$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25369.roa File: AS25369.roa (raw, json) Hash identifier: uM8ugpUw3iid2fVcF6WXxHFRBpOivnqYVrzvtiq92rA= Subject key identifier: 14:E0:B4:23:A3:38:D7:DF:A1:E3:85:8F:FF:6D:9E:79:0A:72:BE:8D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5D2238B5B97F9D79CC7B9ED392A01DB0FBF9E54A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25369.roa Signing time: Mon 05 Oct 2026 06:13:49 +0000 ROA not before: Mon 05 Oct 2026 06:08:49 +0000 ROA not after: Mon 04 Oct 2027 06:13:49 +0000 asID: 25369 IP address blocks: 109.66.20.0/23 maxlen: 24 109.66.40.0/23 maxlen: 24 109.66.60.0/24 maxlen: 24 109.66.96.0/23 maxlen: 24 109.66.110.0/23 maxlen: 24 109.66.152.0/23 maxlen: 24 109.66.204.0/23 maxlen: 24 109.66.220.0/23 maxlen: 24 109.66.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:22:38:b5:b9:7f:9d:79:cc:7b:9e:d3:92:a0:1d:b0:fb:f9:e5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:49 2026 GMT Not After : Oct 4 06:13:49 2027 GMT Subject: CN=14E0B423A338D7DFA1E3858FFF6D9E790A72BE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:a7:ba:d5:96:07:93:45:ce:d8:bb:4e:02: d0:56:56:bb:69:2e:64:69:02:91:04:e6:e2:d7:c6: b7:9c:2c:0c:21:b5:3c:65:55:4a:da:fe:37:d5:92: d6:50:bc:20:84:d9:4c:ba:71:dc:2c:47:09:cf:55: 30:e1:30:92:0e:90:e1:a5:58:ef:1a:85:47:2e:6e: 14:a8:66:19:86:1e:5b:d4:1d:f4:28:3d:cb:4a:da: c3:f6:62:ef:55:4e:71:28:d9:23:fe:0b:e9:d6:fe: 5c:ed:1b:e0:59:eb:c1:e2:3a:68:36:92:05:0a:7e: c3:96:1f:bf:d0:a6:5b:13:fe:11:b5:77:96:9c:f7: 57:8c:d8:64:0c:7d:16:b6:f6:32:df:f1:4c:a2:78: 27:5b:ab:3e:f4:0b:ef:68:e5:be:2d:b7:21:bf:49: 4c:9b:2e:71:07:ff:20:52:08:cd:3a:f0:79:5f:42: 3d:72:36:e9:da:35:d1:55:98:e1:9a:12:4d:b0:c5: c9:4a:6f:50:91:b1:7b:5c:88:80:db:2b:68:1d:d7: 90:10:5b:77:71:5b:00:52:48:5e:09:5c:6c:03:82: ef:fc:36:59:07:af:e3:fd:5d:9d:e8:e4:b9:a9:5c: c1:51:02:81:17:7b:80:b0:5f:42:36:44:8d:d5:df: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E0:B4:23:A3:38:D7:DF:A1:E3:85:8F:FF:6D:9E:79:0A:72:BE:8D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.20.0/23 109.66.40.0/23 109.66.60.0/24 109.66.96.0/23 109.66.110.0/23 109.66.152.0/23 109.66.204.0/23 109.66.220.0/23 109.66.250.0/23 Signature Algorithm: sha256WithRSAEncryption 61:f9:65:3f:e9:91:bd:95:b0:b7:82:8c:cb:df:83:9b:e5:a9: fd:64:05:5b:2c:b0:73:bf:42:8c:ed:78:f3:fb:8a:c1:94:c6: 2d:7a:09:f2:a2:54:1f:07:a4:8c:7f:fa:36:73:3e:82:43:07: 23:4c:5b:11:85:05:88:20:b3:53:35:ac:7c:56:28:f8:ad:21: 7b:e3:3e:0b:af:e5:68:ec:d8:5d:e1:96:dc:ae:a7:e8:83:56: d0:72:e8:1c:ba:e3:f4:b6:45:1a:98:2d:df:ba:45:23:66:71: 15:67:f4:c4:c4:94:f7:36:e5:0d:f0:14:95:60:84:47:3f:31: 17:9d:5c:db:45:46:9e:d4:9e:9c:2a:1c:d9:a6:20:cd:91:8e: 91:72:77:c7:61:4f:ef:d8:86:19:47:ff:05:2d:51:ba:8f:2a: 35:a4:2d:3d:e9:ff:65:59:cb:64:ed:e6:8a:ff:96:6a:80:af: 38:b8:4f:78:dd:fe:74:9b:b6:13:98:be:be:96:e0:69:f0:fe: 06:c7:72:ac:d6:dd:7f:ce:cb:bd:4b:f1:2f:9a:b4:cc:a5:cb: bb:8c:1d:ec:e2:3d:e7:1d:06:18:db:e9:dd:2f:32:1d:9e:6f: 02:35:27:4d:2f:bf:51:eb:0b:9c:1c:fa:64:1e:b9:3a:f6:b4: 7a:fd:e2:70 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUXSI4tbl/nXnMe57TkqAdsPv55UowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDlaFw0yNzEwMDQwNjEzNDlaMDMxMTAvBgNV BAMTKDE0RTBCNDIzQTMzOEQ3REZBMUUzODU4RkZGNkQ5RTc5MEE3MkJFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8ae61ZYHk0XO2LtOAtBWVrtp LmRpApEE5uLXxrecLAwhtTxlVUra/jfVktZQvCCE2Uy6cdwsRwnPVTDhMJIOkOGl WO8ahUcubhSoZhmGHlvUHfQoPctK2sP2Yu9VTnEo2SP+C+nW/lztG+BZ68HiOmg2 kgUKfsOWH7/QplsT/hG1d5ac91eM2GQMfRa29jLf8UyieCdbqz70C+9o5b4ttyG/ SUybLnEH/yBSCM068HlfQj1yNunaNdFVmOGaEk2wxclKb1CRsXtciIDbK2gd15AQ W3dxWwBSSF4JXGwDgu/8NlkHr+P9XZ3o5LmpXMFRAoEXe4CwX0I2RI3V32p1AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUFOC0I6M419+h44WP/22eeQpyvo0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyNTM2OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQC AAEwNgMEAW1CFAMEAW1CKAMEAG1CPAMEAW1CYAMEAW1CbgMEAW1CmAMEAW1CzAME AW1C3AMEAW1C+jANBgkqhkiG9w0BAQsFAAOCAQEAYfllP+mRvZWwt4KMy9+Dm+Wp /WQFWyywc79CjO148/uKwZTGLXoJ8qJUHwekjH/6NnM+gkMHI0xbEYUFiCCzUzWs fFYo+K0he+M+C6/laOzYXeGW3K6n6INW0HLoHLrj9LZFGpgt37pFI2ZxFWf0xMSU 9zblDfAUlWCERz8xF51c20VGntSenCoc2aYgzZGOkXJ3x2FP79iGGUf/BS1Ruo8q NaQtPen/ZVnLZO3miv+WaoCvOLhPeN3+dJu2E5i+vpbgafD+BsdyrNbdf87LvUvx L5q0zKXLu4wd7OI95x0GGNvp3S8yHZ5vAjUnTS+/UesLnBz6ZB65Ova0ev3icA== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:52 2026 by rpki-client