$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215283.roa File: AS215283.roa (raw, json) Hash identifier: TXJsHW8qC33yd5J2kk+p6yp61lxVPhB94YbQr9zkSKc= Subject key identifier: 70:38:DC:20:55:DF:2D:D2:7C:05:7F:2D:AF:DA:AF:45:67:B5:6D:DC Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 75D56192561D56BA7292FD994E242CA8BE6C1A92 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215283.roa Signing time: Mon 05 Oct 2026 06:13:15 +0000 ROA not before: Mon 05 Oct 2026 06:08:15 +0000 ROA not after: Mon 04 Oct 2027 06:13:15 +0000 asID: 215283 IP address blocks: 109.66.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d5:61:92:56:1d:56:ba:72:92:fd:99:4e:24:2c:a8:be:6c:1a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:15 2026 GMT Not After : Oct 4 06:13:15 2027 GMT Subject: CN=7038DC2055DF2DD27C057F2DAFDAAF4567B56DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:84:fd:90:77:95:bc:14:49:7d:0a:86:0c: 47:61:e7:54:7c:ce:e9:58:b4:39:a4:32:d7:6d:0b: a6:bd:a7:84:68:98:fc:2f:60:3f:a0:b5:d4:9d:f2: eb:40:75:2b:77:ec:58:0c:8a:19:79:43:7b:83:cc: 21:52:c3:ca:6f:8a:0e:c5:e3:cc:ce:e9:31:21:dd: 53:44:43:ce:60:6f:78:21:5f:2e:16:38:78:ed:c4: 58:5f:81:13:e7:66:08:df:31:51:ea:3d:34:0e:18: 7c:42:8b:28:b2:06:bd:ac:e3:1e:e3:d5:2f:01:c3: 89:66:ce:73:7e:55:d7:03:f7:26:28:d4:17:c4:9a: 4d:bb:57:a8:61:e5:fe:33:26:6d:d0:ee:76:89:0e: 97:af:2e:88:94:0f:06:6a:49:f7:d9:bb:29:de:f9: 6b:2b:1c:4a:e8:86:0b:5f:e1:6b:43:39:a3:9e:e5: 3f:90:b9:0b:a3:4b:e5:1f:55:3f:0f:bf:be:15:bb: ef:93:c7:82:9e:86:b7:5c:58:af:5b:85:da:94:3b: 91:17:00:cb:9d:b4:61:67:58:5a:d8:29:53:02:46: 2a:0e:a0:f9:3c:1f:bb:f7:0d:1a:39:c8:26:92:2c: 4b:06:8c:2d:ba:7a:89:73:4a:0e:c5:6e:2c:16:a6: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:DC:20:55:DF:2D:D2:7C:05:7F:2D:AF:DA:AF:45:67:B5:6D:DC X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.146.0/23 Signature Algorithm: sha256WithRSAEncryption b6:f7:13:2a:fe:8a:7b:0a:a7:57:1f:16:1c:6f:69:05:7f:78: 7f:9b:c6:fb:81:14:1e:08:dc:55:3a:23:53:ff:12:a9:fe:3e: ab:21:38:80:5a:f2:ac:fd:8e:4f:43:b6:5f:6f:31:bd:19:57: 55:43:e6:ee:24:02:52:15:94:b8:d6:15:e0:de:b8:6b:a5:5e: 1b:08:bf:c3:ff:5c:b1:1f:3c:f2:52:2a:c6:b0:90:0e:5b:f4: 2f:cd:e3:a3:c7:e0:80:63:e9:7f:47:ee:3a:e8:aa:ce:40:da: dc:67:ea:59:d2:fa:4b:0d:8c:16:15:46:53:17:3b:40:d8:38: 5f:e5:aa:0b:b2:2d:f3:36:2d:89:31:cb:d6:8a:2a:2d:41:57: a4:11:90:01:5b:c5:90:58:70:f1:7b:78:67:38:4d:ec:90:ac: f5:92:e8:9b:2e:d0:d8:6b:f4:e0:0a:c7:2c:1b:14:b5:26:44: 86:59:77:02:3b:68:c0:2d:36:14:f1:f1:a4:7a:6d:2d:4c:c8: a7:66:0a:be:d8:df:c2:fd:72:7d:92:7f:51:3f:1d:d7:6e:b4: 9f:fc:88:d2:3c:ca:05:32:fb:e8:59:c4:6b:55:f4:41:33:fb: d5:cf:d4:10:29:26:20:9f:6b:6c:7a:7e:38:d7:07:0c:9a:bb: 24:28:02:45 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUddVhklYdVrpykv2ZTiQsqL5sGpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MTVaFw0yNzEwMDQwNjEzMTVaMDMxMTAvBgNV BAMTKDcwMzhEQzIwNTVERjJERDI3QzA1N0YyREFGREFBRjQ1NjdCNTZEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxIT9kHeVvBRJfQqGDEdh51R8 zulYtDmkMtdtC6a9p4RomPwvYD+gtdSd8utAdSt37FgMihl5Q3uDzCFSw8pvig7F 48zO6TEh3VNEQ85gb3ghXy4WOHjtxFhfgRPnZgjfMVHqPTQOGHxCiyiyBr2s4x7j 1S8Bw4lmznN+VdcD9yYo1BfEmk27V6hh5f4zJm3Q7naJDpevLoiUDwZqSffZuyne +WsrHErohgtf4WtDOaOe5T+QuQujS+UfVT8Pv74Vu++Tx4KehrdcWK9bhdqUO5EX AMudtGFnWFrYKVMCRioOoPk8H7v3DRo5yCaSLEsGjC26eolzSg7FbiwWpjlfAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUcDjcIFXfLdJ8BX8tr9qvRWe1bdwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTUyODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQpIwDQYJKoZIhvcNAQELBQADggEBALb3Eyr+insKp1cfFhxvaQV/ eH+bxvuBFB4I3FU6I1P/Eqn+PqshOIBa8qz9jk9Dtl9vMb0ZV1VD5u4kAlIVlLjW FeDeuGulXhsIv8P/XLEfPPJSKsawkA5b9C/N46PH4IBj6X9H7jroqs5A2txn6lnS +ksNjBYVRlMXO0DYOF/lqguyLfM2LYkxy9aKKi1BV6QRkAFbxZBYcPF7eGc4TeyQ rPWS6Jsu0Nhr9OAKxywbFLUmRIZZdwI7aMAtNhTx8aR6bS1MyKdmCr7Y38L9cn2S f1E/HddutJ/8iNI8ygUy++hZxGtV9EEz+9XP1BApJiCfa2x6fjjXBwyauyQoAkU= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:13 2026 by rpki-client