$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212477.roa File: AS212477.roa (raw, json) Hash identifier: CaEd8SyV86dtXcGIT4B/DXyojkaykNa7pElV3M7oMqg= Subject key identifier: A4:79:AC:16:E2:59:62:7C:C9:E7:F8:6D:1B:F1:5C:57:10:DE:70:97 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7ACA47A3F19737AC2B599C80E0EF6DF929C9919D Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212477.roa Signing time: Mon 05 Oct 2026 06:12:57 +0000 ROA not before: Mon 05 Oct 2026 06:07:57 +0000 ROA not after: Mon 04 Oct 2027 06:12:57 +0000 asID: 212477 IP address blocks: 109.64.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ca:47:a3:f1:97:37:ac:2b:59:9c:80:e0:ef:6d:f9:29:c9:91:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:57 2026 GMT Not After : Oct 4 06:12:57 2027 GMT Subject: CN=A479AC16E259627CC9E7F86D1BF15C5710DE7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8e:f3:4c:4b:9d:1b:45:3d:7c:af:1a:c2:c2: 2c:c2:2d:15:7d:8a:83:18:a3:49:12:3b:90:70:9d: 59:68:2b:06:97:b9:ec:f8:05:d4:17:b2:a2:dd:c3: c2:ce:b3:9a:58:7e:4c:b4:a1:15:2f:66:bf:2e:9a: 80:64:18:0a:cb:0b:7e:50:c6:28:65:bf:96:04:34: 14:e6:9b:f8:cd:e5:5b:6d:8e:ff:a7:46:c3:92:f9: 97:58:8f:5f:61:61:7a:13:6a:f0:ad:7f:01:53:16: 89:df:72:d4:ae:96:27:98:3f:b1:1b:0d:6d:a5:ff: 0b:c5:88:2e:53:fe:9d:65:ea:91:03:23:93:b8:46: bf:0a:a9:d9:6a:b7:e2:c1:2d:4e:47:65:51:9b:1e: e3:c6:57:ea:6b:96:46:aa:52:08:05:57:2f:8d:ce: ed:6a:4b:ec:c7:49:66:bb:da:f4:bf:de:e9:c8:2b: 8e:52:9b:ba:86:bd:7f:db:b9:80:e9:63:3f:90:c9: 1c:d3:a8:16:a9:5f:60:50:02:52:92:d6:88:a0:0b: c0:96:7e:96:3d:ff:7d:73:30:cb:ce:b8:82:be:c7: a2:b7:27:a5:f1:3c:6a:56:c0:30:14:4e:dd:db:96: 1a:fc:c9:71:c8:cb:c3:d7:1f:45:cf:0a:07:19:2e: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:79:AC:16:E2:59:62:7C:C9:E7:F8:6D:1B:F1:5C:57:10:DE:70:97 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212477.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.148.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:07:cb:2e:63:26:88:c1:06:e5:17:f1:07:52:06:a9:73:d8: 13:75:9b:af:9c:fb:72:13:b8:9a:c1:2a:7c:0f:cd:d9:83:3d: 65:69:ea:be:67:26:e6:8a:f3:be:3a:ca:e8:59:65:6e:cc:80: 33:c7:6f:78:78:98:b3:1f:ed:c0:ce:b9:6d:2b:94:ff:31:14: 14:18:3e:5d:b6:9f:36:14:4b:16:89:47:9f:42:9d:20:ce:47: ad:94:38:75:a6:6f:40:30:ee:c2:c1:69:b2:ad:b9:62:c2:61: e5:19:95:d5:f3:78:02:da:a5:90:39:17:ac:27:96:54:a7:92: 33:34:fa:f1:36:f8:b1:d6:ca:6c:44:63:8c:39:84:b0:19:15: c0:71:e3:23:d4:ac:1d:93:a9:22:26:c9:8e:04:aa:c6:fd:c0: 50:7a:42:39:66:d1:58:91:bc:15:34:54:ad:10:95:e3:33:4d: a3:95:ab:93:36:7f:a4:58:3b:c2:3c:e5:15:44:f3:fb:50:84: ed:26:c6:6d:5f:ed:96:72:92:2f:a0:8f:d7:d0:d4:a0:4e:05: 24:3d:5d:8a:2a:f6:b1:f8:56:df:d6:cb:2d:fd:0c:dc:30:a6: 72:a9:24:7e:6e:43:c9:2a:7e:ae:d4:de:85:d3:45:6e:0d:82: ab:ca:78:3f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUespHo/GXN6wrWZyA4O9t+SnJkZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3NTdaFw0yNzEwMDQwNjEyNTdaMDMxMTAvBgNV BAMTKEE0NzlBQzE2RTI1OTYyN0NDOUU3Rjg2RDFCRjE1QzU3MTBERTcwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8jvNMS50bRT18rxrCwizCLRV9 ioMYo0kSO5BwnVloKwaXuez4BdQXsqLdw8LOs5pYfky0oRUvZr8umoBkGArLC35Q xihlv5YENBTmm/jN5Vttjv+nRsOS+ZdYj19hYXoTavCtfwFTFonfctSulieYP7Eb DW2l/wvFiC5T/p1l6pEDI5O4Rr8Kqdlqt+LBLU5HZVGbHuPGV+prlkaqUggFVy+N zu1qS+zHSWa72vS/3unIK45Sm7qGvX/buYDpYz+QyRzTqBapX2BQAlKS1oigC8CW fpY9/31zMMvOuIK+x6K3J6XxPGpWwDAUTt3blhr8yXHIy8PXH0XPCgcZLvszAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUpHmsFuJZYnzJ5/htG/FcVxDecJcwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTI0Nzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQJQwDQYJKoZIhvcNAQELBQADggEBAC8Hyy5jJojBBuUX8QdSBqlz 2BN1m6+c+3ITuJrBKnwPzdmDPWVp6r5nJuaK8746yuhZZW7MgDPHb3h4mLMf7cDO uW0rlP8xFBQYPl22nzYUSxaJR59CnSDOR62UOHWmb0Aw7sLBabKtuWLCYeUZldXz eALapZA5F6wnllSnkjM0+vE2+LHWymxEY4w5hLAZFcBx4yPUrB2TqSImyY4Eqsb9 wFB6Qjlm0ViRvBU0VK0QleMzTaOVq5M2f6RYO8I85RVE8/tQhO0mxm1f7ZZyki+g j9fQ1KBOBSQ9XYoq9rH4Vt/Wyy39DNwwpnKpJH5uQ8kqfq7U3oXTRW4NgqvKeD8= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:53 2026 by rpki-client