$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218515.roa File: AS218515.roa (raw, json) Hash identifier: lcRtsrSF/3xqfLrFIHMCPRz8mK1y4yJH4o6MISKvC6Q= Subject key identifier: 5A:5E:50:7F:86:4B:9C:3C:73:0C:01:EF:EE:7D:B6:F6:65:D3:BE:36 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6FA0B30E2D3C5A364ED3BDD6D0FB894B747B39BD Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218515.roa Signing time: Wed 14 Oct 2026 16:09:42 +0000 ROA not before: Wed 14 Oct 2026 16:04:42 +0000 ROA not after: Wed 13 Oct 2027 16:09:42 +0000 asID: 218515 IP address blocks: 79.182.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a0:b3:0e:2d:3c:5a:36:4e:d3:bd:d6:d0:fb:89:4b:74:7b:39:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 14 16:04:42 2026 GMT Not After : Oct 13 16:09:42 2027 GMT Subject: CN=5A5E507F864B9C3C730C01EFEE7DB6F665D3BE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:a3:8f:ad:be:80:f2:bc:44:e2:70:3e:ca: 46:32:d7:c0:50:51:67:18:55:50:25:8a:bf:cd:12: 63:3a:7a:0a:23:8f:55:b4:5a:82:ff:a5:c6:d8:40: 6a:cc:67:d2:bb:6b:8a:c8:65:70:34:dc:c7:32:99: 42:8c:ca:24:e9:60:d4:3a:7a:37:c5:55:38:b7:a4: 63:64:d4:c0:c2:e1:41:f8:1f:13:07:63:04:71:1c: b7:4e:b9:f4:82:3e:77:91:9c:bd:01:c2:32:6f:0e: 2d:4b:aa:e2:0c:99:9c:87:b2:55:0e:ba:19:0e:3c: a6:eb:44:66:45:a5:d0:07:d8:3a:62:53:40:f2:ea: f0:c5:32:73:32:01:41:2d:37:d6:cb:a5:d1:ea:9f: b9:96:4e:db:34:3d:b5:9e:80:90:5b:2a:fc:6b:6a: f6:f2:61:0a:8a:03:32:dc:04:e6:c2:8e:a8:94:00: 59:8a:b4:c7:05:c3:4b:d9:59:0f:40:fc:d7:8b:c4: 7c:4c:ab:db:e6:05:b6:da:51:36:e4:11:cd:8c:55: b8:35:61:63:4c:63:b7:38:0e:58:d4:96:9b:6c:55: e0:c9:1d:39:31:45:1e:8b:a7:40:91:9d:f4:6b:68: d7:6c:17:3e:56:6e:2b:e6:45:8a:ce:a0:a9:7c:56: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5E:50:7F:86:4B:9C:3C:73:0C:01:EF:EE:7D:B6:F6:65:D3:BE:36 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218515.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.118.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:34:88:c4:1e:32:54:b5:ac:9f:5e:7d:1e:a6:36:90:00:18: ee:8b:d0:fd:23:d1:ea:41:36:28:1c:e7:ac:f1:8a:98:a5:07: 00:31:cc:b9:cf:98:41:a5:83:cb:2a:81:e0:60:47:8f:3c:24: 57:5f:52:e6:7d:50:67:fe:d4:7d:5b:f3:c3:95:d1:29:11:ed: 8c:f7:d0:e7:b1:f7:df:03:fa:2f:67:ec:62:d2:a6:0b:c7:45: 26:1f:48:c9:72:2d:52:fb:e3:6b:84:b9:62:bc:e9:62:1b:34: 17:7b:72:dd:fb:38:25:39:e2:db:08:a3:eb:5b:73:33:f6:96: f6:cc:06:f8:91:9c:18:60:9b:2c:37:54:f7:2b:32:05:b8:8e: 9f:0a:0c:4c:73:78:e2:f9:14:90:47:c1:17:68:2d:ad:ac:ee: bf:66:4d:29:d3:a8:f8:2d:54:5e:73:f0:39:7e:2e:2b:60:95: 25:7b:28:6e:f4:28:5e:70:07:c3:62:39:7c:f9:4d:6d:2b:85: 25:ba:96:60:8a:ab:d2:79:82:7b:38:7e:07:17:a4:78:db:4f: 2e:ac:93:77:82:67:1e:1a:91:8d:c4:c1:20:63:b0:7e:8c:4c: 21:91:4a:41:73:16:d5:d0:1a:11:d2:68:1c:c4:b5:7f:e9:8e: 5f:87:9b:c8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUb6CzDi08WjZO073W0PuJS3R7Ob0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTQxNjA0NDJaFw0yNzEwMTMxNjA5NDJaMDMxMTAvBgNV BAMTKDVBNUU1MDdGODY0QjlDM0M3MzBDMDFFRkVFN0RCNkY2NjVEM0JFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRGKOPrb6A8rxE4nA+ykYy18BQ UWcYVVAlir/NEmM6egojj1W0WoL/pcbYQGrMZ9K7a4rIZXA03McymUKMyiTpYNQ6 ejfFVTi3pGNk1MDC4UH4HxMHYwRxHLdOufSCPneRnL0BwjJvDi1LquIMmZyHslUO uhkOPKbrRGZFpdAH2DpiU0Dy6vDFMnMyAUEtN9bLpdHqn7mWTts0PbWegJBbKvxr avbyYQqKAzLcBObCjqiUAFmKtMcFw0vZWQ9A/NeLxHxMq9vmBbbaUTbkEc2MVbg1 YWNMY7c4DljUlptsVeDJHTkxRR6Lp0CRnfRraNdsFz5WbivmRYrOoKl8Vh7TAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUWl5Qf4ZLnDxzDAHv7n229mXTvjYwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg1MTUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtnYwDQYJKoZIhvcNAQELBQADggEBAEs0iMQeMlS1rJ9efR6mNpAA GO6L0P0j0epBNigc56zxipilBwAxzLnPmEGlg8sqgeBgR488JFdfUuZ9UGf+1H1b 88OV0SkR7Yz30Oex998D+i9n7GLSpgvHRSYfSMlyLVL742uEuWK86WIbNBd7ct37 OCU54tsIo+tbczP2lvbMBviRnBhgmyw3VPcrMgW4jp8KDExzeOL5FJBHwRdoLa2s 7r9mTSnTqPgtVF5z8Dl+LitglSV7KG70KF5wB8NiOXz5TW0rhSW6lmCKq9J5gns4 fgcXpHjbTy6sk3eCZx4akY3EwSBjsH6MTCGRSkFzFtXQGhHSaBzEtX/pjl+Hm8g= -----END CERTIFICATE-----Generated at Thu Nov 5 08:54:07 2026 by rpki-client