$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: TtfgrH0OU1qC9mcckSIdUs4AB1vbV22u5Q+a6CGGIWo= Subject key identifier: D0:32:C0:BF:14:FC:2B:EA:69:91:49:FC:6E:5F:F7:09:21:58:F1:6F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 704050478D81F3FEF0C6EB4ED8F0DF050BF47D4F Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2914.roa Signing time: Mon 05 Oct 2026 06:13:35 +0000 ROA not before: Mon 05 Oct 2026 06:08:35 +0000 ROA not after: Mon 04 Oct 2027 06:13:35 +0000 asID: 2914 IP address blocks: 109.66.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 03:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:40:50:47:8d:81:f3:fe:f0:c6:eb:4e:d8:f0:df:05:0b:f4:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:35 2026 GMT Not After : Oct 4 06:13:35 2027 GMT Subject: CN=D032C0BF14FC2BEA699149FC6E5FF7092158F16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:7d:2d:ea:df:eb:09:85:db:df:d2:d6:51: 82:04:24:a4:24:91:f7:f8:bf:c5:4f:f8:4b:eb:07: e3:00:c3:dc:18:a1:38:37:9a:ed:0c:a8:c1:06:07: 1d:e5:50:15:81:6d:4e:23:e3:51:f3:46:57:6e:a0: 04:c1:ff:b4:d9:07:88:65:58:50:1c:2b:37:6f:9d: 53:32:08:98:dd:e1:34:36:aa:37:02:9f:da:2c:3f: bd:7f:72:52:66:59:ec:e2:4f:dd:cd:90:df:0b:7e: 28:8c:5e:91:b9:13:1f:90:38:c9:5e:ba:6b:d4:a7: aa:cf:12:58:e2:5b:3f:87:28:62:b5:70:ee:62:d9: 04:f1:6b:e6:08:15:9a:2d:4d:3f:91:35:e1:b6:b4: 4e:50:df:65:ad:03:8d:42:8f:bf:ea:43:81:a6:34: 33:83:4f:36:5e:7c:47:5e:07:ec:be:7f:2a:a2:73: 0f:58:40:7c:60:01:fc:63:62:05:6a:4f:3e:bc:10: 14:4b:5a:af:dc:04:f3:3a:3c:28:9b:b7:c8:6d:d8: 38:86:d0:bc:9f:0f:f5:e7:dd:42:a7:cb:9b:7c:cf: d7:b8:26:13:4d:46:c9:82:48:93:ac:59:4e:5c:f5: 64:b4:17:75:5f:67:32:22:0b:40:64:2a:6d:ca:d3: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:32:C0:BF:14:FC:2B:EA:69:91:49:FC:6E:5F:F7:09:21:58:F1:6F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.26.0/23 Signature Algorithm: sha256WithRSAEncryption 23:09:e3:87:92:0e:fd:b9:c9:97:8c:de:ae:17:2a:94:60:8e: 30:31:df:a0:37:e5:77:7d:53:4d:27:3d:e6:d7:00:50:a8:c3: a2:c1:58:b3:26:cb:ca:8a:c3:a6:a5:84:25:a6:fa:7a:63:0d: bd:2e:bf:39:9b:eb:f9:98:16:1f:4f:5f:b3:08:b3:db:84:6c: 0a:42:d8:8e:85:1a:5d:49:49:0e:fb:b0:9f:43:89:12:68:fb: 8c:bc:2b:29:97:37:15:ee:1e:9c:3d:1a:e8:1c:15:a2:a7:bb: f4:9d:71:9f:3a:e0:a0:2b:dd:85:5a:30:24:43:10:08:eb:62: 9a:30:59:f3:25:50:6f:e9:64:c8:e5:2c:28:12:99:4a:ef:fd: 66:37:bf:8e:ed:88:6b:66:d9:ed:85:67:fc:78:31:5c:7a:15: 3a:8d:fa:d1:60:0d:eb:8d:64:69:77:f6:12:1a:cb:99:4c:80: 77:bf:86:10:b4:a5:bb:23:2e:e3:e8:09:22:af:51:10:c5:45: 28:e2:d5:33:e4:3d:9d:df:03:bc:14:3f:af:bb:b5:1b:2b:fd: 16:cc:8e:a7:af:3c:74:57:43:a7:fe:85:2e:4d:6d:d2:12:74: 4b:70:83:6a:39:75:da:84:69:9a:73:5a:ab:e0:59:17:c4:54: 79:a1:f1:42 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUcEBQR42B8/7wxutO2PDfBQv0fU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzVaFw0yNzEwMDQwNjEzMzVaMDMxMTAvBgNV BAMTKEQwMzJDMEJGMTRGQzJCRUE2OTkxNDlGQzZFNUZGNzA5MjE1OEYxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsH0t6t/rCYXb39LWUYIEJKQk kff4v8VP+EvrB+MAw9wYoTg3mu0MqMEGBx3lUBWBbU4j41HzRlduoATB/7TZB4hl WFAcKzdvnVMyCJjd4TQ2qjcCn9osP71/clJmWeziT93NkN8LfiiMXpG5Ex+QOMle umvUp6rPEljiWz+HKGK1cO5i2QTxa+YIFZotTT+RNeG2tE5Q32WtA41Cj7/qQ4Gm NDODTzZefEdeB+y+fyqicw9YQHxgAfxjYgVqTz68EBRLWq/cBPM6PCibt8ht2DiG 0LyfD/Xn3UKny5t8z9e4JhNNRsmCSJOsWU5c9WS0F3VfZzIiC0BkKm3K06YFAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQU0DLAvxT8K+ppkUn8bl/3CSFY8W8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyOTE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBbUIaMA0GCSqGSIb3DQEBCwUAA4IBAQAjCeOHkg79ucmXjN6uFyqUYI4w Md+gN+V3fVNNJz3m1wBQqMOiwVizJsvKisOmpYQlpvp6Yw29Lr85m+v5mBYfT1+z CLPbhGwKQtiOhRpdSUkO+7CfQ4kSaPuMvCsplzcV7h6cPRroHBWip7v0nXGfOuCg K92FWjAkQxAI62KaMFnzJVBv6WTI5SwoEplK7/1mN7+O7YhrZtnthWf8eDFcehU6 jfrRYA3rjWRpd/YSGsuZTIB3v4YQtKW7Iy7j6Akir1EQxUUo4tUz5D2d3wO8FD+v u7UbK/0WzI6nrzx0V0On/oUuTW3SEnRLcINqOXXahGmac1qr4FkXxFR5ofFC -----END CERTIFICATE-----Generated at Tue Oct 6 20:24:10 2026 by rpki-client