$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399359.roa File: AS399359.roa (raw, json) Hash identifier: NWf7AtasERBlm3hJBT91BX78sFdoWXzdzFU86YR7F0I= Subject key identifier: 84:D7:65:B3:6D:B9:6A:8F:D1:06:E5:15:96:85:2E:22:06:9C:3E:83 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1E7E93B4004D111CB6C8401382BF138555D02673 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399359.roa Signing time: Mon 05 Oct 2026 06:13:04 +0000 ROA not before: Mon 05 Oct 2026 06:08:04 +0000 ROA not after: Mon 04 Oct 2027 06:13:04 +0000 asID: 399359 IP address blocks: 109.65.101.0/24 maxlen: 24 109.65.151.0/24 maxlen: 24 109.65.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7e:93:b4:00:4d:11:1c:b6:c8:40:13:82:bf:13:85:55:d0:26:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:04 2026 GMT Not After : Oct 4 06:13:04 2027 GMT Subject: CN=84D765B36DB96A8FD106E51596852E22069C3E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:f1:44:fb:dc:69:74:5d:07:27:41:28:48: 39:8e:a3:e3:79:6a:6a:4a:39:a4:ae:32:81:6b:ea: f7:e9:fc:30:c7:ae:16:57:79:82:25:07:40:77:ff: 2f:13:0a:12:70:41:ae:40:59:14:20:2c:c2:9c:56: ba:0f:c5:c9:0a:a9:55:c2:fb:34:1e:7b:0d:2b:8c: a4:9c:33:15:05:ce:e8:15:80:5c:66:c9:0f:d1:0c: 5a:a3:ef:95:9d:90:2f:a8:2c:fc:dd:ce:6d:bd:90: 76:33:b0:30:74:94:c4:6c:fb:fb:aa:f9:32:44:d5: a0:c3:2e:f4:aa:b4:75:cd:20:cc:2f:07:45:6a:26: a9:95:6c:3f:09:25:8c:da:d2:b5:2f:a0:f2:da:99: 42:cb:21:ad:2b:e9:f4:b4:d6:49:82:b6:16:c1:d2: 4d:00:ea:fd:62:1c:57:11:e3:cc:19:e6:b3:ed:ff: d5:ea:25:07:4b:2b:6d:02:55:fe:4c:28:60:da:7e: 92:b7:22:65:5e:ee:c0:a2:cc:b7:ac:cf:75:3a:8a: 21:7d:d4:d1:a7:45:03:57:5f:fc:62:49:94:38:0c: db:ee:b5:7c:dc:07:d3:0b:5c:19:f9:c5:62:57:b7: 92:55:b4:3d:7a:d4:45:bd:d9:68:4e:83:2d:00:c4: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D7:65:B3:6D:B9:6A:8F:D1:06:E5:15:96:85:2E:22:06:9C:3E:83 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399359.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.101.0/24 109.65.151.0/24 109.65.199.0/24 Signature Algorithm: sha256WithRSAEncryption bd:ee:bf:84:03:24:d3:df:2d:b1:e8:8b:11:8b:67:7a:c2:33: 37:03:6d:69:4f:5c:1f:38:6c:32:f1:d2:ca:db:f4:f2:38:6d: 80:31:bf:9d:7e:41:aa:b9:c9:78:ca:44:f8:29:21:9b:6f:5a: a3:28:76:8d:0d:6c:7e:7a:29:f2:0f:8a:28:35:2d:a0:96:6d: 3e:06:8c:5a:83:8c:8f:fd:88:92:bb:ec:bb:b8:ce:de:54:a0: 7b:45:8e:55:b2:d9:1f:85:58:8d:8a:fe:5c:0e:78:07:49:91: f2:b4:f7:f8:a5:f9:d1:35:83:2e:3d:c1:bb:a2:e1:70:4e:f9: fb:b9:e0:26:4e:10:30:d7:b8:25:6a:c9:91:f8:0a:73:ea:e2: 62:53:c6:b1:42:0f:8f:94:28:6a:cb:02:4a:ef:3f:a5:ce:56: 17:ca:12:fc:7a:84:42:89:f6:29:ff:32:f2:7b:2e:f8:5a:91: a7:a6:21:11:f8:e4:1e:4b:9a:18:5e:69:0f:dd:12:73:c9:4c: 81:7c:42:4d:5a:40:40:5d:73:de:eb:60:67:29:c8:a4:47:da: ae:d4:fe:21:61:62:0c:ea:0c:6e:4a:68:4a:d1:11:d3:d1:04: a9:8c:19:3b:c2:82:5f:f7:0f:e0:b5:42:b1:10:bd:f4:4d:89: 7c:f5:ad:bf -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHn6TtABNERy2yEATgr8ThVXQJnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MDRaFw0yNzEwMDQwNjEzMDRaMDMxMTAvBgNV BAMTKDg0RDc2NUIzNkRCOTZBOEZEMTA2RTUxNTk2ODUyRTIyMDY5QzNFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLPFE+9xpdF0HJ0EoSDmOo+N5 ampKOaSuMoFr6vfp/DDHrhZXeYIlB0B3/y8TChJwQa5AWRQgLMKcVroPxckKqVXC +zQeew0rjKScMxUFzugVgFxmyQ/RDFqj75WdkC+oLPzdzm29kHYzsDB0lMRs+/uq +TJE1aDDLvSqtHXNIMwvB0VqJqmVbD8JJYza0rUvoPLamULLIa0r6fS01kmCthbB 0k0A6v1iHFcR48wZ5rPt/9XqJQdLK20CVf5MKGDafpK3ImVe7sCizLesz3U6iiF9 1NGnRQNXX/xiSZQ4DNvutXzcB9MLXBn5xWJXt5JVtD161EW92WhOgy0AxFsPAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhNdls225ao/RBuUVloUuIgacPoMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzOTkzNTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABtQWUDBABtQZcDBABtQccwDQYJKoZIhvcNAQELBQADggEBAL3uv4QD JNPfLbHoixGLZ3rCMzcDbWlPXB84bDLx0srb9PI4bYAxv51+Qaq5yXjKRPgpIZtv WqModo0NbH56KfIPiig1LaCWbT4GjFqDjI/9iJK77Lu4zt5UoHtFjlWy2R+FWI2K /lwOeAdJkfK09/il+dE1gy49wbui4XBO+fu54CZOEDDXuCVqyZH4CnPq4mJTxrFC D4+UKGrLAkrvP6XOVhfKEvx6hEKJ9in/MvJ7LvhakaemIRH45B5LmhheaQ/dEnPJ TIF8Qk1aQEBdc97rYGcpyKRH2q7U/iFhYgzqDG5KaErREdPRBKmMGTvCgl/3D+C1 QrEQvfRNiXz1rb8= -----END CERTIFICATE-----Generated at Thu Oct 8 16:47:05 2026 by rpki-client