$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS216429.roa File: AS216429.roa (raw, json) Hash identifier: iTucqRY2lf/AaRJRJzzakVSSVMv08+0BbEXCdZQGD1k= Subject key identifier: 25:8A:19:C6:DC:F1:D8:90:B0:F7:3A:A5:C9:21:A6:E0:BB:02:CA:B7 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6363451C55CF7F84D19049AE1BB23E4DE8071FA3 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS216429.roa Signing time: Tue 06 Oct 2026 09:53:33 +0000 ROA not before: Tue 06 Oct 2026 09:48:33 +0000 ROA not after: Tue 05 Oct 2027 09:53:33 +0000 asID: 216429 IP address blocks: 79.176.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:63:45:1c:55:cf:7f:84:d1:90:49:ae:1b:b2:3e:4d:e8:07:1f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 09:48:33 2026 GMT Not After : Oct 5 09:53:33 2027 GMT Subject: CN=258A19C6DCF1D890B0F73AA5C921A6E0BB02CAB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:6a:ec:b3:48:c2:01:e2:42:ad:0a:7a:c5: 5c:c4:08:5c:07:7e:7d:b2:0f:bd:3d:ba:6a:45:a3: 87:d7:b0:82:06:d5:c9:b5:8b:15:06:d5:8d:b3:48: dd:ef:e7:ea:ac:fe:e3:d6:8a:be:69:0b:3f:00:b2: 1a:a3:fe:15:25:20:c3:9e:f5:7c:52:e6:50:91:8d: e2:a9:cf:dd:77:39:20:fb:5f:0c:d8:04:f6:18:a9: 27:ba:3f:73:c1:bb:0a:19:23:25:88:d5:90:2b:8c: 9f:cd:f8:5b:d7:14:32:0f:a3:41:bb:c0:17:64:e8: a8:06:b2:52:1c:30:92:26:b0:f9:b8:3d:7e:5e:e4: 8e:bb:2c:95:32:1d:77:88:b6:14:e1:81:f8:62:59: e3:24:26:9d:6c:20:ed:d8:81:3d:c9:a0:cf:97:c2: 0b:0f:5a:5b:31:55:c3:9f:43:66:d3:62:0c:41:7f: 50:c0:15:a5:24:7f:35:95:5b:27:55:0a:7d:c8:9f: 96:54:b9:65:79:27:90:73:70:1a:85:20:a7:f1:cc: 66:18:23:03:3c:9a:f6:1a:76:09:44:06:f4:ab:73: 4a:3d:b1:83:b6:bb:b1:dd:1f:2c:4f:d3:45:42:09: 05:be:1e:45:49:97:b6:64:a1:f3:7a:86:3f:c9:81: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8A:19:C6:DC:F1:D8:90:B0:F7:3A:A5:C9:21:A6:E0:BB:02:CA:B7 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS216429.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.42.0/24 Signature Algorithm: sha256WithRSAEncryption 46:3f:59:34:9a:c0:54:1e:c6:34:e8:d7:08:06:80:a6:5e:ea: 51:a5:2e:10:e1:3c:4f:a9:d3:32:38:9b:8f:af:7b:82:ec:24: 88:38:73:ba:25:0f:f1:90:4c:48:cc:c1:c3:99:43:5e:da:eb: 7c:d7:03:35:69:44:cb:49:ee:f2:31:72:25:d5:43:4c:ba:c6: a5:54:b9:ab:d9:34:cd:cf:b9:8e:c2:3e:af:74:bc:b9:f7:1b: de:82:99:cb:2f:38:f7:fa:a6:72:d8:dd:65:f1:75:b5:57:34: a8:82:df:e9:b6:9f:15:83:e9:0e:cc:f5:8e:91:f3:45:01:7e: 75:95:e9:63:07:ed:ef:e2:bd:da:fa:08:c3:57:78:42:16:c1: 4b:b5:10:a9:dc:84:cb:a5:bc:8d:28:fa:01:85:29:04:89:23: e9:45:60:5d:ce:dc:27:08:fd:13:6c:14:3f:82:6e:94:e9:07: ee:60:67:f6:2f:da:1b:51:4d:c2:f1:e6:f6:1b:7d:f9:85:f5: 43:d5:f0:5d:e2:7d:02:06:0d:18:71:cd:c8:e8:e8:21:82:26: d1:79:de:ee:d1:d3:78:04:45:f1:42:c5:0d:d3:28:a0:e1:bc: c5:1f:6a:0a:32:3b:d2:13:32:2d:bf:a0:70:42:86:ed:b8:c0: e3:31:be:6a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUY2NFHFXPf4TRkEmuG7I+TegHH6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYwOTQ4MzNaFw0yNzEwMDUwOTUzMzNaMDMxMTAvBgNV BAMTKDI1OEExOUM2RENGMUQ4OTBCMEY3M0FBNUM5MjFBNkUwQkIwMkNBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7Wrss0jCAeJCrQp6xVzECFwH fn2yD709umpFo4fXsIIG1cm1ixUG1Y2zSN3v5+qs/uPWir5pCz8Ashqj/hUlIMOe 9XxS5lCRjeKpz913OSD7XwzYBPYYqSe6P3PBuwoZIyWI1ZArjJ/N+FvXFDIPo0G7 wBdk6KgGslIcMJImsPm4PX5e5I67LJUyHXeIthThgfhiWeMkJp1sIO3YgT3JoM+X wgsPWlsxVcOfQ2bTYgxBf1DAFaUkfzWVWydVCn3In5ZUuWV5J5BzcBqFIKfxzGYY IwM8mvYadglEBvSrc0o9sYO2u7HdHyxP00VCCQW+HkVJl7ZkofN6hj/JgRjJAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUJYoZxtzx2JCw9zqlySGm4LsCyrcwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTY0Mjkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPsCowDQYJKoZIhvcNAQELBQADggEBAEY/WTSawFQexjTo1wgGgKZe 6lGlLhDhPE+p0zI4m4+ve4LsJIg4c7olD/GQTEjMwcOZQ17a63zXAzVpRMtJ7vIx ciXVQ0y6xqVUuavZNM3PuY7CPq90vLn3G96CmcsvOPf6pnLY3WXxdbVXNKiC3+m2 nxWD6Q7M9Y6R80UBfnWV6WMH7e/ivdr6CMNXeEIWwUu1EKnchMulvI0o+gGFKQSJ I+lFYF3O3CcI/RNsFD+CbpTpB+5gZ/Yv2htRTcLx5vYbffmF9UPV8F3ifQIGDRhx zcjo6CGCJtF53u7R03gERfFCxQ3TKKDhvMUfagoyO9ITMi2/oHBChu24wOMxvmo= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:32 2026 by rpki-client