$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212698.roa File: AS212698.roa (raw, json) Hash identifier: y9oYa0KxrSz1xqV1USTHY0AWmtpfZXlLhEin6oSQHA8= Subject key identifier: 51:19:4C:25:88:56:93:87:0E:7D:14:E3:2C:C1:C6:FE:6B:25:46:DC Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 2ACD6D06BEB958DF89ACEFE7D9E088D22DF65B6D Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212698.roa Signing time: Thu 15 Oct 2026 12:11:41 +0000 ROA not before: Thu 15 Oct 2026 12:06:41 +0000 ROA not after: Thu 14 Oct 2027 12:11:41 +0000 asID: 212698 IP address blocks: 79.182.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cd:6d:06:be:b9:58:df:89:ac:ef:e7:d9:e0:88:d2:2d:f6:5b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 15 12:06:41 2026 GMT Not After : Oct 14 12:11:41 2027 GMT Subject: CN=51194C25885693870E7D14E32CC1C6FE6B2546DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:1f:d0:ca:55:56:36:57:8d:9b:55:f1:4d: 66:40:83:26:2e:be:e6:70:e4:c3:56:43:31:fb:ad: 10:41:97:56:e2:32:79:e8:83:d9:db:0b:04:2b:59: c5:a0:c8:62:c4:65:af:e6:8a:06:b5:59:3d:d6:07: 72:40:4f:23:88:bd:2e:20:b3:1e:e2:69:55:96:d0: c9:db:17:79:82:bc:a5:0d:c3:1e:e7:9c:d7:95:cd: d7:79:39:96:fa:41:35:87:af:06:c5:b4:b3:95:e3: f4:58:ec:0f:8a:15:dc:b9:35:c5:d5:c7:cb:af:8a: 53:81:03:ce:8c:7a:31:9e:2f:5e:b4:6a:86:d0:a1: b5:a1:fd:7c:f8:b6:41:28:0e:50:65:3b:a2:ac:e5: c6:77:64:cf:67:ca:bb:cf:07:83:36:84:bc:0f:df: be:99:79:26:a2:ba:f4:47:c3:1c:64:e3:8e:3e:f6: e4:6a:77:54:4b:24:50:4f:f4:8e:cc:94:dd:fb:72: b1:b9:03:6b:e6:4b:26:86:e1:4c:7f:6f:79:c1:4d: 2c:42:ce:7f:f7:d2:74:49:ee:78:de:15:d2:92:2d: ad:af:e5:8f:1f:a6:82:93:10:6b:86:fc:50:b8:17: 51:2d:ed:a9:f5:52:7f:95:8c:4f:d3:fa:ef:83:61: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:4C:25:88:56:93:87:0E:7D:14:E3:2C:C1:C6:FE:6B:25:46:DC X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.80.0/20 Signature Algorithm: sha256WithRSAEncryption e0:b7:44:a8:ad:17:73:e3:a4:50:2c:a5:31:6c:5b:e4:82:f3: 44:87:ea:a9:90:62:d1:be:ee:ad:ec:d9:ff:54:aa:1d:c8:db: 27:00:16:b8:ab:c4:61:6b:83:3c:d9:3c:67:17:6a:b5:52:b1: e5:06:79:75:8b:2e:7e:d1:f7:c0:49:a4:7c:c2:94:6e:f6:48: a9:70:93:9d:ef:e3:4a:61:41:05:41:23:18:7f:f2:34:fb:16: a9:e2:57:99:f0:b9:7b:e6:e6:15:21:cc:bc:05:35:47:93:02: 45:73:7e:0b:2d:50:32:4d:64:41:b8:cc:f9:28:91:97:2d:d8: 58:72:e9:2d:df:e3:7a:55:6d:21:a7:e8:4d:aa:a1:d5:b3:52: c5:2a:75:5a:a5:07:c3:a6:35:16:a4:d4:da:be:b5:81:b0:5a: 80:72:1a:75:a6:bd:41:8a:cb:8a:db:e6:a0:8f:c8:b5:ee:d8: be:12:0c:bd:68:a7:cc:2b:1d:42:c5:a2:0f:ec:34:e3:f1:04: 8f:1a:9b:81:06:4e:8b:00:f4:d6:c0:dc:f1:cc:5b:5d:db:bd: 08:d0:a7:44:38:21:8f:56:6f:5a:31:2b:f3:bd:84:28:49:66: 42:34:80:2f:71:8c:54:01:e4:9f:8b:63:52:94:de:70:68:e2: 6f:30:c0:1b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUKs1tBr65WN+JrO/n2eCI0i32W20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTUxMjA2NDFaFw0yNzEwMTQxMjExNDFaMDMxMTAvBgNV BAMTKDUxMTk0QzI1ODg1NjkzODcwRTdEMTRFMzJDQzFDNkZFNkIyNTQ2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXiB/QylVWNleNm1XxTWZAgyYu vuZw5MNWQzH7rRBBl1biMnnog9nbCwQrWcWgyGLEZa/miga1WT3WB3JATyOIvS4g sx7iaVWW0MnbF3mCvKUNwx7nnNeVzdd5OZb6QTWHrwbFtLOV4/RY7A+KFdy5NcXV x8uvilOBA86MejGeL160aobQobWh/Xz4tkEoDlBlO6Ks5cZ3ZM9nyrvPB4M2hLwP 376ZeSaiuvRHwxxk444+9uRqd1RLJFBP9I7MlN37crG5A2vmSyaG4Ux/b3nBTSxC zn/30nRJ7njeFdKSLa2v5Y8fpoKTEGuG/FC4F1Et7an1Un+VjE/T+u+DYUB7AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUURlMJYhWk4cOfRTjLMHG/mslRtwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTI2OTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBARPtlAwDQYJKoZIhvcNAQELBQADggEBAOC3RKitF3PjpFAspTFsW+SC 80SH6qmQYtG+7q3s2f9Uqh3I2ycAFrirxGFrgzzZPGcXarVSseUGeXWLLn7R98BJ pHzClG72SKlwk53v40phQQVBIxh/8jT7FqniV5nwuXvm5hUhzLwFNUeTAkVzfgst UDJNZEG4zPkokZct2Fhy6S3f43pVbSGn6E2qodWzUsUqdVqlB8OmNRak1Nq+tYGw WoByGnWmvUGKy4rb5qCPyLXu2L4SDL1op8wrHULFog/sNOPxBI8am4EGTosA9NbA 3PHMW13bvQjQp0Q4IY9Wb1oxK/O9hChJZkI0gC9xjFQB5J+LY1KU3nBo4m8wwBs= -----END CERTIFICATE-----Generated at Wed Oct 28 04:59:04 2026 by rpki-client