
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS272962.roa
File: AS272962.roa (raw, json)
Hash identifier: QiWUP40JnmUQ1eOYd1zNBezDWC1r9Pg7RTq1OmTyC7s=
Subject key identifier: 74:BA:DA:9D:08:EC:D3:6A:2A:1B:87:15:57:E9:AF:37:D3:5C:85:1B
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 5C430EF9994A55ED4D6856136A3158380466E636
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS272962.roa
Signing time: Mon 05 Oct 2026 06:13:25 +0000
ROA not before: Mon 05 Oct 2026 06:08:25 +0000
ROA not after: Mon 04 Oct 2027 06:13:25 +0000
asID: 272962
IP address blocks: 109.66.166.0/24 maxlen: 24
109.66.167.0/24 maxlen: 24
109.66.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:43:0e:f9:99:4a:55:ed:4d:68:56:13:6a:31:58:38:04:66:e6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:08:25 2026 GMT
Not After : Oct 4 06:13:25 2027 GMT
Subject: CN=74BADA9D08ECD36A2A1B871557E9AF37D35C851B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:6a:7b:70:55:96:99:e7:df:d0:2a:f3:08:
be:c6:7b:b8:60:92:e7:de:93:74:f5:fa:80:4d:df:
db:a3:79:77:ff:df:32:cb:71:ba:6a:ba:a6:8d:f3:
cf:f0:b0:0b:3e:80:cc:9d:4c:a2:bd:7a:30:00:a3:
34:84:f5:f2:5f:0d:9e:e2:49:c8:50:7f:c9:c6:31:
81:89:d0:1c:1a:09:e8:37:05:71:99:c7:64:3e:b6:
62:4a:81:98:ad:42:0e:bd:0e:d8:f9:9c:0b:7f:07:
66:be:c8:bc:95:11:e0:be:56:13:04:35:98:b9:87:
90:bc:b3:b3:3d:6c:69:a7:ba:ce:bf:43:fe:7b:02:
ad:6f:7e:56:79:62:88:78:c2:db:78:22:ab:ed:43:
5a:09:ef:67:36:80:5c:d6:7f:20:63:99:d7:f4:3f:
2e:eb:db:9b:7c:01:bf:96:a0:a8:89:a6:98:7a:16:
de:b9:b0:46:d4:c6:19:74:68:df:1e:8b:9f:a3:01:
6e:42:5d:04:bd:43:63:c8:ac:57:cf:58:9e:61:24:
cb:d8:ea:8e:df:66:9c:bc:a4:7f:18:e5:d1:00:54:
27:66:4a:b5:de:af:4d:59:7e:f6:02:6f:84:69:08:
5e:e3:62:94:7a:7a:10:ab:c7:90:04:98:b5:b0:b2:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:DA:9D:08:EC:D3:6A:2A:1B:87:15:57:E9:AF:37:D3:5C:85:1B
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS272962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.166.0/23
109.66.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:19:87:29:b3:bc:a8:83:e5:bd:a8:52:ac:ac:05:88:0c:ab:
07:65:3e:8a:c1:4d:1d:8f:7c:f5:d9:1b:5d:c9:f3:b9:63:11:
83:f7:3e:2b:66:01:3d:24:b5:f0:fe:0a:52:a5:74:8d:a9:23:
1a:7b:24:9b:81:60:79:ec:6c:87:17:05:4f:80:9a:00:d4:a6:
3d:69:35:d3:e6:07:b3:67:79:e0:c6:71:6c:b9:ba:65:23:b6:
2c:44:b8:aa:24:29:c8:b6:1b:46:45:22:78:49:29:6f:c1:42:
aa:a9:88:3f:d3:65:88:44:fe:87:fb:9f:60:04:2a:2d:a4:3b:
6f:d9:45:43:b5:f7:6b:55:8f:cf:18:34:e8:08:46:f7:c4:66:
d5:92:6c:16:ce:22:38:e2:b2:7b:02:12:3e:db:6e:27:c3:7d:
29:ed:c5:d4:1e:ba:87:92:9a:45:7a:44:3f:19:1a:e2:87:06:
67:ed:5c:5b:99:e8:4c:0f:1e:c6:50:2c:b4:72:d7:fd:c9:ac:
52:4e:a0:5b:6b:de:a8:00:de:f5:3d:53:cc:d9:6e:68:c4:05:
4d:33:3b:61:95:c3:b4:e9:94:ee:4c:f8:2f:d2:cf:2f:23:a1:
e2:81:7d:1e:54:77:c1:9b:60:60:06:fe:a8:a3:cf:fe:bc:0f:
f3:72:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:47:02 2026 by rpki-client