$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218754.roa File: AS218754.roa (raw, json) Hash identifier: PVyiTqj8HojKppRRpsX5PGitbmT8vLROBtAAvk8006w= Subject key identifier: D9:82:DE:1A:DE:D8:FE:D1:AC:0E:3D:75:4B:6C:9E:2B:5C:23:36:63 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 03C520F3AFCA3A3F525C2F1BA259C727F6724715 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218754.roa Signing time: Mon 05 Oct 2026 06:13:26 +0000 ROA not before: Mon 05 Oct 2026 06:08:26 +0000 ROA not after: Mon 04 Oct 2027 06:13:26 +0000 asID: 218754 IP address blocks: 109.66.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c5:20:f3:af:ca:3a:3f:52:5c:2f:1b:a2:59:c7:27:f6:72:47:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:26 2026 GMT Not After : Oct 4 06:13:26 2027 GMT Subject: CN=D982DE1ADED8FED1AC0E3D754B6C9E2B5C233663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:b9:69:08:11:fa:32:59:50:c7:46:00:e1: 7f:dc:e0:7d:13:17:2f:10:6b:6f:13:94:c1:69:9c: 21:a3:fc:e9:37:e2:68:f4:7e:35:48:15:7d:54:91: cf:ac:98:b9:70:75:04:d0:d5:92:9c:30:ae:39:d7: 70:cf:0a:24:ec:12:26:49:14:e5:ec:80:2e:4e:dd: 05:e9:0e:f1:15:92:74:b2:d9:b2:5b:92:de:77:63: 83:1f:32:c4:eb:dd:82:05:a7:ec:08:a3:5c:2a:19: 61:4e:e3:23:e0:e7:61:b9:49:51:78:dc:fd:0b:c2: 26:69:dd:05:4c:36:36:9a:d5:c1:21:e5:b5:1b:82: 28:9b:b7:93:b1:07:bc:30:91:01:9d:0e:3d:ef:e2: b4:96:7b:a6:02:3a:f6:b6:63:06:1d:72:1d:22:53: e8:36:d6:6c:8d:a2:d3:72:98:35:cc:b7:2c:8f:23: 3e:fd:0e:13:be:6a:74:63:04:50:ba:d4:af:36:da: 2d:fd:77:11:a4:ad:72:3b:a5:f1:45:89:c8:1d:13: b9:76:06:b8:aa:b8:ec:f9:88:f6:b0:0e:87:f8:79: 82:15:5a:00:13:8d:f5:b9:31:67:57:be:7a:7a:72: 7d:8e:b0:96:44:f4:77:c5:fb:01:c6:c8:a1:4a:ce: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:82:DE:1A:DE:D8:FE:D1:AC:0E:3D:75:4B:6C:9E:2B:5C:23:36:63 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218754.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.200.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:8e:6c:18:f1:92:f0:ef:c0:fc:f1:36:f5:a4:97:d2:de:70: 12:ca:f3:41:f8:46:5f:f6:0f:57:47:c6:22:17:0d:6c:df:46: 2d:02:a5:5f:07:d8:2b:e4:65:a1:ab:1c:06:b9:1f:d6:95:4b: 99:97:06:dd:c1:3d:e1:86:b0:d0:ca:44:cf:92:cb:08:16:16: 37:8f:2d:19:5e:77:73:6f:21:0f:43:14:6c:14:54:ac:21:c1: 07:5d:40:14:93:2f:02:b9:4b:0b:16:c1:0b:df:c1:5a:62:a0: 81:d8:15:4c:af:2e:70:fe:1b:55:f2:77:4b:2e:8c:a9:0c:4f: d8:14:42:89:c0:bd:62:cf:4f:df:0c:ad:cf:b5:a9:aa:0c:36: ce:d1:44:d9:db:e2:3a:74:c8:54:9d:20:b7:75:ae:7f:dc:65: d1:29:77:36:e6:2d:25:95:b2:8d:bd:2f:19:54:14:b3:18:e4: 30:a4:55:dd:c9:9e:be:1d:32:25:72:45:c2:94:79:12:83:c7: 4f:3d:09:2e:6b:86:63:16:65:88:eb:19:49:c7:23:a4:fa:58: c1:4c:27:32:51:c5:d7:3b:5e:5b:5f:ec:8f:db:94:11:49:0f: df:29:80:67:d7:67:7d:cd:fb:5f:64:47:66:93:76:15:7b:3c: 55:0f:cf:3b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUA8Ug86/KOj9SXC8bolnHJ/ZyRxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MjZaFw0yNzEwMDQwNjEzMjZaMDMxMTAvBgNV BAMTKEQ5ODJERTFBREVEOEZFRDFBQzBFM0Q3NTRCNkM5RTJCNUMyMzM2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWirlpCBH6MllQx0YA4X/c4H0T Fy8Qa28TlMFpnCGj/Ok34mj0fjVIFX1Ukc+smLlwdQTQ1ZKcMK4513DPCiTsEiZJ FOXsgC5O3QXpDvEVknSy2bJbkt53Y4MfMsTr3YIFp+wIo1wqGWFO4yPg52G5SVF4 3P0LwiZp3QVMNjaa1cEh5bUbgiibt5OxB7wwkQGdDj3v4rSWe6YCOva2YwYdch0i U+g21myNotNymDXMtyyPIz79DhO+anRjBFC61K822i39dxGkrXI7pfFFicgdE7l2 BriquOz5iPawDof4eYIVWgATjfW5MWdXvnp6cn2OsJZE9HfF+wHGyKFKzisHAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU2YLeGt7Y/tGsDj11S2yeK1wjNmMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg3NTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQsgwDQYJKoZIhvcNAQELBQADggEBAF+ObBjxkvDvwPzxNvWkl9Le cBLK80H4Rl/2D1dHxiIXDWzfRi0CpV8H2CvkZaGrHAa5H9aVS5mXBt3BPeGGsNDK RM+SywgWFjePLRled3NvIQ9DFGwUVKwhwQddQBSTLwK5SwsWwQvfwVpioIHYFUyv LnD+G1Xyd0sujKkMT9gUQonAvWLPT98Mrc+1qaoMNs7RRNnb4jp0yFSdILd1rn/c ZdEpdzbmLSWVso29LxlUFLMY5DCkVd3Jnr4dMiVyRcKUeRKDx089CS5rhmMWZYjr GUnHI6T6WMFMJzJRxdc7Xltf7I/blBFJD98pgGfXZ33N+19kR2aTdhV7PFUPzzs= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:39 2026 by rpki-client