$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS38186.roa File: AS38186.roa (raw, json) Hash identifier: bre5p+cq2uTArStLJMgiso1z0Nfqf2trIM6NiLSmurI= Subject key identifier: 7A:0F:B3:51:D1:F0:84:E5:3E:3A:BA:DA:72:0A:D1:83:75:55:9D:1C Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3437CC1066A139CF6A3D2BBB2F75FF0EEBD55AC1 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS38186.roa Signing time: Mon 05 Oct 2026 06:11:10 +0000 ROA not before: Mon 05 Oct 2026 06:06:10 +0000 ROA not after: Mon 04 Oct 2027 06:11:10 +0000 asID: 38186 IP address blocks: 79.176.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:37:cc:10:66:a1:39:cf:6a:3d:2b:bb:2f:75:ff:0e:eb:d5:5a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:06:10 2026 GMT Not After : Oct 4 06:11:10 2027 GMT Subject: CN=7A0FB351D1F084E53E3ABADA720AD18375559D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:7f:a2:cc:21:c5:7b:50:6b:b8:26:0a:37: ec:41:88:9a:fc:f6:5f:14:b8:cd:c5:36:17:ab:aa: d2:ec:2d:50:07:4b:4c:18:22:fd:ac:11:2f:7d:68: 44:08:11:f4:a5:a8:4c:56:0f:88:57:c9:ae:03:fb: d1:75:20:81:04:d6:75:94:90:76:25:c4:89:09:eb: cc:a1:39:1f:58:20:fd:e1:7e:f8:73:98:1a:d2:b1: a1:51:d2:3d:af:e8:c1:5f:0c:ec:5f:53:14:64:55: 27:41:e8:f5:30:41:c5:dc:51:b4:2c:30:3c:21:72: ec:f1:65:e0:90:7e:72:87:c9:34:8c:11:9b:97:cf: 58:05:05:cb:1d:6d:91:c7:42:ff:da:11:a9:cf:66: 3f:a0:ee:01:ca:2c:ea:03:54:82:88:ea:26:88:31: 97:7c:c8:f5:78:54:85:54:7f:a3:ec:33:22:dd:b9: c5:b4:b1:04:41:07:c0:f9:68:5b:ab:00:2d:a1:ee: 79:38:0b:f5:42:ee:0c:79:34:d5:4d:cd:96:0a:2e: 11:75:3e:7b:d4:99:97:90:a1:c4:53:fc:52:7c:e8: 9e:e1:5f:03:41:53:7a:0f:b0:09:58:61:46:69:80: ea:aa:b3:79:ed:73:37:e4:9d:c7:20:97:85:7d:e1: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:B3:51:D1:F0:84:E5:3E:3A:BA:DA:72:0A:D1:83:75:55:9D:1C X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS38186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.18.0/24 Signature Algorithm: sha256WithRSAEncryption c5:8a:4a:17:e7:0f:f9:bb:f3:ac:8a:03:5d:fd:9b:d1:4d:88: d2:61:44:a6:2a:d9:fb:3f:d0:3e:fd:5b:c8:5b:a0:2e:a8:b0: 6b:46:92:87:c0:88:4f:5a:fd:46:c5:9e:c4:c1:3e:da:8e:6d: 44:43:09:0c:f6:1b:2d:c3:e8:15:26:df:d9:e7:2a:e0:cb:87: 52:35:51:63:91:d1:9d:8e:06:67:b3:2a:3e:a4:04:9e:7b:33: 12:0d:7e:57:52:94:64:2e:a9:33:e1:0d:02:dc:77:77:c4:6a: 76:fa:1a:5b:f1:26:2f:fa:00:b5:48:71:5a:39:5b:48:e1:94: 12:0d:dd:e7:c5:db:5d:ea:3f:15:12:c2:28:c1:10:a7:e4:5b: 06:02:a2:e5:67:74:11:87:98:3f:7f:bf:ed:44:6f:9b:b1:3d: f6:8d:e7:a3:ea:55:66:d5:36:3b:b9:fa:d8:84:c5:55:a7:f4: df:fe:24:e8:72:e9:14:9b:3c:2c:23:e6:08:6c:1a:5d:b0:82: b6:71:46:fb:12:6f:5a:4b:0e:a6:24:11:c6:5f:16:15:44:8f: 96:25:ad:c9:8c:ed:80:78:d0:46:4a:27:e1:56:f2:d8:58:b3: 53:8d:67:21:00:90:12:74:3b:0e:f5:cf:ce:0b:71:da:30:fe: 46:ba:58:b7 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNDfMEGahOc9qPSu7L3X/DuvVWsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA2MTBaFw0yNzEwMDQwNjExMTBaMDMxMTAvBgNV BAMTKDdBMEZCMzUxRDFGMDg0RTUzRTNBQkFEQTcyMEFEMTgzNzU1NTlEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDn+izCHFe1BruCYKN+xBiJr8 9l8UuM3FNherqtLsLVAHS0wYIv2sES99aEQIEfSlqExWD4hXya4D+9F1IIEE1nWU kHYlxIkJ68yhOR9YIP3hfvhzmBrSsaFR0j2v6MFfDOxfUxRkVSdB6PUwQcXcUbQs MDwhcuzxZeCQfnKHyTSMEZuXz1gFBcsdbZHHQv/aEanPZj+g7gHKLOoDVIKI6iaI MZd8yPV4VIVUf6PsMyLducW0sQRBB8D5aFurAC2h7nk4C/VC7gx5NNVNzZYKLhF1 PnvUmZeQocRT/FJ86J7hXwNBU3oPsAlYYUZpgOqqs3ntczfknccgl4V94ZrTAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUeg+zUdHwhOU+OrracgrRg3VVnRwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzODE4Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAE+wEjANBgkqhkiG9w0BAQsFAAOCAQEAxYpKF+cP+bvzrIoDXf2b0U2I 0mFEpirZ+z/QPv1byFugLqiwa0aSh8CIT1r9RsWexME+2o5tREMJDPYbLcPoFSbf 2ecq4MuHUjVRY5HRnY4GZ7MqPqQEnnszEg1+V1KUZC6pM+ENAtx3d8RqdvoaW/Em L/oAtUhxWjlbSOGUEg3d58XbXeo/FRLCKMEQp+RbBgKi5Wd0EYeYP3+/7URvm7E9 9o3no+pVZtU2O7n62ITFVaf03/4k6HLpFJs8LCPmCGwaXbCCtnFG+xJvWksOpiQR xl8WFUSPliWtyYztgHjQRkon4Vby2FizU41nIQCQEnQ7DvXPzgtx2jD+RrpYtw== -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:34 2026 by rpki-client