$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2497.roa File: AS2497.roa (raw, json) Hash identifier: HNjYBkqNx+0DlN11NI1UH4hOnbRv94pUudiA/ucy7Cw= Subject key identifier: DD:69:67:1A:FF:01:76:CC:18:C1:A6:BB:09:37:0A:CA:B6:93:53:14 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 55710ECB5F01CC00FC902835F333B99869047F2B Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2497.roa Signing time: Mon 05 Oct 2026 06:13:38 +0000 ROA not before: Mon 05 Oct 2026 06:08:38 +0000 ROA not after: Mon 04 Oct 2027 06:13:38 +0000 asID: 2497 IP address blocks: 109.66.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 13:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:71:0e:cb:5f:01:cc:00:fc:90:28:35:f3:33:b9:98:69:04:7f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:38 2026 GMT Not After : Oct 4 06:13:38 2027 GMT Subject: CN=DD69671AFF0176CC18C1A6BB09370ACAB6935314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:1a:f1:9d:b1:8f:02:31:3a:c8:b1:31:88: 82:99:33:34:53:c0:bd:00:c3:08:38:41:79:4b:c3: be:6c:ff:29:3c:6d:8b:25:95:0d:4c:87:8f:5d:d9: b1:af:37:ca:0d:bb:55:b7:60:7f:3e:1f:c7:b6:2f: 67:83:07:e7:3f:e8:82:01:9b:c5:a8:af:96:28:3d: d0:24:20:5f:69:a7:02:9b:0f:99:ac:11:67:19:d6: be:e0:f8:4b:24:90:90:3d:62:31:15:86:13:c2:27: 83:bd:75:ac:aa:4e:f7:32:35:4c:e4:ac:05:bc:e8: db:6a:5f:0a:f0:5e:48:fb:7d:cb:92:de:6a:73:93: 5a:11:f2:5c:5a:0e:77:ae:20:cb:b1:f2:8f:66:cd: 80:86:77:ea:34:38:25:1f:a9:c8:c6:f4:46:08:f0: 39:96:97:d0:05:26:7a:0c:5e:38:05:ed:81:68:6e: e5:1c:a5:66:74:60:8e:b6:72:5b:1b:25:b4:3f:b6: b9:ee:c4:7f:3a:f0:83:84:45:c8:41:97:f3:a7:3c: b2:db:54:ec:da:71:c0:7d:b4:34:fe:4a:57:63:f5: 07:d6:ac:11:37:da:3d:50:bd:fd:63:4c:38:0c:84: 22:80:d2:ca:e7:23:ae:b4:16:2a:c5:27:87:a1:02: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:69:67:1A:FF:01:76:CC:18:C1:A6:BB:09:37:0A:CA:B6:93:53:14 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.30.0/23 Signature Algorithm: sha256WithRSAEncryption b8:c2:a3:54:8a:95:2e:87:8e:e2:0c:09:d0:b1:e9:de:7f:a0: 52:96:20:30:49:63:6c:1e:bf:43:a0:63:e1:9a:41:85:52:2e: 29:df:6a:bc:6d:f4:b5:22:43:b7:da:27:c1:b0:f7:87:0b:71: 15:4b:c9:95:05:4e:7a:a6:7c:d7:8c:4e:ee:8b:18:06:3f:6d: 18:a0:87:32:09:c5:4c:67:98:0b:ba:4b:66:34:02:a0:13:43: ec:05:49:5d:52:70:a4:60:9a:5d:ba:06:64:b5:56:7a:9c:b8: f0:6e:bf:c8:02:cc:7a:7b:08:86:68:fc:8f:5d:11:89:94:4f: 05:9b:93:08:d7:85:64:43:0e:ac:01:1e:d4:fb:1e:61:77:18: 4f:26:cf:a8:01:6c:36:74:8f:35:c6:a5:6c:7b:61:0d:ab:dc: 63:49:b3:a2:d9:8e:de:d4:e2:bc:68:87:6b:d1:ed:a1:73:4b: c6:65:1f:e0:be:c4:d1:7c:bc:45:e6:5f:d7:83:0a:29:36:12: bd:ca:3f:24:a5:91:8c:ac:59:42:04:75:e7:c7:17:61:a7:d3: ce:27:6b:ff:4b:f1:2b:62:2d:cc:e8:42:b8:22:8f:dd:11:82: 04:98:57:12:b2:2c:8b:ca:b1:35:07:a0:83:4d:6d:aa:38:cc: da:0e:c2:01 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUVXEOy18BzAD8kCg18zO5mGkEfyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzhaFw0yNzEwMDQwNjEzMzhaMDMxMTAvBgNV BAMTKERENjk2NzFBRkYwMTc2Q0MxOEMxQTZCQjA5MzcwQUNBQjY5MzUzMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhxrxnbGPAjE6yLExiIKZMzRT wL0Awwg4QXlLw75s/yk8bYsllQ1Mh49d2bGvN8oNu1W3YH8+H8e2L2eDB+c/6IIB m8Wor5YoPdAkIF9ppwKbD5msEWcZ1r7g+EskkJA9YjEVhhPCJ4O9dayqTvcyNUzk rAW86NtqXwrwXkj7fcuS3mpzk1oR8lxaDneuIMux8o9mzYCGd+o0OCUfqcjG9EYI 8DmWl9AFJnoMXjgF7YFobuUcpWZ0YI62clsbJbQ/trnuxH868IOERchBl/OnPLLb VOzaccB9tDT+Sldj9QfWrBE32j1Qvf1jTDgMhCKA0srnI660FirFJ4ehAqlfAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQU3WlnGv8BdswYwaa7CTcKyraTUxQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyNDk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBbUIeMA0GCSqGSIb3DQEBCwUAA4IBAQC4wqNUipUuh47iDAnQsenef6BS liAwSWNsHr9DoGPhmkGFUi4p32q8bfS1IkO32ifBsPeHC3EVS8mVBU56pnzXjE7u ixgGP20YoIcyCcVMZ5gLuktmNAKgE0PsBUldUnCkYJpdugZktVZ6nLjwbr/IAsx6 ewiGaPyPXRGJlE8Fm5MI14VkQw6sAR7U+x5hdxhPJs+oAWw2dI81xqVse2ENq9xj SbOi2Y7e1OK8aIdr0e2hc0vGZR/gvsTRfLxF5l/XgwopNhK9yj8kpZGMrFlCBHXn xxdhp9POJ2v/S/ErYi3M6EK4Io/dEYIEmFcSsiyLyrE1B6CDTW2qOMzaDsIB -----END CERTIFICATE-----Generated at Wed Oct 7 23:07:17 2026 by rpki-client