$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214120.roa File: AS214120.roa (raw, json) Hash identifier: xkYRvgWP9G2TxE49FS1QYPEsnXt3j4zDLz+iACQvJ3E= Subject key identifier: 4E:4D:32:FE:66:D2:9E:74:E4:D3:7E:B7:6A:C0:06:9E:05:EA:B1:6F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 099B4045128561F4F4B82E784886C7C344A5F548 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214120.roa Signing time: Mon 05 Oct 2026 06:13:42 +0000 ROA not before: Mon 05 Oct 2026 06:08:42 +0000 ROA not after: Mon 04 Oct 2027 06:13:42 +0000 asID: 214120 IP address blocks: 109.66.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9b:40:45:12:85:61:f4:f4:b8:2e:78:48:86:c7:c3:44:a5:f5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:42 2026 GMT Not After : Oct 4 06:13:42 2027 GMT Subject: CN=4E4D32FE66D29E74E4D37EB76AC0069E05EAB16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:5c:4c:ec:6a:a1:8a:b2:cb:be:7b:4a:3d: 71:fe:24:64:a7:ce:22:17:e4:17:72:c0:4e:df:1f: d3:de:43:89:69:d5:6a:92:8b:0c:05:e0:3d:db:b2: 44:50:de:55:33:c7:d8:4e:62:ef:08:9e:20:61:48: d4:40:7e:29:83:99:9a:22:bc:a8:d4:a4:22:5c:d9: fe:1a:46:46:0e:ab:3a:25:50:a9:55:be:8c:75:80: 17:24:04:e8:0b:74:03:da:76:14:bd:c7:c0:40:c7: 9d:c2:8a:6f:c5:53:20:90:df:92:c4:06:d0:6f:ea: 7e:0a:bd:2b:70:3a:6e:0e:d1:23:0d:07:ee:45:9b: bf:54:5a:2e:27:f0:14:1d:d8:f3:fa:47:bc:b7:bc: 71:6d:d0:1d:b5:57:b0:67:14:1e:39:7b:e2:3e:aa: c3:63:42:80:1b:28:0d:a6:b9:a5:f6:48:3c:ba:19: 48:b4:03:4a:59:dd:8c:7f:a6:1a:be:45:67:98:74: 47:0f:e9:2b:6d:d8:a9:7a:ce:b0:62:61:9b:84:ee: e6:66:4c:9b:fc:07:e7:f5:d4:7e:9d:58:30:47:51: ef:94:1b:df:97:78:a8:73:43:6a:74:f3:61:84:02: 7a:09:ac:98:83:63:da:f9:87:44:41:95:42:52:61: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4D:32:FE:66:D2:9E:74:E4:D3:7E:B7:6A:C0:06:9E:05:EA:B1:6F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.52.0/24 Signature Algorithm: sha256WithRSAEncryption 73:4e:7e:e4:10:94:40:3f:ca:77:ac:af:a3:b0:5a:b7:d1:78: 7e:37:5e:74:ea:c8:86:fc:43:9f:5d:46:f3:ab:c6:d8:ad:68: fb:48:f5:f9:a3:20:37:f4:d9:c4:11:4d:0d:86:e4:da:a2:63: eb:2b:45:fc:f0:32:d4:62:c2:6e:3b:fb:08:d4:84:db:58:fd: 98:3b:20:df:dc:40:ca:1c:46:35:b9:7e:0a:26:02:c1:90:ed: b6:26:56:dd:b8:32:bd:f2:ff:1d:7a:9e:2a:05:64:3d:4e:39: ee:f8:e3:34:c5:33:17:a0:f2:91:01:78:ed:db:5d:4b:c0:b0: c7:ba:09:ba:6e:99:5f:6c:81:b4:0c:33:72:7a:fc:7e:68:18: 45:1f:5d:c7:4e:47:f6:21:78:04:6d:9a:06:e1:74:51:76:dc: b9:d9:5e:58:22:45:11:72:93:05:07:6d:62:a2:51:13:b9:85: 3d:4c:91:03:30:11:55:57:fe:f3:60:3e:c5:eb:2b:8b:f6:e9: 46:45:19:8c:a2:24:16:b7:e6:f2:26:25:57:7f:6a:a4:ed:15: 19:de:56:80:57:c1:e3:aa:cf:c5:b1:67:39:ac:62:0b:1e:03: 0c:35:8c:8b:ad:0c:69:92:20:55:95:0b:f2:a9:18:80:bf:41: 97:39:a5:13 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUCZtARRKFYfT0uC54SIbHw0Sl9UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDJaFw0yNzEwMDQwNjEzNDJaMDMxMTAvBgNV BAMTKDRFNEQzMkZFNjZEMjlFNzRFNEQzN0VCNzZBQzAwNjlFMDVFQUIxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKVxM7GqhirLLvntKPXH+JGSn ziIX5BdywE7fH9PeQ4lp1WqSiwwF4D3bskRQ3lUzx9hOYu8IniBhSNRAfimDmZoi vKjUpCJc2f4aRkYOqzolUKlVvox1gBckBOgLdAPadhS9x8BAx53Cim/FUyCQ35LE BtBv6n4KvStwOm4O0SMNB+5Fm79UWi4n8BQd2PP6R7y3vHFt0B21V7BnFB45e+I+ qsNjQoAbKA2muaX2SDy6GUi0A0pZ3Yx/phq+RWeYdEcP6Stt2Kl6zrBiYZuE7uZm TJv8B+f11H6dWDBHUe+UG9+XeKhzQ2p082GEAnoJrJiDY9r5h0RBlUJSYchNAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUTk0y/mbSnnTk0363asAGngXqsW8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTQxMjAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQjQwDQYJKoZIhvcNAQELBQADggEBAHNOfuQQlEA/ynesr6OwWrfR eH43XnTqyIb8Q59dRvOrxtitaPtI9fmjIDf02cQRTQ2G5NqiY+srRfzwMtRiwm47 +wjUhNtY/Zg7IN/cQMocRjW5fgomAsGQ7bYmVt24Mr3y/x16nioFZD1OOe744zTF Mxeg8pEBeO3bXUvAsMe6CbpumV9sgbQMM3J6/H5oGEUfXcdOR/YheARtmgbhdFF2 3LnZXlgiRRFykwUHbWKiURO5hT1MkQMwEVVX/vNgPsXrK4v26UZFGYyiJBa35vIm JVd/aqTtFRneVoBXweOqz8WxZzmsYgseAww1jIutDGmSIFWVC/KpGIC/QZc5pRM= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:17 2026 by rpki-client