
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218616.roa
File: AS218616.roa (raw, json)
Hash identifier: 7oGP0otCdwXT2zYStV2HoPrBD3HRFcJrBNgDcpWSpzQ=
Subject key identifier: 52:5E:10:34:53:1E:82:44:EA:53:A0:8F:9E:08:6F:03:42:B3:F8:15
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 70327BA930537284D8877CDB41BDBC73508EB603
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218616.roa
Signing time: Mon 05 Oct 2026 06:11:10 +0000
ROA not before: Mon 05 Oct 2026 06:06:10 +0000
ROA not after: Mon 04 Oct 2027 06:11:10 +0000
asID: 218616
IP address blocks: 79.176.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:32:7b:a9:30:53:72:84:d8:87:7c:db:41:bd:bc:73:50:8e:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:06:10 2026 GMT
Not After : Oct 4 06:11:10 2027 GMT
Subject: CN=525E1034531E8244EA53A08F9E086F0342B3F815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:55:c8:da:d3:ee:28:e4:d0:b0:fd:78:92:
5b:0e:0d:80:ac:0f:6e:61:c6:5c:60:0b:48:c0:dc:
f2:73:52:82:7e:1d:27:68:e9:bd:c6:4d:20:d2:9a:
e5:22:62:69:d2:73:a8:32:18:da:f7:45:be:ec:77:
5a:08:76:35:4a:68:47:ad:ff:bd:51:43:89:1f:9b:
fd:20:11:2e:bb:28:39:c1:4d:e1:7b:8b:c1:1f:d9:
f4:06:cf:94:66:97:ad:4f:e9:0c:03:5d:c6:58:2d:
0a:f0:72:b7:73:43:89:10:0b:d8:0a:7d:f6:e2:11:
37:e6:0a:f6:8e:35:b5:0b:b2:d5:9a:4a:6e:5c:7a:
d9:ed:fd:71:ec:74:47:31:53:6b:a2:d7:4f:08:4d:
28:7f:a9:a4:9a:cd:05:3e:35:8b:3e:ad:6f:01:8f:
c7:da:0f:3a:1f:f5:d1:0f:28:44:22:8d:80:f4:ad:
67:7e:c7:c1:dd:6b:df:5b:5f:86:42:f5:c3:e4:f8:
94:bc:c7:86:88:ac:3f:55:9a:0d:a9:23:44:a1:c6:
31:c7:71:7d:65:e9:ca:b3:8c:c5:72:f0:36:ee:08:
a0:49:3f:17:53:1a:f0:f9:40:54:3c:5c:47:5a:44:
f3:b5:cf:73:90:8a:90:4d:89:60:df:46:b9:56:22:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:10:34:53:1E:82:44:EA:53:A0:8F:9E:08:6F:03:42:B3:F8:15
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d0:d3:34:31:76:0d:30:f3:3f:f9:5f:81:3a:ae:3f:4c:e3:
08:1d:6e:be:5c:02:5b:4f:2a:9a:c3:48:8b:d7:6e:32:5a:27:
ea:91:8d:99:10:93:3b:46:c6:85:cd:15:e4:64:9a:d9:1b:f0:
1e:d6:a1:e7:e3:ff:b9:54:69:28:ba:9a:f9:53:e3:44:77:21:
ef:41:1b:ec:25:75:1f:87:90:88:ff:71:40:bd:84:b2:70:72:
bc:f7:3f:3c:9f:c4:d3:87:d1:9d:76:a0:71:15:8c:ac:81:08:
f3:4d:49:41:2c:fa:21:fb:3b:f9:ce:8d:6f:48:81:4c:aa:22:
b3:c6:46:4b:2c:91:d2:95:92:df:61:2d:5e:8f:12:b5:dd:a8:
28:d3:bc:f5:f6:de:6a:7d:85:87:9b:99:15:d3:72:d6:46:f2:
94:77:db:80:f2:7c:cc:79:b5:0a:ac:3e:dd:ea:f0:f0:79:eb:
62:3b:4d:bc:3e:55:0e:2f:7f:79:cc:99:38:44:a3:30:5d:c4:
d8:af:ea:36:1c:3b:8b:bf:15:d3:ef:c6:3e:e6:af:0d:8d:ac:
b1:12:6a:3f:28:3e:67:9a:67:60:90:46:ea:06:02:80:b8:ab:
ae:7b:5c:34:fc:f3:b5:d3:f9:db:5e:18:01:53:21:5d:63:2e:
21:ba:fc:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:56:04 2026 by rpki-client