$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399275.roa File: AS399275.roa (raw, json) Hash identifier: 49qSyKn4BFEH+KJkBO3OxQqy2RQ4gNhMluUrJhMsFEA= Subject key identifier: 5A:E6:5A:A9:B7:6F:A8:F5:E2:B2:F0:B9:DE:E3:80:AF:E5:36:CA:03 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1FB0B71539B7E619AE64F5E6C7280B7F8DF518CA Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399275.roa Signing time: Mon 05 Oct 2026 06:11:58 +0000 ROA not before: Mon 05 Oct 2026 06:06:58 +0000 ROA not after: Mon 04 Oct 2027 06:11:58 +0000 asID: 399275 IP address blocks: 79.182.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b0:b7:15:39:b7:e6:19:ae:64:f5:e6:c7:28:0b:7f:8d:f5:18:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:06:58 2026 GMT Not After : Oct 4 06:11:58 2027 GMT Subject: CN=5AE65AA9B76FA8F5E2B2F0B9DEE380AFE536CA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:90:c0:e0:49:7e:12:de:3f:0b:47:fc:fd: 28:3f:09:e0:fa:cb:77:a2:a0:f5:ac:93:49:c2:51: 88:2f:cf:d9:ce:75:8b:e4:ab:2c:30:31:23:8c:8c: 24:94:3e:7e:bc:77:a5:30:ee:e2:5e:78:fa:e4:31: f0:66:d7:68:6d:89:ef:c5:74:cf:a7:1e:f8:57:af: c9:52:30:22:e9:1f:50:c8:48:88:f9:ef:dc:4f:26: e6:1d:fd:d9:dc:3d:94:78:3a:0f:0f:88:0d:30:4c: 5c:15:19:d0:a9:e9:71:53:8d:85:8d:d7:b3:91:5e: 5a:f5:22:35:5c:5f:02:0b:7e:53:6e:88:ef:c7:6b: 6b:54:7b:2e:d1:02:7a:30:dd:de:14:a4:b4:c1:d0: 6f:5f:3f:80:e3:e8:13:a3:93:af:1a:2c:28:13:7b: a2:8c:38:46:97:a4:d5:75:1b:30:0e:21:89:02:b5: 75:2a:d2:51:42:b3:be:26:74:1b:a3:c5:2e:ef:68: e8:02:13:d3:54:37:66:5f:23:4e:51:fe:5a:bf:af: 42:c2:b1:cf:5c:d2:ae:8a:7b:c5:3c:81:63:8a:aa: d2:fb:f1:5c:04:df:28:b1:99:18:1f:3f:c0:a5:08: 3c:b7:02:9f:1e:1b:db:36:c2:d5:2c:0f:4d:b1:63: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E6:5A:A9:B7:6F:A8:F5:E2:B2:F0:B9:DE:E3:80:AF:E5:36:CA:03 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399275.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.17.0/24 Signature Algorithm: sha256WithRSAEncryption 61:22:19:58:1a:c1:5b:0e:6e:56:70:f1:95:58:36:df:76:5d: 61:4f:85:ba:fe:df:7f:94:4e:46:4e:c4:78:f2:a3:41:92:70: 0e:0b:af:53:4e:64:42:81:94:46:51:28:83:09:5a:a5:f1:cd: 8b:6d:78:2b:80:3e:20:bd:a8:9d:28:28:0e:53:17:5f:28:cd: 70:6e:5d:04:61:1c:60:9b:ce:24:54:0d:78:0c:52:27:cc:50: 20:eb:26:4a:c6:9e:18:c1:e2:87:e7:b7:85:3b:0e:55:6f:52: b5:6c:02:b0:b9:c5:60:ad:5f:3c:25:a8:ea:58:ad:f2:af:5f: 2d:f5:83:2f:60:fc:fa:b8:cf:96:49:3c:e7:13:34:26:d5:a0: 17:29:c5:76:e3:86:c6:d2:13:5b:ed:85:e7:77:af:b1:a9:13: c9:cd:8c:0f:87:cf:e4:ed:36:46:85:7c:71:88:50:96:46:6f: 6f:75:79:ad:d5:00:4f:0f:a5:9c:3d:94:24:74:57:af:0b:e2: a9:10:d3:3c:b6:13:1b:f7:50:09:32:32:b3:5f:7f:5c:91:af: ba:49:73:66:a6:eb:80:1b:56:57:08:25:6d:6a:bf:a4:3f:4c: 32:e3:54:d0:70:12:b2:64:aa:85:42:8f:77:3d:76:ad:31:a4: 3b:11:df:a7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUH7C3FTm35hmuZPXmxygLf431GMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA2NThaFw0yNzEwMDQwNjExNThaMDMxMTAvBgNV BAMTKDVBRTY1QUE5Qjc2RkE4RjVFMkIyRjBCOURFRTM4MEFGRTUzNkNBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGZDA4El+Et4/C0f8/Sg/CeD6 y3eioPWsk0nCUYgvz9nOdYvkqywwMSOMjCSUPn68d6Uw7uJeePrkMfBm12htie/F dM+nHvhXr8lSMCLpH1DISIj579xPJuYd/dncPZR4Og8PiA0wTFwVGdCp6XFTjYWN 17ORXlr1IjVcXwILflNuiO/Ha2tUey7RAnow3d4UpLTB0G9fP4Dj6BOjk68aLCgT e6KMOEaXpNV1GzAOIYkCtXUq0lFCs74mdBujxS7vaOgCE9NUN2ZfI05R/lq/r0LC sc9c0q6Ke8U8gWOKqtL78VwE3yixmRgfP8ClCDy3Ap8eG9s2wtUsD02xY/ELAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUWuZaqbdvqPXisvC53uOAr+U2ygMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzOTkyNzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPthEwDQYJKoZIhvcNAQELBQADggEBAGEiGVgawVsOblZw8ZVYNt92 XWFPhbr+33+UTkZOxHjyo0GScA4Lr1NOZEKBlEZRKIMJWqXxzYtteCuAPiC9qJ0o KA5TF18ozXBuXQRhHGCbziRUDXgMUifMUCDrJkrGnhjB4ofnt4U7DlVvUrVsArC5 xWCtXzwlqOpYrfKvXy31gy9g/Pq4z5ZJPOcTNCbVoBcpxXbjhsbSE1vthed3r7Gp E8nNjA+Hz+TtNkaFfHGIUJZGb291ea3VAE8PpZw9lCR0V68L4qkQ0zy2Exv3UAky MrNff1yRr7pJc2am64AbVlcIJW1qv6Q/TDLjVNBwErJkqoVCj3c9dq0xpDsR36c= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:20 2026 by rpki-client