$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS401362.roa File: AS401362.roa (raw, json) Hash identifier: QhBQp61Mn2cYbVC07wPb+R3ajw2liUXWL1OW4n4Aa20= Subject key identifier: 22:42:8E:E0:78:B9:21:C1:9C:8A:F1:C3:FC:3D:C9:4A:57:7E:B3:41 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 78CFBD4F36D0A66DB47F03FB35E9A64440B340B0 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS401362.roa Signing time: Mon 05 Oct 2026 06:12:55 +0000 ROA not before: Mon 05 Oct 2026 06:07:55 +0000 ROA not after: Mon 04 Oct 2027 06:12:55 +0000 asID: 401362 IP address blocks: 109.64.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cf:bd:4f:36:d0:a6:6d:b4:7f:03:fb:35:e9:a6:44:40:b3:40:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:55 2026 GMT Not After : Oct 4 06:12:55 2027 GMT Subject: CN=22428EE078B921C19C8AF1C3FC3DC94A577EB341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:98:ca:50:02:c2:c9:3d:5f:a0:e3:23:6b: 90:73:81:ba:50:c1:41:d4:b5:29:02:39:24:35:bc: 0c:54:6c:ce:2e:4e:3e:e6:bb:ed:23:10:8b:e4:db: 52:59:f2:28:cc:8e:74:11:00:23:d3:f7:c6:4c:9b: 0e:e0:6f:fb:a1:c5:a8:01:cb:97:3e:3b:23:4e:d1: c8:f7:e3:5e:b9:61:c1:cf:26:01:80:d6:8f:30:e5: ed:04:82:e4:e0:56:d3:7f:ef:d0:07:4b:d3:f8:f4: 65:d9:69:ec:69:34:1f:96:18:e6:27:88:25:d3:96: 51:e8:f3:b4:af:f4:5a:03:e4:50:25:d0:b5:b8:de: 4a:17:63:e0:34:0f:86:50:d9:61:d0:ff:b4:de:94: 42:cf:35:17:80:a3:36:b1:74:6c:46:74:d7:bb:e2: 4a:a3:5b:97:51:8c:7b:cc:0e:03:2c:a0:88:7c:fa: 47:26:4b:3d:d9:2e:d1:2a:b5:97:19:fc:af:20:96: 7f:01:43:b4:ce:e9:ac:bc:fd:2c:d2:40:87:5b:6c: 53:eb:ab:61:d7:78:a7:7b:fc:20:5c:65:10:f3:13: 01:34:aa:ce:75:21:3a:cc:1e:ea:55:20:b5:62:d7: 56:b6:35:2c:fc:b1:6f:62:b4:f4:2c:d0:ec:23:34: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:8E:E0:78:B9:21:C1:9C:8A:F1:C3:FC:3D:C9:4A:57:7E:B3:41 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS401362.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.0.0/24 Signature Algorithm: sha256WithRSAEncryption 16:41:dc:cf:cd:d6:31:09:c9:35:95:56:ed:91:90:9f:b1:38: 29:76:bf:4f:8d:1b:9e:bb:4e:fb:a3:66:86:59:fd:74:33:61: 00:ba:25:39:c8:a0:25:1d:e6:e0:6a:72:27:46:8a:a9:38:f0: b0:27:e0:19:fc:74:c8:a9:fe:3a:ce:cd:56:39:37:33:cf:14: 38:3a:41:dc:2f:7c:92:6e:64:96:f2:3a:3f:21:04:c6:15:73: bd:da:ea:0c:45:f2:9b:75:54:15:38:6b:dd:9b:2c:65:a0:8e: d5:22:91:24:91:73:e5:f4:32:6b:69:4e:20:82:2a:7a:06:e4: de:ac:ca:f2:61:07:15:60:53:26:b7:b4:3c:b7:6a:77:57:4a: 05:eb:99:55:a1:f6:ae:60:50:ed:4d:82:cb:9f:1f:55:ce:11: 6b:aa:bc:47:1a:27:e6:33:40:52:6c:94:cd:a7:3c:e3:f5:da: 10:86:21:fa:8a:20:b9:55:c2:24:ab:57:72:5d:90:1f:3b:34: a7:cf:87:7b:f2:77:aa:0f:e8:22:54:cf:69:6c:77:5f:59:44: 4c:3d:1e:d8:c5:92:22:41:55:2c:75:28:da:9b:e9:89:a3:55: a3:22:08:92:84:24:e8:67:99:e6:a6:95:9c:ac:30:71:93:32: cd:d7:7e:f9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUeM+9TzbQpm20fwP7NemmRECzQLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3NTVaFw0yNzEwMDQwNjEyNTVaMDMxMTAvBgNV BAMTKDIyNDI4RUUwNzhCOTIxQzE5QzhBRjFDM0ZDM0RDOTRBNTc3RUIzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKhJjKUALCyT1foOMja5BzgbpQ wUHUtSkCOSQ1vAxUbM4uTj7mu+0jEIvk21JZ8ijMjnQRACPT98ZMmw7gb/uhxagB y5c+OyNO0cj34165YcHPJgGA1o8w5e0EguTgVtN/79AHS9P49GXZaexpNB+WGOYn iCXTllHo87Sv9FoD5FAl0LW43koXY+A0D4ZQ2WHQ/7TelELPNReAozaxdGxGdNe7 4kqjW5dRjHvMDgMsoIh8+kcmSz3ZLtEqtZcZ/K8gln8BQ7TO6ay8/SzSQIdbbFPr q2HXeKd7/CBcZRDzEwE0qs51ITrMHupVILVi11a2NSz8sW9itPQs0OwjNHSTAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUIkKO4Hi5IcGcivHD/D3JSld+s0EwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDEzNjIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQAAwDQYJKoZIhvcNAQELBQADggEBABZB3M/N1jEJyTWVVu2RkJ+x OCl2v0+NG567TvujZoZZ/XQzYQC6JTnIoCUd5uBqcidGiqk48LAn4Bn8dMip/jrO zVY5NzPPFDg6QdwvfJJuZJbyOj8hBMYVc73a6gxF8pt1VBU4a92bLGWgjtUikSSR c+X0MmtpTiCCKnoG5N6syvJhBxVgUya3tDy3andXSgXrmVWh9q5gUO1NgsufH1XO EWuqvEcaJ+YzQFJslM2nPOP12hCGIfqKILlVwiSrV3JdkB87NKfPh3vyd6oP6CJU z2lsd19ZREw9HtjFkiJBVSx1KNqb6YmjVaMiCJKEJOhnmeamlZysMHGTMs3Xfvk= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:21 2026 by rpki-client