$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS3257.roa File: AS3257.roa (raw, json) Hash identifier: uKLa2DAyRjHxyjH8M5u3iSOCI//VJv3GydfgdSftBCo= Subject key identifier: EF:FC:E6:71:0E:13:56:30:C2:64:86:A3:CB:98:B2:5E:72:9F:A4:14 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1977222525F6CA82663F422E2914D6CEE1E6B700 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS3257.roa Signing time: Mon 05 Oct 2026 06:13:42 +0000 ROA not before: Mon 05 Oct 2026 06:08:42 +0000 ROA not after: Mon 04 Oct 2027 06:13:42 +0000 asID: 3257 IP address blocks: 79.176.64.0/24 maxlen: 24 79.176.110.0/24 maxlen: 24 79.176.112.0/24 maxlen: 24 109.66.51.0/24 maxlen: 24 109.66.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:77:22:25:25:f6:ca:82:66:3f:42:2e:29:14:d6:ce:e1:e6:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:42 2026 GMT Not After : Oct 4 06:13:42 2027 GMT Subject: CN=EFFCE6710E135630C26486A3CB98B25E729FA414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b9:37:c6:41:9c:f2:16:ad:d2:3b:09:26:f9: 4c:b5:98:92:37:2f:4b:e7:24:d6:cf:d3:80:75:04: d8:df:af:15:fa:72:16:d3:11:9a:5f:70:eb:ca:de: 41:27:a4:cc:a8:17:68:5f:3e:c4:7f:19:d4:6e:1e: f0:9e:fd:46:4e:b1:75:d2:79:d3:6e:7c:93:5d:fc: c9:7e:d7:e3:ee:a3:fb:fe:1a:d3:25:61:8b:7c:9b: e3:1e:c3:d6:d3:dc:7e:e9:3e:39:0f:ec:8a:45:18: 4e:f6:7a:62:5f:c9:8b:b9:e3:2b:9a:3a:2c:19:37: 03:51:c4:e5:dd:ea:70:52:48:49:86:9e:f1:77:a5: 34:af:4a:df:33:fd:e9:1e:8f:2f:b4:44:58:1e:e1: 28:12:9a:0e:16:e4:45:68:dc:41:b3:74:5b:7f:41: 75:35:9a:d1:e8:f6:91:91:f8:cf:9f:84:05:02:66: d7:89:c0:66:cc:ee:ea:66:22:95:0d:79:42:1a:6e: 74:a1:21:4a:9b:a7:f8:c9:e4:79:f9:e3:a1:d7:97: be:8c:cd:12:54:2b:fa:5a:ad:96:5e:7d:00:d0:37: a7:9c:b4:ac:cf:3b:d2:5f:5b:d1:74:72:9b:2d:b4: db:d1:02:f1:ba:29:61:84:30:ad:0e:58:77:f1:b4: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FC:E6:71:0E:13:56:30:C2:64:86:A3:CB:98:B2:5E:72:9F:A4:14 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS3257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.64.0/24 79.176.110.0/24 79.176.112.0/24 109.66.51.0/24 109.66.54.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d8:f3:52:74:ca:3c:09:1a:23:57:14:ad:1b:f3:e8:11:24: cd:7a:20:4d:78:0b:bf:10:9e:22:dd:d3:c4:18:06:47:f3:73: b5:62:2b:70:c9:37:24:ed:e1:63:e2:86:3b:1c:53:c9:86:69: c5:49:30:14:25:3a:ab:ee:22:84:a6:08:41:8e:d2:78:61:67: be:5c:aa:4c:97:17:84:45:c5:dd:5e:0b:76:1d:b5:31:53:02: e4:b4:da:da:39:2e:f3:a7:b2:39:6d:e3:25:5c:30:39:2e:72: 93:94:68:33:66:be:e1:c3:db:02:38:2d:e0:e2:ff:8a:7d:02: d9:70:34:27:fe:c7:5f:8a:e1:c9:36:b5:b2:f5:aa:14:d1:60: 49:a7:b1:dc:a0:e5:45:42:75:9b:cc:e4:7d:4a:42:6c:ea:fe: a4:f8:55:45:9b:9b:c0:52:07:8f:9a:0c:d9:8c:b4:38:e3:8d: 62:d2:96:a2:0d:00:33:d6:56:93:62:90:55:ce:1c:63:5b:34: 9b:72:95:b1:7b:f6:44:3d:50:19:43:e0:e5:bc:7f:9b:48:ba: 74:3d:3e:a6:5f:29:38:4e:10:87:7c:24:3b:4e:18:af:68:27: 2e:fd:88:5f:c9:29:88:cc:ef:98:8e:22:e7:11:7f:17:ef:ed: f2:05:fc:19 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUGXciJSX2yoJmP0IuKRTWzuHmtwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDJaFw0yNzEwMDQwNjEzNDJaMDMxMTAvBgNV BAMTKEVGRkNFNjcxMEUxMzU2MzBDMjY0ODZBM0NCOThCMjVFNzI5RkE0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuTfGQZzyFq3SOwkm+Uy1mJI3 L0vnJNbP04B1BNjfrxX6chbTEZpfcOvK3kEnpMyoF2hfPsR/GdRuHvCe/UZOsXXS edNufJNd/Ml+1+Puo/v+GtMlYYt8m+Mew9bT3H7pPjkP7IpFGE72emJfyYu54yua OiwZNwNRxOXd6nBSSEmGnvF3pTSvSt8z/ekejy+0RFge4SgSmg4W5EVo3EGzdFt/ QXU1mtHo9pGR+M+fhAUCZteJwGbM7upmIpUNeUIabnShIUqbp/jJ5Hn546HXl76M zRJUK/parZZefQDQN6ectKzPO9JfW9F0cpsttNvRAvG6KWGEMK0OWHfxtAsPAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU7/zmcQ4TVjDCZIajy5iyXnKfpBQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzMjU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIA ATAeAwQAT7BAAwQAT7BuAwQAT7BwAwQAbUIzAwQAbUI2MA0GCSqGSIb3DQEBCwUA A4IBAQCc2PNSdMo8CRojVxStG/PoESTNeiBNeAu/EJ4i3dPEGAZH83O1YitwyTck 7eFj4oY7HFPJhmnFSTAUJTqr7iKEpghBjtJ4YWe+XKpMlxeERcXdXgt2HbUxUwLk tNraOS7zp7I5beMlXDA5LnKTlGgzZr7hw9sCOC3g4v+KfQLZcDQn/sdfiuHJNrWy 9aoU0WBJp7HcoOVFQnWbzOR9SkJs6v6k+FVFm5vAUgePmgzZjLQ4441i0paiDQAz 1laTYpBVzhxjWzSbcpWxe/ZEPVAZQ+DlvH+bSLp0PT6mXyk4ThCHfCQ7ThivaCcu /YhfySmIzO+YjiLnEX8X7+3yBfwZ -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:03 2026 by rpki-client