$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218958.roa File: AS218958.roa (raw, json) Hash identifier: Nx7uYvqIK+nGctjWUOPU0qb+G7EkDv2UxT4cf285raQ= Subject key identifier: 55:73:64:E3:AD:B9:26:A1:82:19:56:D8:BA:E7:7E:E1:F8:7A:86:C4 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1AA82033DADACB1F37E9BFCBEDE606BE9ECC5CF4 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218958.roa Signing time: Mon 05 Oct 2026 06:13:08 +0000 ROA not before: Mon 05 Oct 2026 06:08:08 +0000 ROA not after: Mon 04 Oct 2027 06:13:08 +0000 asID: 218958 IP address blocks: 109.66.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a8:20:33:da:da:cb:1f:37:e9:bf:cb:ed:e6:06:be:9e:cc:5c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:08 2026 GMT Not After : Oct 4 06:13:08 2027 GMT Subject: CN=557364E3ADB926A1821956D8BAE77EE1F87A86C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:ed:5d:71:1c:b2:a6:ac:80:e3:65:c4:d1: 5f:78:d8:ab:50:17:ca:4b:fd:48:90:cd:03:a9:82: 46:b2:b0:1f:42:64:76:67:42:90:78:4d:8a:99:76: 7e:cd:fb:52:c5:c2:88:de:c3:0a:d9:98:83:71:35: 85:b1:e7:77:ee:4c:5a:8e:55:3f:da:50:ba:ae:22: 52:8e:f8:f9:e8:6f:8f:d3:f1:12:75:ad:b6:29:f6: 34:85:ac:c0:44:b2:17:ed:4a:b0:a8:4c:1a:a8:4c: 8e:b4:46:80:d1:b8:1c:64:81:b2:2a:c4:92:0f:fd: 9b:11:6c:cb:17:62:0b:53:6f:89:17:ff:92:4c:3f: b7:32:73:47:30:44:96:87:2b:62:54:57:97:91:4f: c6:01:87:99:80:a6:d6:4d:2f:58:88:cd:05:33:dd: 42:bf:f2:4b:05:73:8f:88:c2:c7:0e:cf:42:c3:67: b9:81:04:cc:5a:5b:a6:41:05:49:c8:2d:a2:e4:95: 65:f5:22:da:54:b7:96:97:ff:05:d3:11:a2:8d:f5: f2:1f:52:bd:c6:27:25:05:88:3a:87:37:d8:61:2d: 82:ec:8c:7b:97:cd:27:f0:38:42:5f:5d:ce:0a:73: 02:97:8f:9f:f5:c3:74:1b:c4:a1:02:ab:ec:d1:13: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:73:64:E3:AD:B9:26:A1:82:19:56:D8:BA:E7:7E:E1:F8:7A:86:C4 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.100.0/23 Signature Algorithm: sha256WithRSAEncryption 97:1e:7d:06:e7:93:5d:7e:5b:9a:fa:98:26:f3:fa:08:17:91: 80:62:6e:84:8e:18:e9:97:be:b9:22:97:8a:37:e1:25:cc:b1: f1:61:6b:a2:dd:0e:c7:64:ca:2f:b5:a9:58:df:3b:2b:af:0c: 3d:3e:74:c5:33:4d:b6:9f:63:07:05:c7:c1:4a:ad:49:6f:09: eb:10:f6:64:94:b5:bc:41:81:76:b4:e2:94:8b:d9:7b:79:8c: a4:8d:60:78:3e:db:1d:10:eb:99:41:fc:67:9e:46:64:c0:74: ca:31:bd:b6:a5:da:cf:36:8c:e5:c6:13:11:39:1f:e8:d4:26: 14:ea:b3:78:10:7d:88:89:cd:ed:82:22:ff:d4:36:6d:c4:db: 62:62:8d:09:7c:b5:04:c9:0f:18:53:74:e2:dd:25:7b:4c:09: 78:4f:67:8e:75:a8:7b:52:0c:03:a8:33:2d:7c:95:b2:1d:c4: 72:e0:88:8c:ee:05:91:87:d8:81:bd:69:59:65:2f:4c:d4:5e: 47:02:3b:74:f4:ec:b2:74:3d:ab:7d:04:7d:57:60:26:ef:9c: 12:96:8e:ec:f8:11:87:19:27:3b:9a:91:18:58:d9:33:7b:77: 3c:7b:1a:74:54:64:c8:fd:8a:b8:4c:52:59:ab:97:d1:11:80: 84:9f:83:38 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUGqggM9rayx836b/L7eYGvp7MXPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MDhaFw0yNzEwMDQwNjEzMDhaMDMxMTAvBgNV BAMTKDU1NzM2NEUzQURCOTI2QTE4MjE5NTZEOEJBRTc3RUUxRjg3QTg2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ne1dcRyypqyA42XE0V942KtQ F8pL/UiQzQOpgkaysB9CZHZnQpB4TYqZdn7N+1LFwojewwrZmINxNYWx53fuTFqO VT/aULquIlKO+Pnob4/T8RJ1rbYp9jSFrMBEshftSrCoTBqoTI60RoDRuBxkgbIq xJIP/ZsRbMsXYgtTb4kX/5JMP7cyc0cwRJaHK2JUV5eRT8YBh5mAptZNL1iIzQUz 3UK/8ksFc4+IwscOz0LDZ7mBBMxaW6ZBBUnILaLklWX1ItpUt5aX/wXTEaKN9fIf Ur3GJyUFiDqHN9hhLYLsjHuXzSfwOEJfXc4KcwKXj5/1w3QbxKECq+zRE4E5AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUVXNk4625JqGCGVbYuud+4fh6hsQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg5NTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQmQwDQYJKoZIhvcNAQELBQADggEBAJcefQbnk11+W5r6mCbz+ggX kYBiboSOGOmXvrkil4o34SXMsfFha6LdDsdkyi+1qVjfOyuvDD0+dMUzTbafYwcF x8FKrUlvCesQ9mSUtbxBgXa04pSL2Xt5jKSNYHg+2x0Q65lB/GeeRmTAdMoxvbal 2s82jOXGExE5H+jUJhTqs3gQfYiJze2CIv/UNm3E22JijQl8tQTJDxhTdOLdJXtM CXhPZ451qHtSDAOoMy18lbIdxHLgiIzuBZGH2IG9aVllL0zUXkcCO3T07LJ0Pat9 BH1XYCbvnBKWjuz4EYcZJzuakRhY2TN7dzx7GnRUZMj9irhMUlmrl9ERgISfgzg= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:56 2026 by rpki-client