$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa File: AS214483.roa (raw, json) Hash identifier: E+55vCDXzQeaoEpuTGysd4Tl8/4AMyaG+r+ZnT7hhD4= Subject key identifier: 7C:EC:8D:4C:60:A5:B2:E3:DC:56:5A:A3:EB:53:F4:A8:6B:3C:2F:C1 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 04CBC08C91AF7A43D91B87BF322C7A6C8E504085 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa Signing time: Mon 05 Oct 2026 06:13:04 +0000 ROA not before: Mon 05 Oct 2026 06:08:04 +0000 ROA not after: Mon 04 Oct 2027 06:13:04 +0000 asID: 214483 IP address blocks: 109.64.10.0/24 maxlen: 24 109.64.25.0/24 maxlen: 24 109.64.100.0/24 maxlen: 24 109.64.116.0/24 maxlen: 24 109.64.124.0/24 maxlen: 24 109.64.126.0/24 maxlen: 24 109.64.135.0/24 maxlen: 24 109.64.160.0/24 maxlen: 24 109.64.165.0/24 maxlen: 24 109.64.166.0/24 maxlen: 24 109.64.188.0/24 maxlen: 24 109.64.208.0/24 maxlen: 24 109.64.228.0/24 maxlen: 24 109.64.232.0/24 maxlen: 24 109.64.250.0/24 maxlen: 24 109.65.105.0/24 maxlen: 24 109.65.144.0/24 maxlen: 24 109.65.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cb:c0:8c:91:af:7a:43:d9:1b:87:bf:32:2c:7a:6c:8e:50:40:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:04 2026 GMT Not After : Oct 4 06:13:04 2027 GMT Subject: CN=7CEC8D4C60A5B2E3DC565AA3EB53F4A86B3C2FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:a0:61:4b:b2:31:b4:76:f7:cf:0d:d6:92: b8:6f:81:25:5d:6a:f5:89:da:a9:4c:05:35:ec:b4: 1c:04:b5:b7:69:63:10:c9:d7:e8:33:09:61:0b:0b: d9:61:95:c9:26:9e:8c:7e:82:a2:52:e4:01:db:db: 45:ef:bb:af:31:3b:03:de:d2:bb:7f:5c:f9:5f:06: fc:8a:9c:ff:d3:e1:66:bb:cc:72:56:e4:a6:e5:a9: 6c:55:d3:3b:5a:7d:04:33:da:15:92:25:d2:ed:e9: a7:e1:16:5b:f3:ce:83:ac:1f:98:93:00:ad:ca:b2: 23:10:15:b7:35:93:25:6f:6f:d5:bc:1d:95:0b:8f: 3b:4b:92:12:a3:ea:34:bc:ae:59:41:d5:bb:2f:e4: 4b:36:c7:d9:e8:a4:25:c0:5c:e6:f5:74:32:e1:84: 6c:3b:0c:f9:2f:d7:4b:f0:3b:04:e9:e8:2b:a2:53: 34:3b:62:a4:46:15:70:b4:c2:85:fc:e5:a4:53:44: bd:91:64:5d:8c:8c:cc:9c:05:5a:51:81:3c:9c:e5: f8:93:9c:bc:33:2f:f7:fc:5d:35:c5:88:08:7e:8e: 14:3b:a4:7c:9f:24:77:be:9a:5b:10:98:b7:a2:94: 7b:eb:de:83:ad:b3:ba:cf:c1:e5:56:e8:c6:f8:d4: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:8D:4C:60:A5:B2:E3:DC:56:5A:A3:EB:53:F4:A8:6B:3C:2F:C1 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.10.0/24 109.64.25.0/24 109.64.100.0/24 109.64.116.0/24 109.64.124.0/24 109.64.126.0/24 109.64.135.0/24 109.64.160.0/24 109.64.165.0-109.64.166.255 109.64.188.0/24 109.64.208.0/24 109.64.228.0/24 109.64.232.0/24 109.64.250.0/24 109.65.105.0/24 109.65.144.0/24 109.65.195.0/24 Signature Algorithm: sha256WithRSAEncryption a5:bc:42:a9:67:b1:93:5c:57:6c:c1:6d:a8:c7:fc:de:c7:c9: bd:e0:0c:81:81:ad:82:8a:b7:36:22:bf:aa:0a:e2:8e:10:40: 37:18:37:e2:a1:86:13:b6:0e:fd:ca:5b:3d:6d:e4:07:fa:bd: c5:78:37:d5:df:9d:ef:fe:45:95:1a:de:dc:40:73:1d:fb:71: ed:8a:50:28:39:77:9c:ed:2c:eb:00:aa:3b:44:2a:2d:c6:b6: e3:13:3b:99:aa:f8:ad:41:90:84:bb:62:a4:20:5c:27:32:e3: b2:e6:18:12:40:1d:43:2a:63:cf:f1:d1:79:60:14:d7:61:f1: d8:2b:91:dc:cf:b6:a7:3d:7c:c0:2c:dc:82:00:52:63:25:a8: ae:aa:f4:64:52:17:b8:8d:41:ef:b3:3d:c8:1a:de:5f:3f:82: ce:2d:09:62:a8:b7:3e:ce:ac:1a:e8:ce:1e:df:ed:44:65:64: e9:45:bd:3d:7f:e0:1d:b7:b2:73:57:18:f9:ba:fb:f8:98:08: ee:6e:ea:bd:6a:56:36:80:fc:10:e1:3d:09:62:08:a2:a1:ee: 9b:dc:90:f3:eb:f7:db:87:7a:7d:e6:f9:ca:74:fb:2a:fe:01: 59:07:12:62:fe:96:ed:a2:6c:62:c9:2d:97:ff:0c:b4:ef:fa: 83:e3:50:cf -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIUBMvAjJGvekPZG4e/Mix6bI5QQIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MDRaFw0yNzEwMDQwNjEzMDRaMDMxMTAvBgNV BAMTKDdDRUM4RDRDNjBBNUIyRTNEQzU2NUFBM0VCNTNGNEE4NkIzQzJGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVKBhS7IxtHb3zw3WkrhvgSVd avWJ2qlMBTXstBwEtbdpYxDJ1+gzCWELC9lhlckmnox+gqJS5AHb20Xvu68xOwPe 0rt/XPlfBvyKnP/T4Wa7zHJW5KblqWxV0ztafQQz2hWSJdLt6afhFlvzzoOsH5iT AK3KsiMQFbc1kyVvb9W8HZULjztLkhKj6jS8rllB1bsv5Es2x9nopCXAXOb1dDLh hGw7DPkv10vwOwTp6CuiUzQ7YqRGFXC0woX85aRTRL2RZF2MjMycBVpRgTyc5fiT nLwzL/f8XTXFiAh+jhQ7pHyfJHe+mlsQmLeilHvr3oOts7rPweVW6Mb41EDnAgMB AAGjggKuMIICqjAdBgNVHQ4EFgQUfOyNTGClsuPcVlqj61P0qGs8L8EwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTQ0ODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYcGCCsGAQUFBwEHAQH/BHgwdjB0 BAIAATBuAwQAbUAKAwQAbUAZAwQAbUBkAwQAbUB0AwQAbUB8AwQAbUB+AwQAbUCH AwQAbUCgMAwDBABtQKUDBABtQKYDBABtQLwDBABtQNADBABtQOQDBABtQOgDBABt QPoDBABtQWkDBABtQZADBABtQcMwDQYJKoZIhvcNAQELBQADggEBAKW8QqlnsZNc V2zBbajH/N7Hyb3gDIGBrYKKtzYiv6oK4o4QQDcYN+KhhhO2Dv3KWz1t5Af6vcV4 N9Xfne/+RZUa3txAcx37ce2KUCg5d5ztLOsAqjtEKi3GtuMTO5mq+K1BkIS7YqQg XCcy47LmGBJAHUMqY8/x0XlgFNdh8dgrkdzPtqc9fMAs3IIAUmMlqK6q9GRSF7iN Qe+zPcga3l8/gs4tCWKotz7OrBrozh7f7URlZOlFvT1/4B23snNXGPm6+/iYCO5u 6r1qVjaA/BDhPQliCKKh7pvckPPr99uHen3m+cp0+yr+AVkHEmL+lu2ibGLJLZf/ DLTv+oPjUM8= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:41 2026 by rpki-client