$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218527.roa File: AS218527.roa (raw, json) Hash identifier: yS76EKcHdGsSt/yeSkfiOtrUX8OFRgYpTuC8Def4VGE= Subject key identifier: E7:57:00:91:79:6A:81:85:FC:38:48:D2:02:7A:10:C8:AB:A2:69:D5 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 2084251B6DACE8084F660EFE76E80C09A9A1BD17 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218527.roa Signing time: Tue 06 Oct 2026 13:52:41 +0000 ROA not before: Tue 06 Oct 2026 13:47:41 +0000 ROA not after: Tue 05 Oct 2027 13:52:41 +0000 asID: 218527 IP address blocks: 79.182.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:84:25:1b:6d:ac:e8:08:4f:66:0e:fe:76:e8:0c:09:a9:a1:bd:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 13:47:41 2026 GMT Not After : Oct 5 13:52:41 2027 GMT Subject: CN=E7570091796A8185FC3848D2027A10C8ABA269D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:20:49:ef:ed:ea:66:e2:9b:fd:eb:05:38: 44:6a:17:86:4d:75:c2:69:3e:5d:1c:6b:ed:16:e4: ee:65:cc:8d:b0:14:94:70:2f:05:5a:90:7b:52:6e: 43:0d:c5:be:01:a0:20:4e:e3:7b:41:b4:ef:d8:b2: e3:bb:84:d5:d9:49:af:d2:f5:e0:4b:ff:1e:b2:8d: 43:9f:8e:97:44:1d:cc:88:68:3e:ab:2d:60:c5:a2: 16:19:62:a4:40:ff:81:c4:38:c0:7e:49:f2:30:65: 5d:9b:10:c1:5b:ab:a5:79:2f:ac:59:c2:64:48:ac: cf:4a:c5:f0:b4:f8:bc:4f:23:fb:98:52:74:4c:ed: 87:68:c5:0f:db:3a:18:30:0d:89:94:ae:ff:c1:70: 65:46:d4:78:f7:2f:13:80:18:26:cd:c8:73:34:e9: b5:0f:61:e1:70:8a:d1:b0:05:42:75:b1:28:d7:04: 1c:97:61:26:a6:c6:00:81:ef:f8:e2:48:4e:04:da: b5:12:76:09:69:68:61:72:68:a0:74:64:bc:33:fd: f1:f6:60:d4:88:3c:66:56:43:6e:93:8f:8d:11:11: 58:e9:36:29:32:5e:8a:ca:8c:09:1e:bb:26:18:ab: 37:f6:53:b5:3a:fb:c7:35:15:d8:53:37:24:65:d9: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:00:91:79:6A:81:85:FC:38:48:D2:02:7A:10:C8:AB:A2:69:D5 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218527.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.14.0/24 Signature Algorithm: sha256WithRSAEncryption 53:f1:a2:2d:37:47:17:fc:d4:d5:8e:0b:eb:24:f4:62:6f:64: 63:68:1b:4c:56:9e:88:04:1a:cb:d6:f2:f2:5e:61:45:3b:98: ce:4d:f0:bc:4d:6c:2f:9a:dd:bb:6a:74:34:03:6e:ac:7d:46: 77:73:b4:31:11:82:93:5e:ce:22:b0:62:9d:75:54:92:21:a3: 0a:86:b6:a6:b8:c0:9c:df:8a:2f:54:e4:52:81:fd:da:e8:c7: 77:19:fc:13:b2:f6:88:7f:b6:c7:2d:dc:63:9e:52:d1:7e:9f: 10:8f:1f:3b:a9:b5:9b:ab:d2:54:cb:88:ed:ae:cc:69:d8:73: f5:22:eb:5f:b2:55:08:7f:0a:00:b7:57:41:94:0e:d6:e9:a4: 73:4c:99:af:9b:e1:f1:fe:84:90:a9:94:b2:12:28:61:bf:f0: 75:e5:49:9f:12:05:3d:72:7c:c0:98:8f:71:9a:22:bc:05:4c: 43:d9:13:1a:7e:aa:67:0c:ce:ac:f6:bc:83:16:33:bc:c3:6a: ee:a3:a1:2f:27:3b:50:84:e5:1d:86:23:55:e1:63:b4:d5:7c: 4a:55:7e:e9:c0:a7:d1:c5:d1:4f:9b:11:40:6b:d7:91:d7:58: 84:f4:ef:31:1c:1b:92:21:e3:d0:87:d8:b0:0a:05:4b:05:16: 56:07:ec:1c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUIIQlG22s6AhPZg7+dugMCamhvRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYxMzQ3NDFaFw0yNzEwMDUxMzUyNDFaMDMxMTAvBgNV BAMTKEU3NTcwMDkxNzk2QTgxODVGQzM4NDhEMjAyN0ExMEM4QUJBMjY5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLZSBJ7+3qZuKb/esFOERqF4ZN dcJpPl0ca+0W5O5lzI2wFJRwLwVakHtSbkMNxb4BoCBO43tBtO/YsuO7hNXZSa/S 9eBL/x6yjUOfjpdEHcyIaD6rLWDFohYZYqRA/4HEOMB+SfIwZV2bEMFbq6V5L6xZ wmRIrM9KxfC0+LxPI/uYUnRM7YdoxQ/bOhgwDYmUrv/BcGVG1Hj3LxOAGCbNyHM0 6bUPYeFwitGwBUJ1sSjXBByXYSamxgCB7/jiSE4E2rUSdglpaGFyaKB0ZLwz/fH2 YNSIPGZWQ26Tj40REVjpNikyXorKjAkeuyYYqzf2U7U6+8c1FdhTNyRl2eXrAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU51cAkXlqgYX8OEjSAnoQyKuiadUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg1Mjcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtg4wDQYJKoZIhvcNAQELBQADggEBAFPxoi03Rxf81NWOC+sk9GJv ZGNoG0xWnogEGsvW8vJeYUU7mM5N8LxNbC+a3btqdDQDbqx9RndztDERgpNeziKw Yp11VJIhowqGtqa4wJzfii9U5FKB/drox3cZ/BOy9oh/tsct3GOeUtF+nxCPHzup tZur0lTLiO2uzGnYc/Ui61+yVQh/CgC3V0GUDtbppHNMma+b4fH+hJCplLISKGG/ 8HXlSZ8SBT1yfMCYj3GaIrwFTEPZExp+qmcMzqz2vIMWM7zDau6joS8nO1CE5R2G I1XhY7TVfEpVfunAp9HF0U+bEUBr15HXWIT07zEcG5Ih49CH2LAKBUsFFlYH7Bw= -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:00 2026 by rpki-client