$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402306.roa File: AS402306.roa (raw, json) Hash identifier: erFdrMBpvILGfudPm+FLwygwlKFhglhPlmUZ84sxf+w= Subject key identifier: 51:E8:88:2B:F4:D4:4D:CC:2B:44:19:91:F7:84:A6:2C:36:4C:60:D1 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6A557311809529AECA33062912F7282503D9B1E9 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402306.roa Signing time: Mon 05 Oct 2026 06:13:46 +0000 ROA not before: Mon 05 Oct 2026 06:08:46 +0000 ROA not after: Mon 04 Oct 2027 06:13:46 +0000 asID: 402306 IP address blocks: 109.66.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 16:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:55:73:11:80:95:29:ae:ca:33:06:29:12:f7:28:25:03:d9:b1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:46 2026 GMT Not After : Oct 4 06:13:46 2027 GMT Subject: CN=51E8882BF4D44DCC2B441991F784A62C364C60D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:9a:a4:99:18:34:08:d9:72:0a:68:bd:1e: 54:04:d8:73:20:e5:12:ea:0f:90:9d:30:95:f3:78: 70:3c:5f:f9:91:56:7d:f2:3a:d4:f2:f8:26:cc:c9: 7b:41:4c:f1:26:03:08:15:5b:42:fa:15:b0:31:1e: 94:6c:16:39:4f:c2:fe:99:e9:36:c5:3a:e5:e1:84: fb:2b:58:22:0a:a6:91:19:06:19:bc:66:11:e6:5b: 20:c4:fe:53:64:59:27:de:64:b3:0f:1b:e3:29:ab: 7c:b8:95:0c:e0:c4:88:f6:d0:f9:c1:71:4a:de:e0: a3:0f:bc:6c:54:6d:af:b8:4a:d0:06:ad:76:a6:be: ae:82:06:9b:60:11:fa:b5:20:17:ce:4c:4f:b2:a3: c3:b0:98:7c:0e:11:76:fd:fa:d0:94:c6:4c:60:db: 3c:9e:ac:e4:46:b8:65:d9:80:4d:f6:73:28:2a:b9: 3e:3f:7b:59:f7:64:a2:16:94:3d:fe:d7:46:3c:19: 34:68:b9:aa:38:b1:37:94:6f:90:6d:87:e1:de:53: c4:e7:49:b4:9f:cc:e2:a1:ee:0e:53:28:07:15:35: a9:3c:72:bd:0a:f8:e6:02:90:22:73:71:89:29:bf: 10:b5:02:c8:7a:4b:eb:2d:e6:05:50:b9:98:f3:48: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E8:88:2B:F4:D4:4D:CC:2B:44:19:91:F7:84:A6:2C:36:4C:60:D1 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402306.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.8.0/22 Signature Algorithm: sha256WithRSAEncryption 10:43:99:97:6d:c3:e7:d7:75:11:84:41:e6:13:a6:a7:a0:8e: a2:07:e6:3d:16:fd:2b:44:35:10:34:a3:50:5d:f0:6e:74:20: d6:30:d7:18:31:d1:64:d3:f6:da:cf:8d:b4:00:4c:30:44:96: 73:1b:b6:f9:81:7c:e8:9d:b3:e2:c1:59:6a:99:83:97:ff:fc: 2f:c9:95:17:5e:d5:ff:25:2d:e3:e5:b8:73:59:39:0f:a6:7c: 18:ba:ea:95:84:d8:84:c4:4d:6b:9f:8e:58:a6:02:bd:67:cf: ee:38:23:11:b4:d0:05:b0:d7:3a:c0:66:54:c4:35:d1:6a:c9: 97:67:14:c6:a5:d8:ad:ff:57:ae:3e:5f:10:9e:c1:95:9a:45: d5:55:69:c8:fb:9e:b6:fc:7d:fb:66:1e:f4:09:5c:70:ba:59: 4d:5c:48:39:8f:59:90:1b:b9:32:2b:04:b0:54:c6:6a:d0:0a: 41:c2:29:bd:af:08:5c:df:3d:4b:24:05:78:df:22:f7:6d:3a: 8c:45:41:7b:f0:05:61:3f:c4:38:91:d4:01:0f:38:6d:3b:1b: 17:cc:37:25:60:cc:65:21:46:f0:94:54:72:fa:24:20:48:8b: dc:6f:14:14:14:be:e8:e3:76:dc:44:9e:53:16:29:b3:60:be: 8a:1c:f4:4f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUalVzEYCVKa7KMwYpEvcoJQPZsekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDZaFw0yNzEwMDQwNjEzNDZaMDMxMTAvBgNV BAMTKDUxRTg4ODJCRjRENDREQ0MyQjQ0MTk5MUY3ODRBNjJDMzY0QzYwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTpqkmRg0CNlyCmi9HlQE2HMg 5RLqD5CdMJXzeHA8X/mRVn3yOtTy+CbMyXtBTPEmAwgVW0L6FbAxHpRsFjlPwv6Z 6TbFOuXhhPsrWCIKppEZBhm8ZhHmWyDE/lNkWSfeZLMPG+Mpq3y4lQzgxIj20PnB cUre4KMPvGxUba+4StAGrXamvq6CBptgEfq1IBfOTE+yo8OwmHwOEXb9+tCUxkxg 2zyerORGuGXZgE32cygquT4/e1n3ZKIWlD3+10Y8GTRouao4sTeUb5Bth+HeU8Tn SbSfzOKh7g5TKAcVNak8cr0K+OYCkCJzcYkpvxC1Ash6S+st5gVQuZjzSO1LAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUUeiIK/TUTcwrRBmR94SmLDZMYNEwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIzMDYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJtQggwDQYJKoZIhvcNAQELBQADggEBABBDmZdtw+fXdRGEQeYTpqeg jqIH5j0W/StENRA0o1Bd8G50INYw1xgx0WTT9trPjbQATDBElnMbtvmBfOids+LB WWqZg5f//C/JlRde1f8lLePluHNZOQ+mfBi66pWE2ITETWufjlimAr1nz+44IxG0 0AWw1zrAZlTENdFqyZdnFMal2K3/V64+XxCewZWaRdVVacj7nrb8fftmHvQJXHC6 WU1cSDmPWZAbuTIrBLBUxmrQCkHCKb2vCFzfPUskBXjfIvdtOoxFQXvwBWE/xDiR 1AEPOG07GxfMNyVgzGUhRvCUVHL6JCBIi9xvFBQUvujjdtxEnlMWKbNgvooc9E8= -----END CERTIFICATE-----Generated at Thu Oct 8 07:19:42 2026 by rpki-client