$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: lA5rWF1pwd4zpAH15GnL99GSICwozocVBOSzvW57HLA= Subject key identifier: 06:CC:40:8C:70:A9:C6:E2:D1:AB:CB:54:24:6C:04:61:F2:57:B7:EC Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 301F9B9451E8DFE640B753D0C0B5B4A27A18C6B9 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa Signing time: Mon 05 Oct 2026 06:13:47 +0000 ROA not before: Mon 05 Oct 2026 06:08:47 +0000 ROA not after: Mon 04 Oct 2027 06:13:47 +0000 asID: 214432 IP address blocks: 109.66.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1f:9b:94:51:e8:df:e6:40:b7:53:d0:c0:b5:b4:a2:7a:18:c6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:47 2026 GMT Not After : Oct 4 06:13:47 2027 GMT Subject: CN=06CC408C70A9C6E2D1ABCB54246C0461F257B7EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:a6:86:ed:73:0f:20:99:04:43:df:09:4c: f2:1f:70:2e:9e:19:aa:8f:83:76:95:d2:fc:5e:2d: 96:b8:78:64:06:0a:ff:2d:6d:48:bc:90:d7:ba:cb: b3:31:51:df:49:8b:e9:56:e4:97:9f:91:9c:18:7d: e1:2d:dc:f1:13:35:bd:fb:99:78:79:f8:47:d2:b4: c1:24:00:26:50:54:24:3a:74:f3:3f:0c:83:5f:02: ed:3d:b2:ee:ed:0f:24:95:78:28:12:96:2a:b6:86: fe:cb:f6:49:05:de:4f:74:3a:99:25:3f:8d:1d:20: b1:d0:73:58:d2:5e:88:82:09:ca:02:83:90:04:66: 1e:4f:2e:a9:f0:f0:ed:43:12:80:0b:52:44:1a:61: 0e:e6:4d:bf:6c:70:ec:c8:f7:f5:2d:25:5d:b1:93: c2:80:22:45:c1:90:b2:ba:70:94:fb:4d:7f:4b:38: 2e:34:de:a4:3e:8b:02:18:61:08:92:61:24:f9:ad: 11:06:34:b7:05:98:f8:bc:54:66:5a:b6:23:b5:ee: d6:14:ed:61:a5:8c:c2:94:71:83:42:4b:60:04:9d: e0:91:3b:c8:b6:a3:b9:38:43:ff:2b:60:87:fc:d3: d9:b6:4f:39:c9:66:b0:b7:23:3e:63:da:bb:c8:e2: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:40:8C:70:A9:C6:E2:D1:AB:CB:54:24:6C:04:61:F2:57:B7:EC X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.81.0/24 Signature Algorithm: sha256WithRSAEncryption 96:aa:ae:4d:57:22:fb:ea:49:5a:98:be:2d:fc:83:de:b9:fc: dd:5e:d9:12:b3:27:93:e8:89:e7:58:97:07:6a:79:f7:13:54: 46:f7:86:31:49:e2:c7:1e:d2:13:ff:45:dd:98:2e:4e:82:e3: 30:dd:0d:d9:f4:ce:52:b9:dd:71:2d:d5:74:1a:04:92:02:66: 42:61:48:57:cb:b7:54:00:e2:c4:4d:f7:16:e3:50:c0:6c:9c: 9b:cf:c9:fa:74:04:d6:d5:15:dc:84:59:e0:5c:d2:06:fc:82: 11:0b:0d:cf:cc:a3:af:7b:ef:7e:75:04:11:db:2f:1b:9d:b4: 95:c7:91:7b:a5:3f:7d:5f:60:83:99:a9:5e:e8:65:58:e8:36: 8d:f5:aa:d1:f8:8b:10:87:65:f4:ec:bd:5f:ae:cb:3a:1f:36: 18:33:29:69:72:04:14:0c:b7:75:cd:b4:9b:3b:96:39:42:66: 6b:a2:b4:3f:d9:98:97:6b:6a:d6:39:7f:05:d0:88:ea:6d:c8: 29:fb:95:65:b7:de:d1:08:3a:07:ed:9d:41:13:5b:da:02:30: 52:05:8c:d2:a4:fd:fd:ae:ce:84:8e:c0:e0:a8:76:2f:d0:66: 56:a9:ac:b5:8e:d7:56:35:69:ab:aa:d8:38:fe:8e:7d:51:c6: 89:85:79:f3 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUMB+blFHo3+ZAt1PQwLW0onoYxrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDdaFw0yNzEwMDQwNjEzNDdaMDMxMTAvBgNV BAMTKDA2Q0M0MDhDNzBBOUM2RTJEMUFCQ0I1NDI0NkMwNDYxRjI1N0I3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaaaG7XMPIJkEQ98JTPIfcC6e GaqPg3aV0vxeLZa4eGQGCv8tbUi8kNe6y7MxUd9Ji+lW5JefkZwYfeEt3PETNb37 mXh5+EfStMEkACZQVCQ6dPM/DINfAu09su7tDySVeCgSliq2hv7L9kkF3k90Opkl P40dILHQc1jSXoiCCcoCg5AEZh5PLqnw8O1DEoALUkQaYQ7mTb9scOzI9/UtJV2x k8KAIkXBkLK6cJT7TX9LOC403qQ+iwIYYQiSYST5rREGNLcFmPi8VGZatiO17tYU 7WGljMKUcYNCS2AEneCRO8i2o7k4Q/8rYIf809m2TznJZrC3Iz5j2rvI4j3PAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUBsxAjHCpxuLRq8tUJGwEYfJXt+wwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTQ0MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQlEwDQYJKoZIhvcNAQELBQADggEBAJaqrk1XIvvqSVqYvi38g965 /N1e2RKzJ5PoiedYlwdqefcTVEb3hjFJ4sce0hP/Rd2YLk6C4zDdDdn0zlK53XEt 1XQaBJICZkJhSFfLt1QA4sRN9xbjUMBsnJvPyfp0BNbVFdyEWeBc0gb8ghELDc/M o6977351BBHbLxudtJXHkXulP31fYIOZqV7oZVjoNo31qtH4ixCHZfTsvV+uyzof NhgzKWlyBBQMt3XNtJs7ljlCZmuitD/ZmJdratY5fwXQiOptyCn7lWW33tEIOgft nUETW9oCMFIFjNKk/f2uzoSOwOCodi/QZlaprLWO11Y1aauq2Dj+jn1RxomFefM= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:42 2026 by rpki-client