$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: oHjXZ6VBI78pucpEPtwxmSeM2o7918MQhtJAukl/O2Q= Subject key identifier: 98:32:7E:BD:76:E6:20:F3:A8:7D:8C:76:F9:7B:D3:38:ED:C8:48:21 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 324BB36B481BC94CAF0481C0EF63119275488DED Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa Signing time: Wed 07 Oct 2026 09:11:37 +0000 ROA not before: Wed 07 Oct 2026 09:06:37 +0000 ROA not after: Wed 06 Oct 2027 09:11:37 +0000 asID: 212238 IP address blocks: 79.176.255.0/24 maxlen: 24 79.182.18.0/24 maxlen: 24 79.182.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4b:b3:6b:48:1b:c9:4c:af:04:81:c0:ef:63:11:92:75:48:8d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 7 09:06:37 2026 GMT Not After : Oct 6 09:11:37 2027 GMT Subject: CN=98327EBD76E620F3A87D8C76F97BD338EDC84821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:b2:88:67:01:e3:28:2a:c5:08:5e:7a:f5: c1:12:76:52:c0:19:e8:68:55:e4:74:b6:68:d3:8e: 62:21:94:29:4c:b9:96:50:58:8b:52:03:53:85:bc: 70:12:53:b7:5c:d3:72:80:ac:13:56:da:8b:5a:22: 5e:c3:90:c0:37:32:40:90:a7:7c:73:34:96:5d:c3: d4:93:ae:55:80:75:f0:5e:a1:04:2c:24:c5:a8:b7: 44:1c:fa:1f:47:99:75:79:9c:70:15:8f:dc:a7:96: fb:e0:d4:72:c0:d1:ba:52:95:eb:bb:3b:3b:45:14: 77:b5:a7:54:01:8f:6a:ec:3a:0f:17:00:97:28:90: 7a:2f:3d:65:37:d8:e4:33:85:6b:22:67:37:c7:ec: 09:ef:7e:aa:04:e9:e9:ff:86:fd:fa:4a:62:a2:6c: 96:97:4b:a7:b6:1e:12:7c:ed:89:ea:50:20:e1:3d: 6a:4e:35:5c:f8:2b:52:2e:0d:dd:f4:06:43:ed:fc: 70:03:f4:99:e7:a2:ae:4b:1e:d1:0b:1a:ce:c2:93: 21:21:6f:ad:63:6a:65:e2:df:eb:bf:7b:18:75:63: bd:d8:11:22:21:3c:e6:e8:35:dc:1a:c5:45:8a:ab: 5e:5e:de:76:2d:0a:1d:09:56:b2:37:78:28:46:fd: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:7E:BD:76:E6:20:F3:A8:7D:8C:76:F9:7B:D3:38:ED:C8:48:21 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.255.0/24 79.182.18.0/24 79.182.38.0/24 Signature Algorithm: sha256WithRSAEncryption 49:1a:e1:e6:41:a6:7d:6f:e6:c4:88:80:0a:bc:e4:b4:98:f6: 22:78:58:89:c1:4d:42:40:f7:2e:9c:c1:37:29:52:df:2d:f4: d8:0a:d7:1e:09:f1:b7:e9:69:ee:46:8b:d5:59:5d:bf:bc:5d: bb:8e:6c:ac:15:36:fe:f7:c6:5c:4e:fe:38:b1:4a:9b:90:19: ae:0f:85:79:f6:c3:3e:b1:6a:d4:82:81:69:7e:01:3e:31:fc: c8:1b:ac:3a:3e:85:ad:c7:70:df:89:10:24:82:ae:c2:42:d4: 8f:4d:2b:db:66:e7:07:01:71:21:3a:91:95:a8:74:82:00:0c: a7:2f:a5:a1:f3:b9:8a:bb:82:79:74:47:be:7d:c1:88:b2:a1: 58:60:e8:ed:ad:c9:3d:fb:53:78:fc:e4:38:a9:67:b5:73:75: 0b:b8:ba:60:4c:06:b6:3b:34:01:f7:25:6e:5d:4b:6b:d2:55: 16:4d:7a:a0:df:5d:f8:56:b9:f2:e4:55:4b:db:8c:e7:75:4f: 82:51:bb:f5:a7:77:77:de:29:55:bf:3d:3a:72:e9:ea:55:b4: 71:43:dc:ee:26:dd:ea:e0:37:9d:a6:50:9f:f2:97:ce:81:78: 65:17:8a:23:57:48:a3:40:23:56:a7:ce:33:0f:10:91:ff:a8: 79:e9:f1:26 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUMkuza0gbyUyvBIHA72MRknVIje0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDcwOTA2MzdaFw0yNzEwMDYwOTExMzdaMDMxMTAvBgNV BAMTKDk4MzI3RUJENzZFNjIwRjNBODdEOEM3NkY5N0JEMzM4RURDODQ4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1trKIZwHjKCrFCF569cESdlLA GehoVeR0tmjTjmIhlClMuZZQWItSA1OFvHASU7dc03KArBNW2otaIl7DkMA3MkCQ p3xzNJZdw9STrlWAdfBeoQQsJMWot0Qc+h9HmXV5nHAVj9ynlvvg1HLA0bpSleu7 OztFFHe1p1QBj2rsOg8XAJcokHovPWU32OQzhWsiZzfH7AnvfqoE6en/hv36SmKi bJaXS6e2HhJ87YnqUCDhPWpONVz4K1IuDd30BkPt/HAD9Jnnoq5LHtELGs7CkyEh b61jamXi3+u/exh1Y73YESIhPOboNdwaxUWKq15e3nYtCh0JVrI3eChG/RqpAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUmDJ+vXbmIPOofYx2+XvTOO3ISCEwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTIyMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABPsP8DBABPthIDBABPtiYwDQYJKoZIhvcNAQELBQADggEBAEka4eZB pn1v5sSIgAq85LSY9iJ4WInBTUJA9y6cwTcpUt8t9NgK1x4J8bfpae5Gi9VZXb+8 XbuObKwVNv73xlxO/jixSpuQGa4PhXn2wz6xatSCgWl+AT4x/MgbrDo+ha3HcN+J ECSCrsJC1I9NK9tm5wcBcSE6kZWodIIADKcvpaHzuYq7gnl0R759wYiyoVhg6O2t yT37U3j85DipZ7VzdQu4umBMBrY7NAH3JW5dS2vSVRZNeqDfXfhWufLkVUvbjOd1 T4JRu/Wnd3feKVW/PTpy6epVtHFD3O4m3ergN52mUJ/yl86BeGUXiiNXSKNAI1an zjMPEJH/qHnp8SY= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:07 2026 by rpki-client