$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402215.roa File: AS402215.roa (raw, json) Hash identifier: pem6Id/ONgNDbTuBCZ85wNu8gVQRWgUM7GEt2jAt1KA= Subject key identifier: E5:B2:EC:12:7D:41:E2:02:31:70:5E:58:D8:0B:E0:34:A5:77:12:CC Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0915C7B70605EC72A16A29E59AA72DB66ACFA717 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402215.roa Signing time: Mon 05 Oct 2026 06:12:55 +0000 ROA not before: Mon 05 Oct 2026 06:07:55 +0000 ROA not after: Mon 04 Oct 2027 06:12:55 +0000 asID: 402215 IP address blocks: 109.64.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:15:c7:b7:06:05:ec:72:a1:6a:29:e5:9a:a7:2d:b6:6a:cf:a7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:55 2026 GMT Not After : Oct 4 06:12:55 2027 GMT Subject: CN=E5B2EC127D41E20231705E58D80BE034A57712CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:a8:c7:f2:0c:b3:3a:5c:62:05:fb:e9:bb: 3c:14:7e:bb:ef:8a:65:cb:20:b2:68:02:05:39:35: ed:9f:ea:c4:df:0a:6b:3c:ab:4c:8a:5d:ac:c0:9e: c2:54:14:a4:7d:e0:ec:70:80:34:38:eb:58:66:f6: f5:c7:21:75:15:d6:2a:ba:2d:c3:ae:be:de:40:c2: 88:ad:f6:5a:57:77:9e:7b:5e:c9:1c:f4:0b:9c:86: 69:de:2d:ca:e4:36:79:7d:11:a3:da:0a:45:58:9f: 3b:9d:28:9b:e7:e2:c8:16:9c:d7:94:fa:4d:74:c2: dd:94:90:90:e8:e6:28:bb:3c:dc:9a:ff:b7:f5:20: 85:b7:9a:37:4f:10:23:40:7a:60:e5:cd:98:1e:40: d1:ca:8c:41:89:d2:02:85:d3:a9:49:11:1c:7c:1d: 45:25:ce:a4:af:be:40:76:33:3b:05:9f:85:40:86: 94:f7:32:7d:c9:10:40:f5:a6:a7:e4:6e:73:98:d4: 2f:77:72:17:3c:fd:e7:ca:e3:cd:aa:11:39:1f:f3: 61:dc:65:10:68:ff:32:05:28:de:ab:45:8e:36:15: 6a:fc:6f:9a:23:2f:56:13:05:ef:9a:8d:88:9d:45: ff:48:73:c9:89:0e:19:2b:ec:ce:27:bc:59:68:bb: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B2:EC:12:7D:41:E2:02:31:70:5E:58:D8:0B:E0:34:A5:77:12:CC X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402215.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.0.0/24 Signature Algorithm: sha256WithRSAEncryption bd:ff:28:1a:2a:16:42:86:e5:10:ff:97:da:d5:b7:24:e3:8f: a5:bf:1a:9d:67:f8:2d:e7:2c:b3:8c:39:49:d7:19:2b:2d:66: 37:14:9d:47:dc:d9:1f:f7:e2:8e:1f:97:4f:58:dd:19:06:05: d9:82:bf:53:73:3e:a7:eb:be:dc:39:a3:cd:51:9f:15:11:57: 38:21:d5:10:8b:56:9f:c5:ae:79:dd:24:11:29:e2:13:fd:bb: e5:bc:ea:1c:7c:c5:63:57:ad:f7:25:03:cb:87:d7:ea:31:3a: f7:2f:a0:de:e8:cf:12:da:78:78:18:65:30:17:73:1b:38:54: 0c:7b:53:79:e6:fd:f8:21:e5:77:0f:18:8f:80:da:1d:89:f1: 19:87:70:67:ef:8c:6e:08:28:d1:90:89:ff:a6:2f:c1:79:ec: a0:fb:17:fa:c9:93:98:90:f3:e5:cc:57:80:08:20:1d:4c:b7: 3e:2a:f1:d5:93:1e:72:18:ab:93:34:73:8f:2a:30:9e:e4:c4: 3b:8d:48:7b:cc:8c:66:a9:7c:61:ee:41:7f:e3:5a:3a:6f:a8: 7e:04:79:a0:3d:98:cf:18:01:b5:5d:f4:79:b1:f3:cd:21:30: 2a:1c:a1:ec:05:8d:b2:d4:61:37:fe:e9:e2:d9:78:b9:69:45: 13:e6:16:ce -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUCRXHtwYF7HKhainlmqcttmrPpxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3NTVaFw0yNzEwMDQwNjEyNTVaMDMxMTAvBgNV BAMTKEU1QjJFQzEyN0Q0MUUyMDIzMTcwNUU1OEQ4MEJFMDM0QTU3NzEyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUWKjH8gyzOlxiBfvpuzwUfrvv imXLILJoAgU5Ne2f6sTfCms8q0yKXazAnsJUFKR94OxwgDQ461hm9vXHIXUV1iq6 LcOuvt5Awoit9lpXd557Xskc9AuchmneLcrkNnl9EaPaCkVYnzudKJvn4sgWnNeU +k10wt2UkJDo5ii7PNya/7f1IIW3mjdPECNAemDlzZgeQNHKjEGJ0gKF06lJERx8 HUUlzqSvvkB2MzsFn4VAhpT3Mn3JEED1pqfkbnOY1C93chc8/efK482qETkf82Hc ZRBo/zIFKN6rRY42FWr8b5ojL1YTBe+ajYidRf9Ic8mJDhkr7M4nvFlou8hHAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU5bLsEn1B4gIxcF5Y2AvgNKV3EswwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIyMTUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQAAwDQYJKoZIhvcNAQELBQADggEBAL3/KBoqFkKG5RD/l9rVtyTj j6W/Gp1n+C3nLLOMOUnXGSstZjcUnUfc2R/34o4fl09Y3RkGBdmCv1NzPqfrvtw5 o81RnxURVzgh1RCLVp/FrnndJBEp4hP9u+W86hx8xWNXrfclA8uH1+oxOvcvoN7o zxLaeHgYZTAXcxs4VAx7U3nm/fgh5XcPGI+A2h2J8RmHcGfvjG4IKNGQif+mL8F5 7KD7F/rJk5iQ8+XMV4AIIB1Mtz4q8dWTHnIYq5M0c48qMJ7kxDuNSHvMjGapfGHu QX/jWjpvqH4EeaA9mM8YAbVd9Hmx880hMCocoewFjbLUYTf+6eLZeLlpRRPmFs4= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:51 2026 by rpki-client