
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: LGHksJb4eraCdqLJO3Y+J8T36npNaloUZCxs/CqMlaY=
Subject key identifier: AB:C0:03:3F:9D:ED:47:D9:60:24:AB:96:07:CB:54:BA:8D:8B:6C:F6
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 40378E9FA2A085CAA5837A0D5071807B18432D13
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402265.roa
Signing time: Mon 05 Oct 2026 06:13:48 +0000
ROA not before: Mon 05 Oct 2026 06:08:48 +0000
ROA not after: Mon 04 Oct 2027 06:13:48 +0000
asID: 402265
IP address blocks: 109.65.176.0/24 maxlen: 24
109.66.69.0/24 maxlen: 24
109.66.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:37:8e:9f:a2:a0:85:ca:a5:83:7a:0d:50:71:80:7b:18:43:2d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 5 06:08:48 2026 GMT
Not After : Oct 4 06:13:48 2027 GMT
Subject: CN=ABC0033F9DED47D96024AB9607CB54BA8D8B6CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:16:a0:49:03:c5:62:f9:95:ec:1d:04:a7:
33:22:3e:a7:5a:20:a1:9f:13:f2:ae:77:50:64:48:
a0:b8:cf:d0:77:c4:0d:9d:1d:74:84:f7:18:9e:b8:
3b:64:ff:47:c1:1f:1b:56:c5:b8:7c:15:c1:a7:74:
8d:ee:30:35:21:ba:09:2a:93:6f:69:65:69:1c:79:
17:1c:d9:dc:74:f6:1c:53:fc:f7:f0:3b:32:97:dc:
05:91:a8:32:e2:cd:28:a9:04:dd:52:f0:6e:4d:72:
35:93:e4:f8:af:cf:c0:27:94:5c:5e:3f:f9:49:dc:
ed:5c:da:46:4e:9c:9c:2f:a3:f5:77:bb:91:38:46:
49:f8:ce:55:b3:fc:c5:f0:81:0e:1f:4f:86:5c:4d:
b2:8e:a2:7f:ff:40:72:55:20:b6:28:75:61:49:9d:
01:6b:b7:84:a3:ca:07:e7:91:3a:93:ee:f4:b4:fe:
83:e1:87:24:b7:9c:3c:f2:17:26:fe:40:a7:98:a6:
5c:fa:ae:80:ae:52:1a:11:48:f1:ce:95:fc:42:1a:
82:46:ba:9d:7f:d8:8f:35:49:3e:94:85:c7:67:35:
49:d9:bc:06:5d:b6:a6:7c:7b:4c:4c:27:cd:3a:7d:
16:49:dd:9b:bc:6c:54:33:c3:38:5d:b2:05:54:03:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:03:3F:9D:ED:47:D9:60:24:AB:96:07:CB:54:BA:8D:8B:6C:F6
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.65.176.0/24
109.66.69.0/24
109.66.84.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1c:8f:1d:cb:56:38:88:3a:b7:82:67:86:c8:b5:7c:d3:b2:
2c:a3:0d:6a:18:d2:f0:4a:3d:07:4d:62:66:cd:61:48:d3:26:
fd:ed:33:5c:2b:2e:0d:69:ef:59:62:b9:4b:25:23:32:d6:38:
dd:23:39:b2:a1:56:f5:ea:f6:45:e8:54:cd:42:f6:25:a3:f5:
94:75:47:bd:72:d6:84:3a:31:cf:76:9f:e6:ee:85:a0:ad:ee:
b2:fa:3a:cb:28:27:61:2b:b9:28:3b:99:04:71:22:ab:88:2f:
5c:42:fe:76:45:22:9c:7c:78:53:6a:cb:f6:90:6f:cc:a7:49:
86:1b:34:ad:90:9b:b4:96:65:73:0f:3f:03:52:82:bc:39:e7:
e1:ba:0a:aa:68:41:df:2a:fe:4c:32:25:cd:95:70:fb:87:69:
cd:87:f0:42:26:61:ed:5a:33:50:38:8f:c7:ec:fd:3d:6d:4b:
71:60:0e:36:e7:4a:cb:2e:65:8a:f8:31:30:ba:5c:1d:58:54:
8e:8c:a7:83:59:3b:07:3f:13:cb:80:52:7a:80:d1:e4:b8:44:
0c:67:99:7f:f3:a1:c3:d7:bc:ff:e8:da:20:2c:b2:71:cd:62:
27:c5:56:6a:94:6b:b3:fb:b0:f5:98:4c:7c:27:e8:0f:2b:3f:
d9:07:69:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQDeOn6Kghcqlg3oNUHGAexhDLRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDhaFw0yNzEwMDQwNjEzNDhaMDMxMTAvBgNV
BAMTKEFCQzAwMzNGOURFRDQ3RDk2MDI0QUI5NjA3Q0I1NEJBOEQ4QjZDRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOBagSQPFYvmV7B0EpzMiPqda
IKGfE/Kud1BkSKC4z9B3xA2dHXSE9xieuDtk/0fBHxtWxbh8FcGndI3uMDUhugkq
k29pZWkceRcc2dx09hxT/PfwOzKX3AWRqDLizSipBN1S8G5NcjWT5Pivz8AnlFxe
P/lJ3O1c2kZOnJwvo/V3u5E4Rkn4zlWz/MXwgQ4fT4ZcTbKOon//QHJVILYodWFJ
nQFrt4SjygfnkTqT7vS0/oPhhyS3nDzyFyb+QKeYplz6roCuUhoRSPHOlfxCGoJG
up1/2I81ST6UhcdnNUnZvAZdtqZ8e0xMJ806fRZJ3Zu8bFQzwzhdsgVUA1rFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq8ADP53tR9lgJKuWB8tUuo2LbPYwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIyNjUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBABtQbADBABtQkUDBABtQlQwDQYJKoZIhvcNAQELBQADggEBAHccjx3L
VjiIOreCZ4bItXzTsiyjDWoY0vBKPQdNYmbNYUjTJv3tM1wrLg1p71liuUslIzLW
ON0jObKhVvXq9kXoVM1C9iWj9ZR1R71y1oQ6Mc92n+buhaCt7rL6OssoJ2EruSg7
mQRxIquIL1xC/nZFIpx8eFNqy/aQb8ynSYYbNK2Qm7SWZXMPPwNSgrw55+G6Cqpo
Qd8q/kwyJc2VcPuHac2H8EImYe1aM1A4j8fs/T1tS3FgDjbnSssuZYr4MTC6XB1Y
VI6Mp4NZOwc/E8uAUnqA0eS4RAxnmX/zocPXvP/o2iAssnHNYifFVmqUa7P7sPWY
THwn6A8rP9kHadc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:59 2026 by rpki-client