$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2856.roa File: AS2856.roa (raw, json) Hash identifier: M32rWPNMox9WpPSODLgFCsulWQbC8bjOf4/t0JWnCdI= Subject key identifier: 57:EC:8A:6A:DB:F2:3A:AE:B6:AE:45:BF:56:6B:87:7E:82:80:52:9D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 2CB43BAE566396B9BF99E91BC0598A265493B1A5 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2856.roa Signing time: Mon 05 Oct 2026 06:13:31 +0000 ROA not before: Mon 05 Oct 2026 06:08:31 +0000 ROA not after: Mon 04 Oct 2027 06:13:31 +0000 asID: 2856 IP address blocks: 79.176.53.0/24 maxlen: 24 79.176.67.0/24 maxlen: 24 79.176.218.0/24 maxlen: 24 79.182.22.0/24 maxlen: 24 79.182.41.0/24 maxlen: 24 79.182.66.0/24 maxlen: 24 79.183.244.0/24 maxlen: 24 109.66.188.0/24 maxlen: 24 109.66.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b4:3b:ae:56:63:96:b9:bf:99:e9:1b:c0:59:8a:26:54:93:b1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:31 2026 GMT Not After : Oct 4 06:13:31 2027 GMT Subject: CN=57EC8A6ADBF23AAEB6AE45BF566B877E8280529D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:26:97:c6:6c:d9:d8:b8:af:f4:0e:aa:68: db:27:e2:c8:58:54:3e:30:c7:67:04:3d:0f:af:c9: 30:21:ef:89:9b:57:d0:5a:ad:4b:1b:00:95:88:9e: e5:55:1a:f1:8d:1b:4c:a0:33:ef:51:ee:87:b9:6e: df:6e:63:7c:08:37:e9:28:15:a0:c5:c3:b7:0d:6f: 52:0f:d6:ee:87:a1:fa:66:af:b7:60:69:6e:aa:e2: 33:11:e3:71:08:04:75:0a:cf:4f:ac:62:b5:ba:64: 12:dd:88:8e:7c:a5:a4:fc:92:84:0e:07:da:5f:3d: fa:b4:82:6c:93:c3:9b:8d:29:1f:b0:d1:dd:cb:07: b6:13:fc:6e:b3:42:5a:af:25:04:c9:7a:9d:56:72: 04:bf:73:b8:de:80:bd:bb:c5:f0:1e:09:05:09:ec: 7f:fc:1a:10:ef:70:5b:7d:12:bf:4b:5c:33:e5:e5: 6e:4d:15:fb:26:c7:9b:29:1a:25:53:29:14:e7:57: f3:d2:f9:8a:9c:f4:a2:35:09:44:f4:5b:52:e3:ec: 37:c3:8e:a6:e0:fe:55:a8:65:e4:0e:47:d2:15:04: a8:d8:af:9b:9c:f2:ff:cd:a1:26:8d:97:3b:9a:36: 33:eb:8a:8e:57:0e:84:f8:ec:10:f3:38:ac:d1:e8: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:8A:6A:DB:F2:3A:AE:B6:AE:45:BF:56:6B:87:7E:82:80:52:9D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.53.0/24 79.176.67.0/24 79.176.218.0/24 79.182.22.0/24 79.182.41.0/24 79.182.66.0/24 79.183.244.0/24 109.66.188.0/24 109.66.232.0/24 Signature Algorithm: sha256WithRSAEncryption 45:75:ff:2a:52:a9:a7:b1:dd:6e:17:5a:c6:28:b0:7f:fc:0b: e0:1c:12:20:a5:c8:4b:85:0d:1c:64:b3:9d:3e:d4:3e:6a:86: 17:04:f6:7d:ed:88:76:d8:4a:85:71:36:6d:7d:e4:d5:de:ac: 12:13:b4:7c:56:83:7b:93:30:e1:d8:58:64:05:e6:94:d3:4c: df:46:85:b7:fe:a1:a8:12:c3:e3:53:09:fc:eb:9c:6c:b8:b7: 9a:aa:43:70:74:f3:4c:e0:55:95:44:fc:65:d4:9b:58:f0:d4: aa:e9:66:25:71:59:32:57:86:61:80:ae:3c:4b:1a:ac:e3:7f: f2:df:86:6e:1b:b3:ae:2f:5f:28:5a:21:68:ea:4f:8e:fd:44: cf:16:e3:7c:c9:5f:7d:df:15:25:c0:40:c0:76:44:30:c8:ca: cc:e6:81:90:ae:d8:9e:80:23:d1:7a:c3:60:5e:6b:b1:1e:ee: e1:01:97:67:62:3b:1b:a7:d9:ec:8b:39:69:99:c6:93:b3:d2: aa:b8:fc:b8:00:15:4c:66:3c:51:12:41:ac:bf:14:f0:b4:14: ec:73:fc:a3:e9:a1:2c:f7:2c:16:44:b4:b7:3f:5e:89:c6:b0: 3a:a7:57:03:81:7f:46:cc:a5:83:71:1f:81:13:78:74:0d:65: b7:b9:00:14 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIULLQ7rlZjlrm/mekbwFmKJlSTsaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzFaFw0yNzEwMDQwNjEzMzFaMDMxMTAvBgNV BAMTKDU3RUM4QTZBREJGMjNBQUVCNkFFNDVCRjU2NkI4NzdFODI4MDUyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPCaXxmzZ2Liv9A6qaNsn4shY VD4wx2cEPQ+vyTAh74mbV9BarUsbAJWInuVVGvGNG0ygM+9R7oe5bt9uY3wIN+ko FaDFw7cNb1IP1u6Hofpmr7dgaW6q4jMR43EIBHUKz0+sYrW6ZBLdiI58paT8koQO B9pfPfq0gmyTw5uNKR+w0d3LB7YT/G6zQlqvJQTJep1WcgS/c7jegL27xfAeCQUJ 7H/8GhDvcFt9Er9LXDPl5W5NFfsmx5spGiVTKRTnV/PS+Yqc9KI1CUT0W1Lj7DfD jqbg/lWoZeQOR9IVBKjYr5uc8v/NoSaNlzuaNjPrio5XDoT47BDzOKzR6IcTAgMB AAGjggJzMIICbzAdBgNVHQ4EFgQUV+yKatvyOq62rkW/VmuHfoKAUp0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyODU2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIA ATA2AwQAT7A1AwQAT7BDAwQAT7DaAwQAT7YWAwQAT7YpAwQAT7ZCAwQAT7f0AwQA bUK8AwQAbULoMA0GCSqGSIb3DQEBCwUAA4IBAQBFdf8qUqmnsd1uF1rGKLB//Avg HBIgpchLhQ0cZLOdPtQ+aoYXBPZ97Yh22EqFcTZtfeTV3qwSE7R8VoN7kzDh2Fhk BeaU00zfRoW3/qGoEsPjUwn865xsuLeaqkNwdPNM4FWVRPxl1JtY8NSq6WYlcVky V4ZhgK48Sxqs43/y34ZuG7OuL18oWiFo6k+O/UTPFuN8yV993xUlwEDAdkQwyMrM 5oGQrtiegCPResNgXmuxHu7hAZdnYjsbp9nsizlpmcaTs9KquPy4ABVMZjxREkGs vxTwtBTsc/yj6aEs9ywWRLS3P16JxrA6p1cDgX9GzKWDcR+BE3h0DWW3uQAU -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:52 2026 by rpki-client