$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: O72ZQxU5wjMDuHhuAu8W9kesoLBJzVXTaJIq+iGzKKs= Subject key identifier: B4:9C:8C:CD:FA:41:94:AB:AA:4E:49:A6:05:DA:4B:28:DC:47:5D:54 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 22E2FB4D9DD2ADA743A5AE4E43B88B1A7158132A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS393942.roa Signing time: Mon 05 Oct 2026 06:12:21 +0000 ROA not before: Mon 05 Oct 2026 06:07:21 +0000 ROA not after: Mon 04 Oct 2027 06:12:21 +0000 asID: 393942 IP address blocks: 79.182.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e2:fb:4d:9d:d2:ad:a7:43:a5:ae:4e:43:b8:8b:1a:71:58:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:21 2026 GMT Not After : Oct 4 06:12:21 2027 GMT Subject: CN=B49C8CCDFA4194ABAA4E49A605DA4B28DC475D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:f6:76:e1:94:b7:f0:98:67:63:a2:86:8d: 6d:a9:a6:18:17:99:30:64:f6:91:ba:2f:05:5a:ee: 48:a8:0f:f4:fa:b7:aa:77:df:fa:dd:10:82:67:48: c1:09:07:0a:94:2c:c6:e2:67:1f:8a:ad:e0:3f:0e: 5b:d0:16:08:d2:3d:f2:f7:9f:6a:b1:4e:8d:75:0d: bd:13:b4:90:ed:64:57:d8:67:63:87:c8:62:aa:60: 14:4f:3b:47:b9:86:e5:b5:c0:f0:10:92:22:97:4f: d0:fe:71:4f:56:04:5d:79:0e:f2:a9:f1:af:c3:eb: d8:99:2e:7c:4e:42:79:05:61:f1:a4:4c:2e:20:40: c5:5a:dd:08:47:50:20:b8:84:ce:74:7a:c2:f7:56: 19:cd:51:32:2c:5f:02:19:2a:c1:66:86:7c:46:5f: ec:7e:a0:ed:f0:de:d1:3e:00:dd:15:44:ab:64:5a: 2e:05:64:6d:47:db:db:58:6d:74:3d:fb:11:46:c0: 8c:2e:0a:15:d3:66:c9:8d:48:66:29:2f:d3:e3:44: 4a:99:84:16:83:b9:c2:14:70:72:fe:10:64:09:d0: 0b:b2:bc:d8:d4:5b:63:5f:3d:83:f3:a7:8a:cc:85: b5:0f:1f:df:ab:eb:f2:f3:b1:21:54:0a:34:17:01: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9C:8C:CD:FA:41:94:AB:AA:4E:49:A6:05:DA:4B:28:DC:47:5D:54 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.56.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:60:78:05:c2:2f:9f:ae:93:4f:41:de:e5:fc:eb:a5:31:2f: bc:df:e9:f1:b2:67:5c:b7:da:e2:e6:d5:15:1f:1e:40:5f:21: 22:b1:da:cf:fc:eb:f8:cc:ea:07:7c:da:9d:00:1d:ad:1a:c9: 97:9b:b6:25:44:73:8b:c0:53:9e:a0:78:eb:30:7c:54:72:92: 8b:bc:b5:ee:53:7b:3f:31:3f:90:a6:cd:58:a2:34:93:a4:26: e4:2a:f8:6c:82:2b:16:a0:01:cc:87:b3:ae:b1:88:ec:ea:c0: 79:75:5f:00:e3:b5:57:4a:2e:65:e6:af:6a:e8:8e:44:c4:d3: 23:a0:65:6d:66:b6:2c:b0:6b:32:b4:0a:fe:a6:c5:8e:d5:a6: 94:dc:e2:22:10:35:11:1d:f7:59:9f:67:a9:d8:06:39:96:d5: 88:4a:51:a0:a6:40:9c:4c:89:d2:27:a1:06:90:c2:2c:ee:6b: 86:05:f6:ee:da:5c:3e:85:e8:e8:65:a0:bb:a0:dd:6c:24:51: d5:0d:6a:4c:80:b8:d2:80:3d:87:50:8b:a5:a8:90:c1:96:a9: fe:1d:ea:28:e2:73:8e:63:5f:10:75:c2:92:f5:45:c6:a1:5f: 08:14:b5:57:a9:78:89:e7:44:cf:97:17:b4:a6:31:f3:05:c9: 60:a8:99:de -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUIuL7TZ3SradDpa5OQ7iLGnFYEyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3MjFaFw0yNzEwMDQwNjEyMjFaMDMxMTAvBgNV BAMTKEI0OUM4Q0NERkE0MTk0QUJBQTRFNDlBNjA1REE0QjI4REM0NzVENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpPZ24ZS38JhnY6KGjW2pphgX mTBk9pG6LwVa7kioD/T6t6p33/rdEIJnSMEJBwqULMbiZx+KreA/DlvQFgjSPfL3 n2qxTo11Db0TtJDtZFfYZ2OHyGKqYBRPO0e5huW1wPAQkiKXT9D+cU9WBF15DvKp 8a/D69iZLnxOQnkFYfGkTC4gQMVa3QhHUCC4hM50esL3VhnNUTIsXwIZKsFmhnxG X+x+oO3w3tE+AN0VRKtkWi4FZG1H29tYbXQ9+xFGwIwuChXTZsmNSGYpL9PjREqZ hBaDucIUcHL+EGQJ0AuyvNjUW2NfPYPzp4rMhbUPH9+r6/LzsSFUCjQXAf/9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUtJyMzfpBlKuqTkmmBdpLKNxHXVQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzOTM5NDIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtjgwDQYJKoZIhvcNAQELBQADggEBAF5geAXCL5+uk09B3uX866Ux L7zf6fGyZ1y32uLm1RUfHkBfISKx2s/86/jM6gd82p0AHa0ayZebtiVEc4vAU56g eOswfFRykou8te5Tez8xP5CmzViiNJOkJuQq+GyCKxagAcyHs66xiOzqwHl1XwDj tVdKLmXmr2rojkTE0yOgZW1mtiywazK0Cv6mxY7VppTc4iIQNREd91mfZ6nYBjmW 1YhKUaCmQJxMidInoQaQwizua4YF9u7aXD6F6OhloLug3WwkUdUNakyAuNKAPYdQ i6WokMGWqf4d6ijic45jXxB1wpL1RcahXwgUtVepeInnRM+XF7SmMfMFyWComd4= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:08 2026 by rpki-client