$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34989.roa File: AS34989.roa (raw, json) Hash identifier: joZ9gz1mHHvnSly/uRmbBPEiynIM85Rezv8YENS0kxM= Subject key identifier: 42:07:4F:88:1E:EC:BC:E4:89:13:DB:58:70:7C:E2:57:B8:BC:5E:0D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 2335A5D423D5C3F8CECFE804B6EF371F50CEDEE9 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34989.roa Signing time: Mon 05 Oct 2026 06:11:57 +0000 ROA not before: Mon 05 Oct 2026 06:06:57 +0000 ROA not after: Mon 04 Oct 2027 06:11:57 +0000 asID: 34989 IP address blocks: 79.182.166.0/24 maxlen: 24 79.182.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:35:a5:d4:23:d5:c3:f8:ce:cf:e8:04:b6:ef:37:1f:50:ce:de:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:06:57 2026 GMT Not After : Oct 4 06:11:57 2027 GMT Subject: CN=42074F881EECBCE48913DB58707CE257B8BC5E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:6e:77:36:28:f9:30:94:15:38:fc:42:1f: d8:47:a5:80:46:e6:42:2d:2b:d7:6c:9d:a7:89:d2: c0:dd:64:5a:c3:47:47:1d:e3:83:44:9e:c3:ce:23: 92:c0:70:c1:d3:b2:f2:0f:4f:7d:47:85:48:6e:eb: 44:be:f9:67:90:81:bc:3c:3b:02:f6:f5:de:f6:ce: a9:23:62:33:af:02:0d:6f:13:77:22:3e:75:21:6c: 9f:62:c6:1e:57:19:e8:a7:2f:8d:f9:3b:ed:16:d5: b1:8d:cd:b6:ad:fa:67:5e:11:37:dd:b1:de:f2:51: 20:fe:6e:8f:ba:1c:4a:d6:1f:27:be:ee:b3:aa:4b: 68:76:b6:1b:14:4c:10:0f:7b:1b:bc:09:06:28:f8: ec:97:90:23:01:9f:44:15:89:f7:fe:37:52:a8:da: e4:b0:33:3a:7b:3b:15:c5:37:11:63:f9:9f:44:15: 91:4f:bf:eb:d6:04:e1:ba:f1:28:18:66:4b:0f:c8: 76:7b:28:bf:aa:bf:30:f8:2e:3a:5d:7d:d0:7a:0f: 54:fe:e1:41:63:2f:66:72:f3:cc:36:26:f1:58:4e: c1:cb:4c:97:ee:d1:62:a4:34:ee:4c:41:5d:c9:8b: 8a:9e:a6:0c:c0:49:ba:a0:72:78:1a:03:4a:9a:c7: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:4F:88:1E:EC:BC:E4:89:13:DB:58:70:7C:E2:57:B8:BC:5E:0D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.166.0/23 Signature Algorithm: sha256WithRSAEncryption 75:b8:fc:0a:39:11:c5:63:fc:09:67:17:d6:68:03:74:22:73: 28:3e:07:6f:b1:f5:79:a7:6a:78:34:83:c6:43:a9:20:16:b2: 6c:d6:ce:32:13:68:ee:be:2e:ad:7a:6c:92:37:e4:8d:71:eb: 69:d4:ed:4f:28:fa:bd:75:d1:aa:f5:03:2f:47:13:e0:67:49: 05:c9:b9:d8:69:08:ca:ef:2c:28:ef:62:c9:b6:b8:b8:ed:b8: e5:ce:f6:73:e1:a9:ac:3b:ac:14:24:7e:1d:90:24:0f:8c:53: e4:88:c2:b0:75:34:44:7f:98:e9:8d:9b:84:af:ae:9d:67:95: a7:94:6e:a2:c5:44:d3:56:9c:a3:a3:7f:d0:89:82:c7:53:b0: c1:0c:b6:f7:3d:35:45:41:4d:bb:2d:ae:30:d0:04:ed:dc:db: 4c:9a:55:c2:d9:6e:f4:35:3d:6a:1e:7b:02:ee:11:7b:cc:50: 4e:75:b0:83:6a:3b:77:5b:0c:71:58:e5:0d:2e:e1:92:ad:75: 34:c2:63:95:fb:96:fb:b9:0c:42:2c:22:05:86:b0:71:a4:04: b4:bc:7d:49:ba:5d:43:c9:9f:6f:9d:9d:79:d0:2c:b1:c2:94: 03:5c:fc:81:b8:36:6a:38:d1:a4:72:01:d9:b6:f1:3a:17:26: 8f:8b:dd:fc -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIzWl1CPVw/jOz+gEtu83H1DO3ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA2NTdaFw0yNzEwMDQwNjExNTdaMDMxMTAvBgNV BAMTKDQyMDc0Rjg4MUVFQ0JDRTQ4OTEzREI1ODcwN0NFMjU3QjhCQzVFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqG53Nij5MJQVOPxCH9hHpYBG 5kItK9dsnaeJ0sDdZFrDR0cd44NEnsPOI5LAcMHTsvIPT31HhUhu60S++WeQgbw8 OwL29d72zqkjYjOvAg1vE3ciPnUhbJ9ixh5XGeinL435O+0W1bGNzbat+mdeETfd sd7yUSD+bo+6HErWHye+7rOqS2h2thsUTBAPexu8CQYo+OyXkCMBn0QViff+N1Ko 2uSwMzp7OxXFNxFj+Z9EFZFPv+vWBOG68SgYZksPyHZ7KL+qvzD4LjpdfdB6D1T+ 4UFjL2Zy88w2JvFYTsHLTJfu0WKkNO5MQV3Ji4qepgzASbqgcngaA0qax3cZAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUQgdPiB7svOSJE9tYcHziV7i8Xg0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzNDk4OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAU+2pjANBgkqhkiG9w0BAQsFAAOCAQEAdbj8CjkRxWP8CWcX1mgDdCJz KD4Hb7H1eadqeDSDxkOpIBaybNbOMhNo7r4urXpskjfkjXHradTtTyj6vXXRqvUD L0cT4GdJBcm52GkIyu8sKO9iyba4uO245c72c+GprDusFCR+HZAkD4xT5IjCsHU0 RH+Y6Y2bhK+unWeVp5RuosVE01aco6N/0ImCx1OwwQy29z01RUFNuy2uMNAE7dzb TJpVwtlu9DU9ah57Au4Re8xQTnWwg2o7d1sMcVjlDS7hkq11NMJjlfuW+7kMQiwi BYawcaQEtLx9SbpdQ8mfb52dedAsscKUA1z8gbg2ajjRpHIB2bbxOhcmj4vd/A== -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:02 2026 by rpki-client