$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS216075.roa File: AS216075.roa (raw, json) Hash identifier: zuWknvrGQfNJQrkoEJuSkCWbAbxgp/sS8lIB38Rbo5s= Subject key identifier: AB:FC:FE:9A:13:73:11:AC:EA:C4:06:F7:56:B3:9E:FA:6A:C0:87:9D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 595F9FE28C3D4CC080A2B5BFCCAD391E100EE5E1 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS216075.roa Signing time: Mon 05 Oct 2026 06:13:00 +0000 ROA not before: Mon 05 Oct 2026 06:08:00 +0000 ROA not after: Mon 04 Oct 2027 06:13:00 +0000 asID: 216075 IP address blocks: 109.65.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5f:9f:e2:8c:3d:4c:c0:80:a2:b5:bf:cc:ad:39:1e:10:0e:e5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:00 2026 GMT Not After : Oct 4 06:13:00 2027 GMT Subject: CN=ABFCFE9A137311ACEAC406F756B39EFA6AC0879D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:0d:82:5d:2b:61:e6:91:f8:78:4e:03:51: 96:e0:91:90:a9:0c:9e:54:ff:12:fa:65:06:77:61: d0:c1:c7:55:25:61:09:3e:6c:ce:b4:de:33:79:81: 86:3e:78:f3:4b:2e:55:37:f4:5c:57:8d:39:af:c7: 01:30:a4:c4:06:1b:ec:2a:47:f8:25:99:cc:e5:95: f1:9c:82:34:77:95:39:3d:a8:59:f4:4b:b1:46:6e: 25:77:67:ca:eb:9f:21:40:4e:50:5c:a5:e0:1b:f6: 18:e5:07:c9:fc:9f:c1:60:e7:f8:f3:e7:f5:20:68: 0c:a2:05:51:07:3f:40:7d:e4:2c:b6:36:86:44:52: 2f:44:29:5b:03:8b:f9:81:14:a9:39:1b:8c:eb:ef: 71:bf:38:71:ac:51:2d:86:5d:95:eb:44:9b:ea:92: 42:33:c7:de:73:70:6a:e9:40:cc:d0:fd:1b:9d:20: c7:69:98:fa:e8:3f:6b:ba:e4:00:c4:fe:d6:0f:16: 9e:01:25:6e:70:a7:2d:3c:4b:75:44:72:01:9b:2b: 53:1c:60:d2:46:14:cd:24:1b:4f:f4:89:fe:07:c2: 19:94:f2:84:5f:c4:a2:b2:16:c5:7d:22:da:8b:c3: 37:ca:d1:f5:31:21:f6:73:1b:f7:b7:21:dd:8d:b8: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FC:FE:9A:13:73:11:AC:EA:C4:06:F7:56:B3:9E:FA:6A:C0:87:9D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS216075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.0.0/24 Signature Algorithm: sha256WithRSAEncryption b0:bd:66:db:67:fa:d4:6c:62:f7:77:3e:60:9f:0f:4c:78:f1: 0b:03:a1:87:97:25:2a:c4:86:ed:b1:c7:5a:4f:cb:30:a8:e6: da:4c:50:9a:cf:55:29:51:61:13:16:e9:14:26:40:f3:21:86: 8f:47:08:95:c6:84:ef:c5:b3:3d:ea:6b:9f:b9:2a:3f:9e:a6: a5:a2:f7:c6:31:08:89:a5:21:d0:98:f3:10:a3:b3:1f:27:5b: 79:5a:51:1c:37:e7:e0:3e:0c:62:5b:05:49:6b:6f:7c:41:4d: 05:20:f3:86:37:e8:ec:4b:13:50:ed:0a:ef:fc:90:98:a8:e4: e8:03:13:f9:cd:f0:df:0a:44:89:63:03:5c:85:29:a5:60:47: 70:23:af:bf:d2:ef:ff:5a:8e:9c:c8:46:37:17:0e:31:f5:21: e9:e3:e8:2a:2b:65:bd:f0:46:61:a0:22:b5:bb:fc:2b:1a:e5: 00:76:dc:93:79:0f:93:d9:9a:07:07:5e:cc:39:1e:ae:14:16: ad:1f:6b:b1:3c:30:f5:50:37:00:b6:55:ad:a3:67:38:dd:3d: 83:ab:19:6f:d2:7f:10:c0:53:58:fd:08:ac:0b:d3:1a:48:e9: df:3f:c5:b4:21:bf:49:e9:5b:dc:60:6e:bd:42:fa:b9:85:69: e5:89:91:7a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUWV+f4ow9TMCAorW/zK05HhAO5eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MDBaFw0yNzEwMDQwNjEzMDBaMDMxMTAvBgNV BAMTKEFCRkNGRTlBMTM3MzExQUNFQUM0MDZGNzU2QjM5RUZBNkFDMDg3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNA2CXSth5pH4eE4DUZbgkZCp DJ5U/xL6ZQZ3YdDBx1UlYQk+bM603jN5gYY+ePNLLlU39FxXjTmvxwEwpMQGG+wq R/glmczllfGcgjR3lTk9qFn0S7FGbiV3Z8rrnyFATlBcpeAb9hjlB8n8n8Fg5/jz 5/UgaAyiBVEHP0B95Cy2NoZEUi9EKVsDi/mBFKk5G4zr73G/OHGsUS2GXZXrRJvq kkIzx95zcGrpQMzQ/RudIMdpmProP2u65ADE/tYPFp4BJW5wpy08S3VEcgGbK1Mc YNJGFM0kG0/0if4HwhmU8oRfxKKyFsV9ItqLwzfK0fUxIfZzG/e3Id2NuOT3AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUq/z+mhNzEazqxAb3VrOe+mrAh50wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTYwNzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQQAwDQYJKoZIhvcNAQELBQADggEBALC9Zttn+tRsYvd3PmCfD0x4 8QsDoYeXJSrEhu2xx1pPyzCo5tpMUJrPVSlRYRMW6RQmQPMhho9HCJXGhO/Fsz3q a5+5Kj+epqWi98YxCImlIdCY8xCjsx8nW3laURw35+A+DGJbBUlrb3xBTQUg84Y3 6OxLE1DtCu/8kJio5OgDE/nN8N8KRIljA1yFKaVgR3Ajr7/S7/9ajpzIRjcXDjH1 Ienj6CorZb3wRmGgIrW7/Csa5QB23JN5D5PZmgcHXsw5Hq4UFq0fa7E8MPVQNwC2 Va2jZzjdPYOrGW/SfxDAU1j9CKwL0xpI6d8/xbQhv0npW9xgbr1C+rmFaeWJkXo= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:59 2026 by rpki-client