$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218910.roa File: AS218910.roa (raw, json) Hash identifier: ZEd6npDmk/yBzOKASLVjjYxRDE6cobsEJNbQhkxsiCs= Subject key identifier: B7:01:D4:98:39:71:0C:AB:B6:C4:BB:67:35:2D:73:BE:66:10:0E:40 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 780C1AF33F66DF6804564034F7A1A29C363A7703 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218910.roa Signing time: Mon 05 Oct 2026 06:13:37 +0000 ROA not before: Mon 05 Oct 2026 06:08:37 +0000 ROA not after: Mon 04 Oct 2027 06:13:37 +0000 asID: 218910 IP address blocks: 109.66.28.0/24 maxlen: 24 109.66.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0c:1a:f3:3f:66:df:68:04:56:40:34:f7:a1:a2:9c:36:3a:77:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:37 2026 GMT Not After : Oct 4 06:13:37 2027 GMT Subject: CN=B701D49839710CABB6C4BB67352D73BE66100E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:95:16:c0:27:9d:1d:1c:d0:b2:60:d4:06: 2f:cc:2c:7e:8b:4f:52:0e:94:71:b4:a6:66:07:ce: 21:d2:7d:b8:45:a7:a5:e4:ea:a7:62:96:41:ef:a1: 64:73:56:5b:94:fb:db:a4:d1:5a:cb:03:69:85:af: 83:8d:96:c0:52:cd:03:c1:32:16:0e:4f:82:de:16: b2:44:9f:c0:8d:27:94:5f:e7:c1:c0:36:58:89:46: 66:6b:55:fc:aa:01:94:bb:85:52:fb:9c:08:b0:52: a7:45:9c:0f:08:cf:4a:f2:c6:a9:fe:ee:12:24:eb: 4e:54:00:28:3a:42:8e:95:cf:c0:1d:ad:e1:83:87: 5f:6c:46:26:17:e3:af:e2:67:f1:a9:85:48:b0:0d: 4c:2f:37:a5:19:b0:38:75:10:31:81:d3:48:d8:6a: 58:7c:a3:4c:6a:be:0b:92:20:5b:be:a3:91:4d:23: 44:80:c1:27:9f:af:cf:56:a1:f9:9a:fb:8a:5d:bb: 4a:06:ba:3b:4a:4f:ee:d8:2d:5d:0a:7d:3f:54:c1: 29:40:7d:11:ef:ee:e7:4a:df:c3:a0:45:d4:ab:7a: a9:67:30:2e:02:9d:d6:b1:4a:d5:ae:e2:97:67:3e: ac:87:3c:ad:f1:8a:d2:01:73:2c:24:71:64:f7:00: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:01:D4:98:39:71:0C:AB:B6:C4:BB:67:35:2D:73:BE:66:10:0E:40 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218910.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.28.0/23 Signature Algorithm: sha256WithRSAEncryption 93:1f:27:f3:96:14:e7:93:53:af:07:39:d6:a6:25:be:d2:70: 53:c8:8a:ba:9f:02:4c:9d:bd:74:58:c3:b1:4d:c7:97:ed:a8: cc:dd:44:b9:6b:79:2d:e2:e7:2b:52:59:dc:1b:c7:88:83:f7: 78:35:3e:9f:d2:40:88:7c:d1:7f:e1:75:e7:f6:5b:13:f0:04: 75:4b:2c:74:50:08:d0:f6:50:30:4f:46:ce:b5:0d:ab:8e:79: 92:4a:cf:0b:43:42:e7:dc:68:cc:bd:d3:49:31:7a:53:d9:0c: 2a:88:27:f1:83:16:7c:55:ea:3e:8b:64:c6:e8:50:23:bf:4a: c2:86:4a:e9:1d:7f:66:81:5c:f2:15:a5:c7:ba:68:e2:03:0a: 78:f5:4f:f1:14:48:9e:f3:c3:4c:f3:8c:77:d3:81:90:ab:33: 5f:f3:18:ff:a9:d3:06:7a:0c:63:25:2e:bf:60:10:a2:44:0b: d2:9f:45:f7:89:c4:44:f5:8c:41:7b:e6:24:0a:9d:21:71:6e: 74:d0:b2:14:93:a2:ab:1d:24:27:1f:a2:3e:a3:2b:ad:48:6d: 29:be:10:9b:f9:78:bd:52:5f:fa:56:1a:e6:b9:38:eb:62:68: 24:b6:cd:7d:ea:4a:cd:0a:96:07:6d:35:d3:ef:4b:d8:16:2d: 12:22:6e:ab -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUeAwa8z9m32gEVkA096GinDY6dwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzdaFw0yNzEwMDQwNjEzMzdaMDMxMTAvBgNV BAMTKEI3MDFENDk4Mzk3MTBDQUJCNkM0QkI2NzM1MkQ3M0JFNjYxMDBFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXE5UWwCedHRzQsmDUBi/MLH6L T1IOlHG0pmYHziHSfbhFp6Xk6qdilkHvoWRzVluU+9uk0VrLA2mFr4ONlsBSzQPB MhYOT4LeFrJEn8CNJ5Rf58HANliJRmZrVfyqAZS7hVL7nAiwUqdFnA8Iz0ryxqn+ 7hIk605UACg6Qo6Vz8AdreGDh19sRiYX46/iZ/GphUiwDUwvN6UZsDh1EDGB00jY alh8o0xqvguSIFu+o5FNI0SAwSefr89Wofma+4pdu0oGujtKT+7YLV0KfT9UwSlA fRHv7udK38OgRdSreqlnMC4CndaxStWu4pdnPqyHPK3xitIBcywkcWT3AKWFAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUtwHUmDlxDKu2xLtnNS1zvmYQDkAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg5MTAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQhwwDQYJKoZIhvcNAQELBQADggEBAJMfJ/OWFOeTU68HOdamJb7S cFPIirqfAkydvXRYw7FNx5ftqMzdRLlreS3i5ytSWdwbx4iD93g1Pp/SQIh80X/h def2WxPwBHVLLHRQCND2UDBPRs61DauOeZJKzwtDQufcaMy900kxelPZDCqIJ/GD FnxV6j6LZMboUCO/SsKGSukdf2aBXPIVpce6aOIDCnj1T/EUSJ7zw0zzjHfTgZCr M1/zGP+p0wZ6DGMlLr9gEKJEC9KfRfeJxET1jEF75iQKnSFxbnTQshSToqsdJCcf oj6jK61IbSm+EJv5eL1SX/pWGua5OOtiaCS2zX3qSs0KlgdtNdPvS9gWLRIibqs= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:53 2026 by rpki-client