$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: fgGtaTLDLkyy8ChRUsK8sX19TjNn1iZDVNZfbdlMNKE= Subject key identifier: AF:27:EC:F1:2A:A2:ED:3A:C7:D7:84:56:E4:B1:62:54:01:21:71:C7 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 485E4C1837F1E42AB89080E6A7A2D2DD11168369 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25198.roa Signing time: Mon 05 Oct 2026 06:13:31 +0000 ROA not before: Mon 05 Oct 2026 06:08:31 +0000 ROA not after: Mon 04 Oct 2027 06:13:31 +0000 asID: 25198 IP address blocks: 79.176.2.0/24 maxlen: 24 109.66.12.0/24 maxlen: 24 109.66.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5e:4c:18:37:f1:e4:2a:b8:90:80:e6:a7:a2:d2:dd:11:16:83:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:31 2026 GMT Not After : Oct 4 06:13:31 2027 GMT Subject: CN=AF27ECF12AA2ED3AC7D78456E4B16254012171C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6f:7d:6f:90:49:c7:5b:ba:81:58:c4:09:4e: 5c:88:39:e0:04:47:44:d2:8e:8c:d7:86:7a:3f:07: e7:0f:13:b0:c5:0f:b6:f1:b2:3a:56:b7:24:b7:b8: dd:89:d9:55:25:6d:c8:2f:40:0c:91:02:4c:13:6f: f8:37:d8:b7:d9:d9:9d:22:f7:7a:1c:aa:8f:d2:02: ad:04:93:77:af:c7:32:02:6a:2d:99:0b:4a:2e:ea: 30:be:e9:e6:2b:f6:01:0c:46:a1:ac:5e:48:4d:3f: 4d:33:59:20:57:3c:71:d6:89:17:e2:bc:a5:0f:83: 74:1d:c9:01:dd:af:47:cf:8f:94:40:a9:88:69:91: 6c:42:d9:ff:79:7a:77:9d:7c:53:4f:89:bb:d5:13: 72:9e:90:97:39:0c:86:92:1e:af:0c:da:09:34:17: 29:55:cd:7b:b5:ad:48:4a:36:a9:47:6e:32:82:91: 69:3e:57:f8:61:36:b2:35:c0:7b:ba:5a:b7:f5:15: 6d:10:8a:81:df:1d:4a:12:6e:b6:5f:7a:68:e5:58: ea:ed:12:a7:35:1f:d7:c9:31:f2:45:89:f1:dd:db: 1b:08:a1:d7:58:ea:7b:44:6c:e9:f6:cc:bf:e2:2c: b2:27:4b:75:68:45:3a:c7:48:c9:92:78:44:bd:d4: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:27:EC:F1:2A:A2:ED:3A:C7:D7:84:56:E4:B1:62:54:01:21:71:C7 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.2.0/24 109.66.12.0/24 109.66.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:fd:e0:74:7a:23:e3:27:ab:da:b1:54:53:b2:06:80:f1:e6: ee:fe:4c:78:0c:7b:0f:ba:e6:fc:63:38:ff:85:45:df:1c:4c: e9:57:c9:1c:7f:75:25:65:c4:e5:c6:49:34:f8:98:c6:9e:28: aa:82:68:df:f3:52:15:ae:d3:bf:d9:ed:25:e5:90:63:65:49: 6a:0f:f9:2f:f5:e7:1c:19:47:2e:be:fb:17:8f:07:a3:b1:da: bf:ca:6e:9c:3d:e1:f1:86:88:61:30:cc:15:ed:84:46:35:ff: e4:9f:7f:c6:e9:a5:56:09:c8:5d:5e:65:74:83:12:2e:e9:29: 94:1d:d1:09:e7:1b:2a:10:a8:ca:38:6c:e7:a8:09:ad:cd:18: 70:da:0e:c5:c2:2d:99:30:3c:04:a1:c2:73:4e:ad:20:4f:12: 35:b9:68:f9:c2:f3:fb:43:71:94:9a:8d:1c:1a:1e:f1:13:b8: 8c:f9:9d:18:c8:29:98:ce:fe:a2:b7:9a:1a:b8:04:b0:c9:d4: f5:4f:68:31:9f:a1:2b:c0:a7:15:c0:f5:ed:b6:48:1d:c4:a3: 38:60:24:5f:d3:11:4b:61:db:b4:bd:5a:ba:e1:8d:db:f6:e9: 40:89:08:32:d9:fa:9d:e0:e1:58:e5:24:a3:70:f7:5e:6b:5b: 11:72:12:d9 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUSF5MGDfx5Cq4kIDmp6LS3REWg2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzFaFw0yNzEwMDQwNjEzMzFaMDMxMTAvBgNV BAMTKEFGMjdFQ0YxMkFBMkVEM0FDN0Q3ODQ1NkU0QjE2MjU0MDEyMTcxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUb31vkEnHW7qBWMQJTlyIOeAE R0TSjozXhno/B+cPE7DFD7bxsjpWtyS3uN2J2VUlbcgvQAyRAkwTb/g32LfZ2Z0i 93ocqo/SAq0Ek3evxzICai2ZC0ou6jC+6eYr9gEMRqGsXkhNP00zWSBXPHHWiRfi vKUPg3QdyQHdr0fPj5RAqYhpkWxC2f95enedfFNPibvVE3KekJc5DIaSHq8M2gk0 FylVzXu1rUhKNqlHbjKCkWk+V/hhNrI1wHu6Wrf1FW0QioHfHUoSbrZfemjlWOrt Eqc1H9fJMfJFifHd2xsIoddY6ntEbOn2zL/iLLInS3VoRTrHSMmSeES91GobAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUryfs8Sqi7TrH14RW5LFiVAEhcccwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyNTE5OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAE+wAgMEAG1CDAMEAG1C5TANBgkqhkiG9w0BAQsFAAOCAQEALf3gdHoj 4yer2rFUU7IGgPHm7v5MeAx7D7rm/GM4/4VF3xxM6VfJHH91JWXE5cZJNPiYxp4o qoJo3/NSFa7Tv9ntJeWQY2VJag/5L/XnHBlHLr77F48Ho7Hav8punD3h8YaIYTDM Fe2ERjX/5J9/xumlVgnIXV5ldIMSLukplB3RCecbKhCoyjhs56gJrc0YcNoOxcIt mTA8BKHCc06tIE8SNblo+cLz+0NxlJqNHBoe8RO4jPmdGMgpmM7+oreaGrgEsMnU 9U9oMZ+hK8CnFcD17bZIHcSjOGAkX9MRS2HbtL1auuGN2/bpQIkIMtn6neDhWOUk o3D3XmtbEXIS2Q== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:56 2026 by rpki-client