$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218797.roa File: AS218797.roa (raw, json) Hash identifier: 29iuM00IJfI4MdZztZemENCcq+uIOyp5o+w4qBMQNsw= Subject key identifier: EE:12:D1:12:09:C8:F0:70:54:A3:91:B7:30:27:26:F2:68:97:11:45 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 04CFCCD2ED3C90F970C91D49BCD297F3FEC44B9D Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218797.roa Signing time: Mon 05 Oct 2026 06:13:36 +0000 ROA not before: Mon 05 Oct 2026 06:08:36 +0000 ROA not after: Mon 04 Oct 2027 06:13:36 +0000 asID: 218797 IP address blocks: 109.66.28.0/24 maxlen: 24 109.66.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cf:cc:d2:ed:3c:90:f9:70:c9:1d:49:bc:d2:97:f3:fe:c4:4b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:36 2026 GMT Not After : Oct 4 06:13:36 2027 GMT Subject: CN=EE12D11209C8F07054A391B7302726F268971145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:05:00:ef:6b:a2:88:07:2e:1d:d0:e5:a8: 61:48:5b:dc:08:7f:8c:ed:90:49:e4:0c:f5:c8:d4: 2f:5e:69:88:ac:a8:0b:f2:4a:18:5c:7e:11:fb:18: c9:db:01:97:0e:27:b9:bb:0b:f5:17:6b:d1:a4:ec: 02:4b:39:3c:39:97:c7:40:f8:cc:ae:20:e6:21:08: aa:0a:5a:8f:71:1e:ab:f5:db:fb:d6:6b:5c:ee:5e: c5:58:c2:ae:bc:e8:be:30:ad:67:cf:23:4f:05:28: 6e:01:41:78:9a:3b:b3:fb:1b:fc:9f:14:9f:3f:9e: 43:3e:1a:86:8f:1d:c1:40:57:33:f2:f1:fc:a6:57: d1:54:58:80:67:6f:1d:91:c0:6a:1f:c9:92:78:41: 14:07:3e:25:ac:c9:4b:97:d9:bf:d9:4f:12:4b:22: 4a:3f:d1:54:20:85:4d:16:8a:58:2f:c9:50:21:5c: 85:02:65:e6:0a:40:d1:de:a3:a7:79:50:cc:27:86: 66:78:0e:b5:7c:fd:70:e5:c5:5e:d1:70:8a:7b:f8: 2a:08:0d:a9:95:28:c0:6c:e0:e2:07:fe:ea:53:f0: a0:43:a3:30:87:2f:41:10:9c:db:ed:6a:d7:dd:80: 8e:48:bc:0e:5c:d3:95:4d:9e:90:29:1c:87:fd:e3: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:D1:12:09:C8:F0:70:54:A3:91:B7:30:27:26:F2:68:97:11:45 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.28.0/23 Signature Algorithm: sha256WithRSAEncryption 06:04:17:58:11:23:39:f6:f7:12:ab:03:b2:d5:d4:18:31:00: d5:50:af:e3:f5:98:80:79:c1:75:84:fa:a0:3a:7f:8a:37:63: 62:d9:a8:9a:63:7e:c2:94:14:d4:6a:de:87:f5:db:f9:af:ad: 3f:f5:04:46:c2:69:c8:67:b2:e5:14:ea:e6:39:f6:fa:de:2b: b1:81:d2:b9:70:a2:79:6d:84:75:2e:12:94:f0:97:b1:cc:d3: cb:34:b1:e5:b4:7f:0b:3f:f1:9b:3c:2d:4e:19:03:f0:47:9a: d5:84:72:98:b9:a8:7d:9d:a2:43:9f:d8:fb:68:e0:ce:40:e6: c4:2c:3b:b4:af:0d:66:bb:03:c4:aa:3b:eb:e6:fe:3e:13:70: d0:0f:25:b2:aa:68:e6:85:7d:cb:5d:34:49:e2:e1:43:b1:90: fc:ec:cd:eb:7b:f1:e2:57:25:c5:5a:d9:e1:dd:68:41:53:40: 87:6b:1b:7a:f2:dd:c1:23:a2:28:1c:bc:06:eb:6e:a5:93:4e: 59:4a:63:b8:d0:be:e5:62:9a:2c:14:0a:27:c7:e0:c8:12:91: 73:58:72:72:89:25:46:57:34:5b:4a:00:8e:15:2d:5e:72:bc: 07:3d:a4:70:2d:01:d7:59:e7:c5:a4:ab:91:47:af:d9:a6:50: 18:c1:b1:5a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUBM/M0u08kPlwyR1JvNKX8/7ES50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzZaFw0yNzEwMDQwNjEzMzZaMDMxMTAvBgNV BAMTKEVFMTJEMTEyMDlDOEYwNzA1NEEzOTFCNzMwMjcyNkYyNjg5NzExNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM2AUA72uiiAcuHdDlqGFIW9wI f4ztkEnkDPXI1C9eaYisqAvyShhcfhH7GMnbAZcOJ7m7C/UXa9Gk7AJLOTw5l8dA +MyuIOYhCKoKWo9xHqv12/vWa1zuXsVYwq686L4wrWfPI08FKG4BQXiaO7P7G/yf FJ8/nkM+GoaPHcFAVzPy8fymV9FUWIBnbx2RwGofyZJ4QRQHPiWsyUuX2b/ZTxJL Iko/0VQghU0WilgvyVAhXIUCZeYKQNHeo6d5UMwnhmZ4DrV8/XDlxV7RcIp7+CoI DamVKMBs4OIH/upT8KBDozCHL0EQnNvtatfdgI5IvA5c05VNnpApHIf94ydhAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU7hLREgnI8HBUo5G3MCcm8miXEUUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg3OTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQhwwDQYJKoZIhvcNAQELBQADggEBAAYEF1gRIzn29xKrA7LV1Bgx ANVQr+P1mIB5wXWE+qA6f4o3Y2LZqJpjfsKUFNRq3of12/mvrT/1BEbCachnsuUU 6uY59vreK7GB0rlwonlthHUuEpTwl7HM08s0seW0fws/8Zs8LU4ZA/BHmtWEcpi5 qH2dokOf2Pto4M5A5sQsO7SvDWa7A8SqO+vm/j4TcNAPJbKqaOaFfctdNEni4UOx kPzszet78eJXJcVa2eHdaEFTQIdrG3ry3cEjoigcvAbrbqWTTllKY7jQvuVimiwU CifH4MgSkXNYcnKJJUZXNFtKAI4VLV5yvAc9pHAtAddZ58Wkq5FHr9mmUBjBsVo= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:51 2026 by rpki-client