$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS397373.roa File: AS397373.roa (raw, json) Hash identifier: KCQi0QyBoYpFVocjJKyXnjXEohWu9sbV9vMvtjx4VbE= Subject key identifier: 6B:65:98:A7:A7:F4:44:F1:65:F4:1D:4C:01:88:9A:05:2B:5B:7F:0D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 534B9913F5DEAABDD961E944943A7F1CFA108F85 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS397373.roa Signing time: Mon 05 Oct 2026 06:13:41 +0000 ROA not before: Mon 05 Oct 2026 06:08:41 +0000 ROA not after: Mon 04 Oct 2027 06:13:41 +0000 asID: 397373 IP address blocks: 79.176.217.0/24 maxlen: 24 79.176.249.0/24 maxlen: 24 79.176.254.0/24 maxlen: 24 79.180.244.0/22 maxlen: 24 79.182.255.0/24 maxlen: 24 79.183.103.0/24 maxlen: 24 109.66.38.0/24 maxlen: 24 109.66.46.0/24 maxlen: 24 109.66.102.0/24 maxlen: 24 109.66.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4b:99:13:f5:de:aa:bd:d9:61:e9:44:94:3a:7f:1c:fa:10:8f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:41 2026 GMT Not After : Oct 4 06:13:41 2027 GMT Subject: CN=6B6598A7A7F444F165F41D4C01889A052B5B7F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:8b:ba:b6:78:85:bc:b8:21:dd:17:49:85: 49:2f:dd:7a:ef:10:e4:81:0b:54:e3:31:a8:d5:36: 9f:f0:88:12:c3:33:3e:14:71:70:ff:10:25:d5:a9: bd:20:d9:48:1c:57:68:37:ba:76:d6:d6:0b:39:fe: 4b:e2:4f:83:c6:54:d2:cf:14:bf:09:62:42:80:b1: 2e:1c:65:92:b1:64:20:f7:cd:05:1a:4e:aa:45:e2: d6:59:90:bd:12:8c:7b:9f:f3:cf:ff:74:cd:d2:cc: 6a:c2:69:5e:3e:ff:0b:f4:1b:f4:74:b9:74:8e:04: 36:0d:a3:d9:a6:09:3d:7d:0d:fb:7a:00:21:41:33: d4:fd:c1:48:c1:96:ff:ef:10:fc:8e:a1:17:98:09: 2c:c2:4e:65:26:0d:fe:49:8e:d9:f7:f3:d8:2d:2c: 66:c9:1e:9e:39:80:0c:cf:3a:c7:1d:73:f8:4a:df: 9a:42:c7:60:5c:b3:bd:b5:89:f4:8f:dd:5b:13:83: 36:3a:72:ca:ca:9d:95:0f:15:80:d9:aa:36:df:71: fc:1a:22:3f:3f:87:8f:3e:90:b0:f9:be:6a:98:4c: 62:2b:0c:39:5b:53:cc:15:8c:41:96:9e:08:50:ae: 7f:2e:cb:05:f0:8a:1a:ff:7f:0b:24:3e:3a:6b:08: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:65:98:A7:A7:F4:44:F1:65:F4:1D:4C:01:88:9A:05:2B:5B:7F:0D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS397373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.217.0/24 79.176.249.0/24 79.176.254.0/24 79.180.244.0/22 79.182.255.0/24 79.183.103.0/24 109.66.38.0/24 109.66.46.0/24 109.66.102.0/24 109.66.249.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b7:9a:c5:6f:0c:13:24:ac:25:d7:89:ac:e1:ea:59:9c:79: 64:f0:f2:7a:22:3c:e7:f8:b3:95:1f:ef:fe:3c:8c:ca:d1:09: b1:81:5c:f4:9e:52:79:20:6d:f2:77:f7:e1:89:b9:38:a1:13: ca:1f:56:5d:c9:69:9f:3b:73:d6:8d:34:ec:9b:99:50:2c:fc: 0d:22:8f:25:e0:1c:1b:a5:6d:5c:b4:31:25:0f:a8:25:e0:43: ad:2a:4a:f1:74:12:03:21:5d:23:20:08:35:4d:81:0e:d8:ea: 56:be:35:4c:06:e4:32:8d:58:56:e4:af:a6:db:12:c4:d9:2a: 02:6d:86:28:70:f9:90:d5:30:d2:23:a6:ba:44:45:cb:5b:b1: fc:e6:d1:95:98:78:db:75:c2:ef:79:a0:be:ba:1b:db:8b:2d: 9f:83:96:5f:dd:05:e1:53:4b:2b:96:e7:8b:af:1a:51:7d:7d: d6:fe:19:0b:00:97:4d:f2:7d:be:6b:f7:16:2e:39:de:78:09: c9:47:3e:88:e2:da:96:01:e2:d3:5c:69:1b:25:6f:06:7d:da: be:52:f5:0e:33:fb:09:43:d1:26:59:53:8c:f1:2a:13:1c:01: b0:f7:18:f4:06:93:3a:8e:98:7a:c3:9f:53:d2:97:06:b8:3b: c1:7f:01:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUU0uZE/Xeqr3ZYelElDp/HPoQj4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDFaFw0yNzEwMDQwNjEzNDFaMDMxMTAvBgNV BAMTKDZCNjU5OEE3QTdGNDQ0RjE2NUY0MUQ0QzAxODg5QTA1MkI1QjdGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dYu6tniFvLgh3RdJhUkv3Xrv EOSBC1TjMajVNp/wiBLDMz4UcXD/ECXVqb0g2UgcV2g3unbW1gs5/kviT4PGVNLP FL8JYkKAsS4cZZKxZCD3zQUaTqpF4tZZkL0SjHuf88//dM3SzGrCaV4+/wv0G/R0 uXSOBDYNo9mmCT19Dft6ACFBM9T9wUjBlv/vEPyOoReYCSzCTmUmDf5Jjtn389gt LGbJHp45gAzPOscdc/hK35pCx2Bcs721ifSP3VsTgzY6csrKnZUPFYDZqjbfcfwa Ij8/h48+kLD5vmqYTGIrDDlbU8wVjEGWnghQrn8uywXwihr/fwskPjprCFgzAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUa2WYp6f0RPFl9B1MAYiaBStbfw0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzOTczNzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIE AgABMDwDBABPsNkDBABPsPkDBABPsP4DBAJPtPQDBABPtv8DBABPt2cDBABtQiYD BABtQi4DBABtQmYDBABtQvkwDQYJKoZIhvcNAQELBQADggEBADi3msVvDBMkrCXX iazh6lmceWTw8noiPOf4s5Uf7/48jMrRCbGBXPSeUnkgbfJ39+GJuTihE8ofVl3J aZ87c9aNNOybmVAs/A0ijyXgHBulbVy0MSUPqCXgQ60qSvF0EgMhXSMgCDVNgQ7Y 6la+NUwG5DKNWFbkr6bbEsTZKgJthihw+ZDVMNIjprpERctbsfzm0ZWYeNt1wu95 oL66G9uLLZ+Dll/dBeFTSyuW54uvGlF9fdb+GQsAl03yfb5r9xYuOd54CclHPoji 2pYB4tNcaRslbwZ92r5S9Q4z+wlD0SZZU4zxKhMcAbD3GPQGkzqOmHrDn1PSlwa4 O8F/ATY= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:48 2026 by rpki-client