGIG5aU49K6ss95JMkOkpfriOsLTWjBkw10GAEebLStmsygqz1L 2IrlhoAQMDCBB3ssWYfOYQBq6SE5aBmUsKy4VG4TksBg7l0seSomc6uixi0wNWFF cJn1/flztMr/UbL6M1jWpJa3DzeO0+FbK7uwY5hEzefmKFOdL2nHuLaQ5k+jPG88 RWUGs6Cm9+BcZAdcPlW3FUHsptMUTeHU3Yx2aERX9zn2SgtWwkE5Xp7S067ooQw= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:28 2026 by rpki-client