$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219001.roa File: AS219001.roa (raw, json) Hash identifier: qj2c8DIaSX5QeZVLz4a50JHmE9q6DvbZq1HBXoNCbLY= Subject key identifier: 46:3C:EB:3A:C7:0A:F9:8C:34:3C:B3:83:2A:39:6B:03:7C:C8:EF:5C Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4A90ADFEA1C359A61EAAA1D7EE1BCB9B526B884A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219001.roa Signing time: Wed 14 Oct 2026 21:16:29 +0000 ROA not before: Wed 14 Oct 2026 21:11:29 +0000 ROA not after: Wed 13 Oct 2027 21:16:29 +0000 asID: 219001 IP address blocks: 79.182.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 05:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:90:ad:fe:a1:c3:59:a6:1e:aa:a1:d7:ee:1b:cb:9b:52:6b:88:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 14 21:11:29 2026 GMT Not After : Oct 13 21:16:29 2027 GMT Subject: CN=463CEB3AC70AF98C343CB3832A396B037CC8EF5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:44:f3:f8:11:69:49:d2:97:e1:fc:c0:58: f2:b3:b5:77:01:9e:a8:b7:ec:c2:0b:61:38:6f:73: e5:77:1c:91:c1:87:eb:8a:dd:b0:14:5a:e1:6a:ec: 36:a2:01:b5:be:d0:4d:3d:99:58:9c:75:a2:71:d6: a0:42:28:7f:25:8f:36:99:43:7e:c7:60:3c:06:0d: b5:11:e6:80:c6:bd:49:18:0f:7d:8e:f6:3c:06:92: 24:fa:a3:81:49:b0:d5:4e:9a:52:ad:2b:60:ef:3d: 1f:9f:b8:40:be:d0:9a:d2:5b:3a:ea:94:87:50:41: ac:a7:b7:7a:69:e0:74:a9:e7:8a:f7:4b:59:30:9f: 4b:42:5b:03:0a:c0:b6:c2:7f:ff:2e:d7:23:e0:86: 4a:36:82:e5:74:4a:42:10:69:3f:38:4a:4b:7b:d5: 12:fc:6e:b7:56:f6:18:f1:ef:0a:d9:76:56:79:cc: 3c:0e:81:1c:4c:52:5e:a7:5d:1b:79:8f:41:82:54: ce:77:e5:b0:0f:ae:2b:62:34:7f:6f:af:91:bf:38: 88:03:2f:5d:24:c1:2d:03:a6:a7:fe:85:75:e2:0e: cd:c0:b9:3b:b3:a2:80:72:d1:0b:fb:86:05:c6:1f: 02:f8:27:bb:bb:12:8d:b6:43:b7:f8:6a:d5:6c:f3: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3C:EB:3A:C7:0A:F9:8C:34:3C:B3:83:2A:39:6B:03:7C:C8:EF:5C X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.48.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a3:09:1e:79:a8:ba:db:0a:e2:3d:5a:72:1c:e3:1b:93:95: 45:c6:8d:0d:6f:b3:16:47:b5:05:ab:dd:73:86:11:8f:0e:99: 40:a9:0b:58:70:cc:0d:04:2c:39:d7:7d:77:de:2f:6f:1a:ca: 63:01:35:12:75:d8:c2:b9:9e:3c:83:9c:95:f6:66:f0:86:b2: a4:77:95:57:3c:3d:32:a0:ca:ff:c4:fe:94:76:09:ba:39:88: a0:0b:90:eb:2b:54:6d:1c:77:46:1d:d7:e8:05:7d:fd:05:e2: 32:6e:cf:1e:f3:cb:19:19:2a:38:60:17:c9:94:f4:96:25:4e: d6:b8:08:36:84:c8:3a:2e:37:73:5f:6d:cd:55:51:4b:b7:3d: e4:25:45:c8:98:da:d6:b8:30:ac:67:07:ce:7d:4c:27:8d:54: 03:88:b5:34:d1:cd:ad:fc:e4:6e:88:4c:6e:e9:12:61:e3:67: db:74:da:b4:28:a3:bf:d5:a9:30:d6:42:13:2a:b9:96:9e:7d: 1c:d5:cd:e0:73:a9:32:fc:76:c0:2a:47:f5:2d:bb:73:52:03: 7a:bb:09:bd:50:e1:5e:e5:a3:ad:9f:e9:d6:a7:a1:86:8d:19: 4e:34:4f:5e:b6:3c:27:bf:b1:2e:3b:4e:2e:de:0d:12:e7:f1: ea:39:ab:37 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUSpCt/qHDWaYeqqHX7hvLm1JriEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTQyMTExMjlaFw0yNzEwMTMyMTE2MjlaMDMxMTAvBgNV BAMTKDQ2M0NFQjNBQzcwQUY5OEMzNDNDQjM4MzJBMzk2QjAzN0NDOEVGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBUTz+BFpSdKX4fzAWPKztXcB nqi37MILYThvc+V3HJHBh+uK3bAUWuFq7DaiAbW+0E09mVicdaJx1qBCKH8ljzaZ Q37HYDwGDbUR5oDGvUkYD32O9jwGkiT6o4FJsNVOmlKtK2DvPR+fuEC+0JrSWzrq lIdQQaynt3pp4HSp54r3S1kwn0tCWwMKwLbCf/8u1yPghko2guV0SkIQaT84Skt7 1RL8brdW9hjx7wrZdlZ5zDwOgRxMUl6nXRt5j0GCVM535bAPritiNH9vr5G/OIgD L10kwS0Dpqf+hXXiDs3AuTuzooBy0Qv7hgXGHwL4J7u7Eo22Q7f4atVs87gLAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQURjzrOscK+Yw0PLODKjlrA3zI71wwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTkwMDEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtjAwDQYJKoZIhvcNAQELBQADggEBAAGjCR55qLrbCuI9WnIc4xuT lUXGjQ1vsxZHtQWr3XOGEY8OmUCpC1hwzA0ELDnXfXfeL28aymMBNRJ12MK5njyD nJX2ZvCGsqR3lVc8PTKgyv/E/pR2Cbo5iKALkOsrVG0cd0Yd1+gFff0F4jJuzx7z yxkZKjhgF8mU9JYlTta4CDaEyDouN3Nfbc1VUUu3PeQlRciY2ta4MKxnB859TCeN VAOItTTRza385G6ITG7pEmHjZ9t02rQoo7/VqTDWQhMquZaefRzVzeBzqTL8dsAq R/Utu3NSA3q7Cb1Q4V7lo62f6danoYaNGU40T162PCe/sS47Ti7eDRLn8eo5qzc= -----END CERTIFICATE-----Generated at Wed Oct 21 17:09:56 2026 by rpki-client