
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218944.roa
File: AS218944.roa (raw, json)
Hash identifier: O9rhGFyyIIFa5Bq3Xv5zZ6IWn6/kOU9Vc78Yz6Bh4KY=
Subject key identifier: FC:30:6D:65:6D:6C:B3:9A:51:F0:D3:0E:85:9C:38:0C:A7:AF:02:66
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 2F345931F4DE47FE68CDBDD08E48159F404E3DB7
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218944.roa
Signing time: Sat 10 Oct 2026 19:01:05 +0000
ROA not before: Sat 10 Oct 2026 18:56:05 +0000
ROA not after: Sat 09 Oct 2027 19:01:05 +0000
asID: 218944
IP address blocks: 79.183.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:34:59:31:f4:de:47:fe:68:cd:bd:d0:8e:48:15:9f:40:4e:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 10 18:56:05 2026 GMT
Not After : Oct 9 19:01:05 2027 GMT
Subject: CN=FC306D656D6CB39A51F0D30E859C380CA7AF0266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:50:f5:97:d6:81:12:16:2f:b1:a0:14:50:
1e:f8:5b:b4:3f:eb:d5:d2:c4:58:a2:da:cd:b1:1c:
ad:06:37:80:f8:64:6c:0e:9c:a0:b6:1c:d6:b6:98:
db:a2:34:a0:85:45:2d:db:a7:2f:5a:92:b6:29:33:
2b:db:6a:7f:6f:b9:30:71:2b:d4:96:9a:a6:50:d9:
a3:2b:d7:93:2b:4a:da:e9:d6:80:9d:b1:0c:4d:a7:
aa:ea:9b:a4:2e:87:6e:2d:19:e8:ed:fc:62:d1:d3:
3b:8f:b3:e6:dd:a1:5b:9d:02:05:1f:c1:0c:c1:56:
b5:a6:68:a3:1e:c9:f6:96:56:a5:d7:58:fd:3d:de:
2d:22:28:92:ef:22:7d:dd:05:56:1c:ca:53:e7:eb:
1a:9f:f9:06:be:b3:06:df:85:ea:de:8b:cb:5f:31:
14:1d:69:ac:fe:ee:99:cc:6c:be:3b:98:71:7a:a7:
30:a7:69:54:9c:bd:82:ea:c8:0a:f6:e5:ff:6a:11:
10:d8:e0:10:3c:f2:1c:a8:2d:8e:80:59:17:65:14:
8d:fa:d3:dc:42:a8:d9:84:07:5c:a8:f8:91:ae:85:
b9:40:d3:47:66:99:c4:c0:79:c5:8b:9c:c6:ce:53:
6e:99:80:3f:6e:3b:89:1c:fd:18:4d:7d:b6:45:c8:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:6D:65:6D:6C:B3:9A:51:F0:D3:0E:85:9C:38:0C:A7:AF:02:66
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.183.200.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:78:3b:b1:50:88:f6:a6:64:aa:92:53:85:7c:50:0d:76:ee:
d4:8c:74:67:9d:60:ed:18:d2:d6:95:6b:cf:4d:b9:8a:d3:5a:
54:a8:9c:0b:8c:2d:e2:e3:a0:6a:ab:6d:e9:50:37:88:bd:63:
56:57:a3:f2:73:4c:76:8d:02:ce:63:e3:59:ac:94:21:65:b3:
51:9b:a4:b6:57:bb:cc:a8:a4:f5:af:0e:8f:34:5a:19:a8:05:
26:38:b3:a5:a5:e1:69:8a:31:a1:6a:00:c5:4a:d3:2f:80:59:
23:b6:97:96:b1:e8:73:ce:d3:af:1f:11:23:9e:c7:03:22:8c:
57:a9:57:3f:af:5a:f9:19:b0:63:4d:b4:9c:76:b3:02:c4:24:
f4:fd:17:82:0f:1c:14:ca:48:88:cf:80:35:c9:d1:be:f8:98:
4d:48:6c:c4:d5:22:15:99:a6:5a:86:0a:1e:67:7f:14:43:92:
05:c9:4f:e2:08:a5:f6:59:79:f5:12:30:e2:e7:77:e0:73:c9:
e1:62:98:5e:86:18:cc:5d:17:2b:9d:b7:eb:58:10:4c:55:cf:
df:ac:1d:4e:ef:a8:ac:1c:c5:4a:74:5a:bf:b9:66:a4:54:ba:
d8:a0:78:44:a4:4b:80:66:38:50:7c:5d:f3:86:52:d4:2f:41:
5f:17:b2:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:46:36 2026 by rpki-client