$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218911.roa File: AS218911.roa (raw, json) Hash identifier: iSanogJXViupRscqvyWvtE1Iy96gldpASK5XXSRND90= Subject key identifier: EF:1C:DD:A0:10:44:AD:A0:9D:CA:A7:12:65:BA:58:37:08:8A:B5:1F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 31E56F71D05BCDA98C2F84FEA2FE35E3374202BD Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218911.roa Signing time: Mon 05 Oct 2026 06:13:37 +0000 ROA not before: Mon 05 Oct 2026 06:08:37 +0000 ROA not after: Mon 04 Oct 2027 06:13:37 +0000 asID: 218911 IP address blocks: 109.66.28.0/24 maxlen: 24 109.66.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e5:6f:71:d0:5b:cd:a9:8c:2f:84:fe:a2:fe:35:e3:37:42:02:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:37 2026 GMT Not After : Oct 4 06:13:37 2027 GMT Subject: CN=EF1CDDA01044ADA09DCAA71265BA5837088AB51F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:0a:cb:65:52:dd:c0:c9:d4:36:ce:46:04: 0b:ef:fd:15:68:c0:14:24:82:1a:4a:0e:e4:ff:39: 64:5d:52:44:17:72:05:cb:91:3b:df:68:9e:6e:a1: e1:a1:8b:96:87:cd:46:6b:84:d3:e5:98:43:b9:ea: e0:b9:6c:e6:7d:b6:bd:55:cb:d9:11:1d:3a:20:5d: 93:44:6b:92:ed:6e:7b:c0:f9:ea:ea:7f:d1:14:7a: 9e:2c:27:42:00:3b:42:86:03:30:31:52:49:b5:ca: d3:e0:90:84:3b:6a:25:b4:9f:30:14:f5:98:d6:18: 8e:fe:4a:b0:94:64:cd:e5:71:56:5d:51:3b:cf:b0: 71:8a:b6:ef:96:54:ae:6f:a6:4e:04:3f:27:72:8f: 40:d1:23:ea:da:c4:5b:a3:d7:06:a1:d8:11:48:89: 26:e8:f7:c0:f9:1b:5e:71:a6:3b:6a:96:60:25:40: 8f:d8:37:26:f6:81:e2:c9:e6:c4:51:7a:b7:ba:f3: 45:b1:71:44:a2:76:3e:15:fb:e8:05:ec:7d:73:6b: 06:b6:99:ff:ab:a8:55:c6:9b:25:8b:11:23:0c:04: fd:af:9e:9b:df:7a:d0:a6:a0:bc:6c:44:7d:93:c2: b7:16:3c:c7:03:56:d8:07:3d:ff:65:1f:21:3e:ee: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:DD:A0:10:44:AD:A0:9D:CA:A7:12:65:BA:58:37:08:8A:B5:1F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.28.0/23 Signature Algorithm: sha256WithRSAEncryption 79:24:f2:d3:c2:f9:99:2f:32:b6:95:2a:92:df:29:9a:99:01: 55:2f:85:a0:81:0d:32:96:37:c5:c3:b1:f1:52:11:75:4a:00: 43:11:b0:26:c4:d3:94:b5:9f:15:d3:fc:d8:d3:67:50:a8:ab: 61:0a:34:24:b5:d4:1d:d1:7a:88:83:01:5d:73:f7:3c:74:5d: 6d:55:fe:85:5f:61:6a:93:b3:81:d2:07:e9:6e:ce:ac:25:7b: c1:8c:c6:2a:db:69:1d:36:22:33:e5:59:02:80:cf:22:83:3e: fc:0d:38:25:58:01:32:02:79:f4:84:aa:91:d4:83:73:ef:c0: 3e:81:d9:1f:d5:53:00:dd:00:3b:96:52:b5:ba:10:96:c6:9f: 21:b3:e4:bf:eb:de:5a:30:77:fd:d6:93:ed:c8:cc:01:a8:86: bd:a9:5a:d8:01:d4:2a:6c:cc:3d:58:ba:d6:07:e1:40:0c:c1: a0:ff:26:7a:c8:cb:83:26:a3:3c:07:9e:ce:0a:b3:b6:6d:0a: 34:65:b0:03:33:1c:c9:db:12:0c:6a:0c:2e:6c:28:9f:6a:4f: 12:ab:71:82:c4:c2:58:eb:9d:05:d1:3a:59:70:9d:a9:ba:16: b5:dc:57:aa:21:57:5a:4f:a7:6a:8c:c0:fd:35:ce:17:cb:ea: c8:50:1b:19 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUMeVvcdBbzamML4T+ov414zdCAr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzdaFw0yNzEwMDQwNjEzMzdaMDMxMTAvBgNV BAMTKEVGMUNEREEwMTA0NEFEQTA5RENBQTcxMjY1QkE1ODM3MDg4QUI1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LgrLZVLdwMnUNs5GBAvv/RVo wBQkghpKDuT/OWRdUkQXcgXLkTvfaJ5uoeGhi5aHzUZrhNPlmEO56uC5bOZ9tr1V y9kRHTogXZNEa5LtbnvA+erqf9EUep4sJ0IAO0KGAzAxUkm1ytPgkIQ7aiW0nzAU 9ZjWGI7+SrCUZM3lcVZdUTvPsHGKtu+WVK5vpk4EPydyj0DRI+raxFuj1wah2BFI iSbo98D5G15xpjtqlmAlQI/YNyb2geLJ5sRRere680WxcUSidj4V++gF7H1zawa2 mf+rqFXGmyWLESMMBP2vnpvfetCmoLxsRH2TwrcWPMcDVtgHPf9lHyE+7sdnAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU7xzdoBBEraCdyqcSZbpYNwiKtR8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg5MTEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQhwwDQYJKoZIhvcNAQELBQADggEBAHkk8tPC+ZkvMraVKpLfKZqZ AVUvhaCBDTKWN8XDsfFSEXVKAEMRsCbE05S1nxXT/NjTZ1Coq2EKNCS11B3ReoiD AV1z9zx0XW1V/oVfYWqTs4HSB+luzqwle8GMxirbaR02IjPlWQKAzyKDPvwNOCVY ATICefSEqpHUg3PvwD6B2R/VUwDdADuWUrW6EJbGnyGz5L/r3lowd/3Wk+3IzAGo hr2pWtgB1CpszD1YutYH4UAMwaD/JnrIy4MmozwHns4Ks7ZtCjRlsAMzHMnbEgxq DC5sKJ9qTxKrcYLEwljrnQXROllwnam6FrXcV6ohV1pPp2qMwP01zhfL6shQGxk= -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:00 2026 by rpki-client