$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS23061.roa File: AS23061.roa (raw, json) Hash identifier: sM5VndZsNPmhEy9qwOdWBFrdPYF/IndVvsMxaCc/ci4= Subject key identifier: DD:43:6D:55:C1:D3:CC:68:5E:4D:E8:BE:23:7C:44:DE:0E:D5:2E:DD Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0652534B65165F30BF975158172D6AD0F242751C Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS23061.roa Signing time: Fri 16 Oct 2026 22:56:36 +0000 ROA not before: Fri 16 Oct 2026 22:51:36 +0000 ROA not after: Fri 15 Oct 2027 22:56:36 +0000 asID: 23061 IP address blocks: 79.180.190.0/23 maxlen: 24 79.183.71.0/24 maxlen: 24 109.65.84.0/24 maxlen: 24 109.65.209.0/24 maxlen: 24 109.66.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:52:53:4b:65:16:5f:30:bf:97:51:58:17:2d:6a:d0:f2:42:75:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 16 22:51:36 2026 GMT Not After : Oct 15 22:56:36 2027 GMT Subject: CN=DD436D55C1D3CC685E4DE8BE237C44DE0ED52EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:be:63:8e:21:40:c7:57:8e:ec:f2:50:ff: 3e:6e:bb:6d:95:61:75:7a:61:44:98:fb:74:f6:5f: 9c:80:e5:5f:f6:8f:0e:dc:e4:1d:a9:4e:e7:55:d8: d2:01:a3:e0:9a:26:36:52:91:e8:1d:ef:db:42:75: 76:a8:5d:3a:b9:15:fc:d1:81:ea:8f:40:6b:8f:37: 06:a8:27:5d:de:c1:98:f3:a6:37:7d:79:c5:fb:c4: 0e:d3:32:b6:3d:36:c8:35:21:5c:27:c0:55:c8:91: 27:9e:35:e7:b8:25:b4:6e:53:48:9d:76:9f:7f:4d: 54:ea:4a:6b:80:a0:f8:cd:cc:b2:93:e4:8f:02:da: 8a:a5:4d:13:3b:f3:a1:83:82:61:7d:92:14:af:9e: 7b:e5:fd:c4:f0:6b:72:e0:0c:ce:86:ab:7d:45:31: 20:01:75:fa:81:4c:44:c8:6b:3d:4c:c1:c7:80:a1: 54:9e:bf:3c:e9:76:11:8c:0a:b2:d6:ed:05:29:66: 64:0b:38:42:d5:c4:52:de:2c:e1:7d:99:d2:e2:82: 19:8e:5d:57:dd:8e:02:56:ef:e1:f5:0c:b9:11:62: 4a:85:9d:1f:f2:a1:5d:2f:53:41:2b:10:f0:1f:cc: ca:a6:ca:c9:e4:d0:93:08:fc:c4:92:8e:8c:1d:9b: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:6D:55:C1:D3:CC:68:5E:4D:E8:BE:23:7C:44:DE:0E:D5:2E:DD X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS23061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.190.0/23 79.183.71.0/24 109.65.84.0/24 109.65.209.0/24 109.66.57.0/24 Signature Algorithm: sha256WithRSAEncryption cd:07:39:02:41:ea:42:98:0c:5c:c9:19:13:bd:11:d3:10:ff: 1a:3c:bd:e4:a7:e4:d0:bc:04:42:a0:d0:cb:86:17:2e:07:a2: 87:22:2e:bf:af:f5:b0:20:27:5d:4e:bb:9e:5d:6e:05:fd:31: 81:28:1d:c3:dc:b0:82:f0:92:89:d8:0e:28:de:3e:8d:ae:70: 9b:8c:8b:ba:81:98:6b:b1:42:f1:fa:1d:19:2d:a3:21:17:b7: 12:d1:85:36:f2:d8:6d:14:f6:4e:18:ce:04:a9:db:ed:83:e8: 14:20:73:24:17:4e:07:35:d7:ec:38:49:0a:d6:05:87:b2:a8: 2e:16:db:40:27:59:f1:d9:63:1d:99:f7:32:53:9c:3a:9a:00: 10:ba:d0:b5:0d:45:3a:07:3e:d1:43:09:3b:1f:68:65:3a:cd: f4:44:ac:f9:27:53:28:ca:e7:da:44:18:35:98:d2:b4:ae:7a: ac:8e:9f:99:5f:ff:f6:3e:ac:40:9d:fa:1b:b0:75:ef:ea:12: 9c:65:b8:df:a7:43:aa:41:9f:98:e7:3f:95:81:15:7f:be:c3: 00:c2:04:30:79:ee:8e:04:f4:79:45:fa:8f:dd:8c:42:73:d0: 7d:76:d0:1d:ed:54:9d:80:9c:2f:1d:0e:5f:f5:1c:41:f5:27: 53:0a:c5:91 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUBlJTS2UWXzC/l1FYFy1q0PJCdRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTYyMjUxMzZaFw0yNzEwMTUyMjU2MzZaMDMxMTAvBgNV BAMTKERENDM2RDU1QzFEM0NDNjg1RTRERThCRTIzN0M0NERFMEVENTJFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy775jjiFAx1eO7PJQ/z5uu22V YXV6YUSY+3T2X5yA5V/2jw7c5B2pTudV2NIBo+CaJjZSkegd79tCdXaoXTq5FfzR geqPQGuPNwaoJ13ewZjzpjd9ecX7xA7TMrY9Nsg1IVwnwFXIkSeeNee4JbRuU0id dp9/TVTqSmuAoPjNzLKT5I8C2oqlTRM786GDgmF9khSvnnvl/cTwa3LgDM6Gq31F MSABdfqBTETIaz1MwceAoVSevzzpdhGMCrLW7QUpZmQLOELVxFLeLOF9mdLighmO XVfdjgJW7+H1DLkRYkqFnR/yoV0vU0ErEPAfzMqmysnk0JMI/MSSjowdm5/bAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQU3UNtVcHTzGheTei+I3xE3g7VLt0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMzA2MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQC AAEwHgMEAU+0vgMEAE+3RwMEAG1BVAMEAG1B0QMEAG1COTANBgkqhkiG9w0BAQsF AAOCAQEAzQc5AkHqQpgMXMkZE70R0xD/Gjy95Kfk0LwEQqDQy4YXLgeihyIuv6/1 sCAnXU67nl1uBf0xgSgdw9ywgvCSidgOKN4+ja5wm4yLuoGYa7FC8fodGS2jIRe3 EtGFNvLYbRT2ThjOBKnb7YPoFCBzJBdOBzXX7DhJCtYFh7KoLhbbQCdZ8dljHZn3 MlOcOpoAELrQtQ1FOgc+0UMJOx9oZTrN9ESs+SdTKMrn2kQYNZjStK56rI6fmV// 9j6sQJ36G7B17+oSnGW436dDqkGfmOc/lYEVf77DAMIEMHnujgT0eUX6j92MQnPQ fXbQHe1UnYCcLx0OX/UcQfUnUwrFkQ== -----END CERTIFICATE-----Generated at Wed Oct 28 00:45:05 2026 by rpki-client