$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218872.roa File: AS218872.roa (raw, json) Hash identifier: VDwOQAAxKsbQcBkOpIHUdql44nQIrgXXsz4E4PXFO04= Subject key identifier: 50:61:68:25:11:10:ED:DF:CB:25:8C:24:BA:4C:C7:CD:A8:B8:3E:BF Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 02BD19C64955A5760E2D59EBA97BA7038F07E544 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218872.roa Signing time: Tue 06 Oct 2026 09:20:40 +0000 ROA not before: Tue 06 Oct 2026 09:15:40 +0000 ROA not after: Tue 05 Oct 2027 09:20:40 +0000 asID: 218872 IP address blocks: 79.176.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bd:19:c6:49:55:a5:76:0e:2d:59:eb:a9:7b:a7:03:8f:07:e5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 09:15:40 2026 GMT Not After : Oct 5 09:20:40 2027 GMT Subject: CN=506168251110EDDFCB258C24BA4CC7CDA8B83EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:85:0e:49:ef:12:a6:58:46:47:98:42:3a: 28:7a:ee:d2:3a:3a:cc:56:b9:c0:41:7f:31:a1:1d: a4:f3:18:a7:f8:5a:4d:3b:b2:fd:5c:6c:04:1a:d8: 1a:8f:c6:35:7a:a2:1f:c7:b4:8c:a8:5b:51:62:6f: 98:2e:de:b5:d0:e5:79:9c:8a:24:f1:86:10:1d:38: fb:e2:57:da:3d:01:0f:76:41:59:b7:87:80:3d:c1: 02:7a:f5:b0:19:27:f9:5b:22:4a:ea:17:7e:ea:db: 95:12:27:66:8e:95:cd:cb:03:cb:e6:50:4e:66:ab: 4f:e5:ce:75:42:3a:01:a7:af:81:ac:3c:e4:41:8d: a5:3b:14:80:55:70:ae:d3:ed:31:d6:c0:ff:41:61: 5b:24:f0:b4:18:69:e7:84:0d:68:33:07:6c:92:bd: 88:6c:93:45:91:eb:dd:9e:41:19:60:9d:74:90:03: 57:1b:c6:9d:3b:b0:a9:a4:46:04:de:60:04:b2:51: aa:51:f6:f1:14:4a:77:dd:84:c5:3b:7e:56:c3:8d: 0d:89:50:ee:d0:bb:b3:09:6c:bc:e0:5a:d3:3a:19: 67:e5:1a:d4:95:a8:cf:ae:6b:fd:d9:87:f6:fe:e5: 69:1c:f7:10:a9:99:83:69:b5:d6:e1:88:82:f4:88: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:61:68:25:11:10:ED:DF:CB:25:8C:24:BA:4C:C7:CD:A8:B8:3E:BF X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218872.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.48.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:48:84:f8:cb:aa:79:2e:98:1c:7c:22:1a:6e:7b:10:f2:8a: 1e:c0:12:33:9e:1d:5d:d0:15:7b:8a:c3:ca:bb:37:ad:0a:d7: e0:11:a4:44:cd:75:18:48:3c:e3:0f:25:6a:33:c8:77:5d:44: 3e:38:75:f7:06:ef:0e:b8:3d:ce:5b:ca:1d:13:66:41:22:ce: ab:21:2c:ad:77:3f:ba:34:9a:90:2c:7c:43:7d:ae:81:c3:e1: a3:f0:20:ae:58:33:ab:34:26:03:b3:08:7f:08:92:84:e7:6a: 14:6f:65:16:74:9b:aa:63:7f:bf:ef:16:52:f4:b2:8f:61:e9: 9a:fe:3d:78:58:b1:f4:40:ed:04:af:3d:0f:ca:c7:7f:b2:d8: d9:c1:5e:81:ca:51:ee:d0:39:12:fb:58:58:01:85:16:fc:33: d2:e1:0e:3c:c5:02:63:bf:6e:1f:2b:f9:f1:b5:12:3e:d1:dc: fd:5c:d4:0e:64:83:19:88:87:82:d6:95:f9:c5:37:b1:29:6f: 97:ff:b8:fb:31:58:61:9b:32:65:64:42:45:62:41:f4:c1:40: f4:b4:65:55:da:8c:ba:41:86:96:a2:47:ef:00:ee:10:b3:0d: d7:f0:92:35:17:f8:be:4d:06:88:ee:d7:e7:e9:33:ee:47:54: 60:c3:9a:49 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUAr0ZxklVpXYOLVnrqXunA48H5UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYwOTE1NDBaFw0yNzEwMDUwOTIwNDBaMDMxMTAvBgNV BAMTKDUwNjE2ODI1MTExMEVEREZDQjI1OEMyNEJBNENDN0NEQThCODNFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4F4UOSe8SplhGR5hCOih67tI6 OsxWucBBfzGhHaTzGKf4Wk07sv1cbAQa2BqPxjV6oh/HtIyoW1Fib5gu3rXQ5Xmc iiTxhhAdOPviV9o9AQ92QVm3h4A9wQJ69bAZJ/lbIkrqF37q25USJ2aOlc3LA8vm UE5mq0/lznVCOgGnr4GsPORBjaU7FIBVcK7T7THWwP9BYVsk8LQYaeeEDWgzB2yS vYhsk0WR692eQRlgnXSQA1cbxp07sKmkRgTeYASyUapR9vEUSnfdhMU7flbDjQ2J UO7Qu7MJbLzgWtM6GWflGtSVqM+ua/3Zh/b+5Wkc9xCpmYNptdbhiIL0iJl9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUUGFoJREQ7d/LJYwkukzHzai4Pr8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg4NzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPsDAwDQYJKoZIhvcNAQELBQADggEBAA1IhPjLqnkumBx8IhpuexDy ih7AEjOeHV3QFXuKw8q7N60K1+ARpETNdRhIPOMPJWozyHddRD44dfcG7w64Pc5b yh0TZkEizqshLK13P7o0mpAsfEN9roHD4aPwIK5YM6s0JgOzCH8IkoTnahRvZRZ0 m6pjf7/vFlL0so9h6Zr+PXhYsfRA7QSvPQ/Kx3+y2NnBXoHKUe7QORL7WFgBhRb8 M9LhDjzFAmO/bh8r+fG1Ej7R3P1c1A5kgxmIh4LWlfnFN7Epb5f/uPsxWGGbMmVk QkViQfTBQPS0ZVXajLpBhpaiR+8A7hCzDdfwkjUX+L5NBoju1+fpM+5HVGDDmkk= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:46 2026 by rpki-client