
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212616.roa
File: AS212616.roa (raw, json)
Hash identifier: d2uINPJ2xkP4cktB+cdQh9ks1fhrsrmPEjIfRmm8X5k=
Subject key identifier: 23:B6:96:9D:FD:0D:A5:87:FC:62:36:74:88:80:86:DF:45:40:16:41
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 631EB674EEA6918196A476E8288B7794627A1F76
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212616.roa
Signing time: Tue 06 Oct 2026 09:24:47 +0000
ROA not before: Tue 06 Oct 2026 09:19:47 +0000
ROA not after: Tue 05 Oct 2027 09:24:47 +0000
asID: 212616
IP address blocks: 79.182.96.0/20 maxlen: 20
79.182.144.0/20 maxlen: 24
109.64.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1e:b6:74:ee:a6:91:81:96:a4:76:e8:28:8b:77:94:62:7a:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 6 09:19:47 2026 GMT
Not After : Oct 5 09:24:47 2027 GMT
Subject: CN=23B6969DFD0DA587FC623674888086DF45401641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:63:eb:96:33:4b:34:8b:07:57:b0:28:5b:
dd:29:10:af:be:79:2e:bf:b9:9d:2c:24:d7:e5:e7:
36:90:ad:99:35:9a:9c:18:cf:ba:7f:4d:98:c2:e5:
6f:99:f8:8d:68:20:1b:da:32:d0:74:59:a6:98:26:
b1:a2:cc:99:88:2e:b0:1d:ba:13:2c:85:8a:32:91:
b6:56:13:eb:2b:f8:f2:35:31:ac:98:fd:3b:05:c4:
b8:0d:62:01:bf:f3:58:b5:a0:62:1d:d0:ef:96:d2:
18:21:9e:26:00:92:61:4e:50:8e:21:07:8b:e1:86:
f5:17:ba:0e:e7:79:70:17:48:10:b4:de:f7:47:bd:
53:06:90:74:f8:82:f3:01:12:a0:0f:56:ae:1a:45:
06:0c:ac:4c:1e:9d:15:3b:d1:ea:45:e5:41:a1:6a:
3a:b8:e2:58:f2:fc:5b:b0:98:ef:8d:36:f9:0f:8c:
58:cc:b1:83:64:0a:f7:0b:03:8b:33:71:7c:1d:08:
3a:c5:a4:8a:92:1b:86:a2:43:8f:58:dc:e8:d4:1b:
83:5d:a8:da:36:84:ff:2f:52:76:a3:a6:92:75:e7:
00:fb:9f:cf:29:cc:57:fc:dc:ed:ac:19:86:f5:7f:
72:95:6e:4c:49:e0:95:2c:da:05:86:e6:63:3a:9f:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:96:9D:FD:0D:A5:87:FC:62:36:74:88:80:86:DF:45:40:16:41
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.96.0/20
79.182.144.0/20
109.64.32.0/20
Signature Algorithm: sha256WithRSAEncryption
31:bb:06:29:5b:cb:e3:10:b6:0c:97:c9:43:4d:49:b5:74:e0:
60:70:bc:d2:6d:56:15:4e:93:db:91:6f:eb:4e:75:61:5f:c5:
7c:5c:3f:9c:61:f8:76:67:96:0c:d4:be:1d:8e:f1:61:37:4b:
4b:34:05:94:b3:3a:cb:ec:8a:69:7d:59:97:ad:22:94:5e:45:
fc:4b:91:db:83:54:35:8a:1c:e9:18:53:11:eb:18:d2:ab:ee:
da:c9:13:2d:01:b4:83:15:45:55:61:0a:6a:69:0e:8a:96:39:
98:7f:42:c7:51:04:eb:2d:91:9b:c9:0e:39:c2:38:0e:32:f4:
5d:0a:fb:78:6a:68:88:b0:b7:17:fa:76:c2:fb:9a:44:68:2a:
3f:c4:42:d4:68:03:57:a2:2b:79:0a:f6:a9:cc:76:4b:15:6c:
f7:f8:8e:90:f8:94:72:8a:05:ce:6e:5e:f9:b9:fb:69:92:13:
f9:a9:d4:6a:21:95:62:7c:33:77:5b:31:f4:b1:b4:6f:b4:33:
65:af:1b:d5:e0:2b:28:83:7d:34:36:b2:7a:a9:5b:15:02:44:
b8:4a:a7:4b:b6:30:4d:65:45:08:6f:ea:65:79:26:f7:a2:6d:
44:81:39:f1:9d:36:84:76:ad:0e:18:79:fa:3d:27:7e:f6:a5:
0c:08:0c:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYx62dO6mkYGWpHboKIt3lGJ6H3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMDYwOTE5NDdaFw0yNzEwMDUwOTI0NDdaMDMxMTAvBgNV
BAMTKDIzQjY5NjlERkQwREE1ODdGQzYyMzY3NDg4ODA4NkRGNDU0MDE2NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK22PrljNLNIsHV7AoW90pEK++
eS6/uZ0sJNfl5zaQrZk1mpwYz7p/TZjC5W+Z+I1oIBvaMtB0WaaYJrGizJmILrAd
uhMshYoykbZWE+sr+PI1MayY/TsFxLgNYgG/81i1oGId0O+W0hghniYAkmFOUI4h
B4vhhvUXug7neXAXSBC03vdHvVMGkHT4gvMBEqAPVq4aRQYMrEwenRU70epF5UGh
ajq44ljy/FuwmO+NNvkPjFjMsYNkCvcLA4szcXwdCDrFpIqSG4aiQ49Y3OjUG4Nd
qNo2hP8vUnajppJ15wD7n88pzFf83O2sGYb1f3KVbkxJ4JUs2gWG5mM6n4MrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI7aWnf0NpYf8YjZ0iICG30VAFkEwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTI2MTYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBARPtmADBARPtpADBARtQCAwDQYJKoZIhvcNAQELBQADggEBADG7Bilb
y+MQtgyXyUNNSbV04GBwvNJtVhVOk9uRb+tOdWFfxXxcP5xh+HZnlgzUvh2O8WE3
S0s0BZSzOsvsiml9WZetIpReRfxLkduDVDWKHOkYUxHrGNKr7trJEy0BtIMVRVVh
CmppDoqWOZh/QsdRBOstkZvJDjnCOA4y9F0K+3hqaIiwtxf6dsL7mkRoKj/EQtRo
A1eiK3kK9qnMdksVbPf4jpD4lHKKBc5uXvm5+2mSE/mp1GohlWJ8M3dbMfSxtG+0
M2WvG9XgKyiDfTQ2snqpWxUCRLhKp0u2ME1lRQhv6mV5JveibUSBOfGdNoR2rQ4Y
efo9J372pQwIDDI=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:47:05 2026 by rpki-client