$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402288.roa File: AS402288.roa (raw, json) Hash identifier: L8gmc9fKPBK9JmQ+HALuU/eqwroRBaZxboK3hFj2TGw= Subject key identifier: AD:56:1C:EE:A5:AB:3A:49:EF:DC:C5:B2:88:0C:D3:AA:70:6A:E1:24 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3A0B984F95F8BFE9641EFEDDFB4A90B9C193A753 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402288.roa Signing time: Mon 05 Oct 2026 06:13:48 +0000 ROA not before: Mon 05 Oct 2026 06:08:48 +0000 ROA not after: Mon 04 Oct 2027 06:13:48 +0000 asID: 402288 IP address blocks: 109.66.68.0/24 maxlen: 24 109.66.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0b:98:4f:95:f8:bf:e9:64:1e:fe:dd:fb:4a:90:b9:c1:93:a7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:48 2026 GMT Not After : Oct 4 06:13:48 2027 GMT Subject: CN=AD561CEEA5AB3A49EFDCC5B2880CD3AA706AE124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:84:05:6b:21:64:85:61:3f:97:5e:4e:8c: 04:e4:19:47:ae:d6:49:15:77:5d:92:3a:7b:86:d9: 77:6a:b4:64:ca:eb:6b:8f:31:b2:de:ae:8c:84:3b: e4:dd:70:6e:1e:1e:05:f4:05:87:33:03:31:e0:1b: 2f:87:b9:e4:b1:e4:df:63:ce:cb:01:14:40:7f:f2: 0a:c7:62:f4:dd:4b:2b:df:2e:d9:de:d1:f7:3f:07: 88:d9:35:b8:8f:17:ee:fc:ac:e8:a9:11:4e:dd:7e: 9b:b2:46:e4:f2:91:0c:b2:c5:d8:02:12:4f:1b:ee: 96:a3:15:72:98:9e:ab:ba:88:6f:0a:f5:49:db:81: 74:a1:fb:7a:46:8a:3a:95:a1:a4:87:e2:95:22:75: 32:4d:9b:4e:16:e8:38:ca:18:8d:09:fa:32:fb:46: e8:fe:35:42:d6:66:36:42:b7:f2:ee:d0:07:0b:f4: 86:96:27:7c:b0:5e:ab:26:79:62:f8:79:ad:33:ca: 4f:95:a2:39:a8:7c:5e:69:16:c2:b8:40:c4:9f:d8: 85:75:a2:6d:39:9d:e9:1a:fe:85:2c:11:34:66:0e: e2:74:76:67:9e:03:c6:41:67:26:a7:26:77:6e:f3: 71:23:3e:5f:b0:7e:34:0c:a1:0c:60:b6:e3:ea:12: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:56:1C:EE:A5:AB:3A:49:EF:DC:C5:B2:88:0C:D3:AA:70:6A:E1:24 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402288.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.68.0/24 109.66.87.0/24 Signature Algorithm: sha256WithRSAEncryption ba:65:50:41:76:4c:0d:ac:ce:56:17:94:2e:ba:f1:4d:72:3a: 83:c1:3f:b9:6a:93:94:35:a6:d4:af:00:53:27:ff:a4:bc:2b: 5d:5c:bc:1e:76:63:3d:63:81:33:52:bf:2a:ee:60:3a:16:f6: 5d:3c:a4:22:78:b9:d5:5c:ab:8e:56:67:7e:5c:d2:02:50:27: 12:68:2f:a9:3b:17:ae:90:bb:77:1e:5e:1c:f5:58:20:fb:7a: 93:c5:16:64:c1:ed:1b:01:37:bb:1d:61:81:f0:d5:25:f4:2e: 5a:27:67:7f:cb:9a:b5:a3:fd:dd:15:f2:de:ac:db:25:3b:e1: 2b:07:09:74:9e:24:ae:6a:93:c1:aa:11:50:be:f4:87:4e:ff: 89:9a:ba:aa:a7:88:28:fd:aa:c2:5b:03:30:c0:b1:a9:43:0a: ed:e0:b4:aa:b9:db:19:35:3d:fa:ee:50:bb:92:cb:58:f1:bf: 71:c2:c1:54:60:7e:ac:29:57:37:62:94:e9:8c:4a:d7:6c:41: c1:13:a7:5a:bc:46:32:3e:b7:a9:d7:c8:0a:ce:c0:92:bf:3c: 9b:79:d4:d3:8e:02:7a:a8:03:33:ff:08:67:5f:20:6a:bc:14: 89:29:37:f0:5b:d9:6f:2c:b7:70:8a:10:5e:50:a3:8f:ae:67: 86:9b:7d:ed -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUOguYT5X4v+lkHv7d+0qQucGTp1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDhaFw0yNzEwMDQwNjEzNDhaMDMxMTAvBgNV BAMTKEFENTYxQ0VFQTVBQjNBNDlFRkRDQzVCMjg4MENEM0FBNzA2QUUxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcYQFayFkhWE/l15OjATkGUeu 1kkVd12SOnuG2XdqtGTK62uPMbLeroyEO+TdcG4eHgX0BYczAzHgGy+HueSx5N9j zssBFEB/8grHYvTdSyvfLtne0fc/B4jZNbiPF+78rOipEU7dfpuyRuTykQyyxdgC Ek8b7pajFXKYnqu6iG8K9UnbgXSh+3pGijqVoaSH4pUidTJNm04W6DjKGI0J+jL7 Ruj+NULWZjZCt/Lu0AcL9IaWJ3ywXqsmeWL4ea0zyk+VojmofF5pFsK4QMSf2IV1 om05neka/oUsETRmDuJ0dmeeA8ZBZyanJndu83EjPl+wfjQMoQxgtuPqEtxBAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUrVYc7qWrOknv3MWyiAzTqnBq4SQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIyODgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABtQkQDBABtQlcwDQYJKoZIhvcNAQELBQADggEBALplUEF2TA2szlYX lC668U1yOoPBP7lqk5Q1ptSvAFMn/6S8K11cvB52Yz1jgTNSvyruYDoW9l08pCJ4 udVcq45WZ35c0gJQJxJoL6k7F66Qu3ceXhz1WCD7epPFFmTB7RsBN7sdYYHw1SX0 LlonZ3/LmrWj/d0V8t6s2yU74SsHCXSeJK5qk8GqEVC+9IdO/4mauqqniCj9qsJb AzDAsalDCu3gtKq52xk1PfruULuSy1jxv3HCwVRgfqwpVzdilOmMStdsQcETp1q8 RjI+t6nXyArOwJK/PJt51NOOAnqoAzP/CGdfIGq8FIkpN/Bb2W8st3CKEF5Qo4+u Z4abfe0= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:56 2026 by rpki-client