$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402857.roa File: AS402857.roa (raw, json) Hash identifier: HTjdrzfllVswpg5uz4kxoHCuo7TcIUAczOxJN4FZJAE= Subject key identifier: 71:B4:8B:B1:6E:D0:65:2C:49:75:58:82:92:FD:BF:A8:7B:BC:9B:0A Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0A2653449A9DCCCED425AF38EF468781975B9299 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402857.roa Signing time: Mon 05 Oct 2026 06:12:57 +0000 ROA not before: Mon 05 Oct 2026 06:07:57 +0000 ROA not after: Mon 04 Oct 2027 06:12:57 +0000 asID: 402857 IP address blocks: 109.64.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 16:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:26:53:44:9a:9d:cc:ce:d4:25:af:38:ef:46:87:81:97:5b:92:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:57 2026 GMT Not After : Oct 4 06:12:57 2027 GMT Subject: CN=71B48BB16ED0652C4975588292FDBFA87BBC9B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:b9:93:ff:6d:50:90:9d:6c:b7:f5:4d:51: 9c:57:fe:66:05:70:da:49:95:f4:b9:50:38:a5:d7: a1:17:fe:7b:cf:6d:1b:87:f7:8a:05:eb:7e:97:cb: 92:ad:e3:a7:5c:e8:1d:23:da:47:9b:a2:00:2c:f6: 37:1c:e6:73:37:e3:39:94:c7:1b:ac:10:6d:01:2d: 5d:51:d7:88:a5:27:ce:3a:ee:23:d9:6f:da:0c:11: a9:f9:1c:47:e0:4d:5c:19:eb:19:01:95:df:69:cf: 46:80:f1:6c:a5:a5:a7:79:93:56:f8:e8:67:62:45: 1c:32:a5:40:ef:0b:c0:7c:b8:c7:9e:d6:18:00:ba: c5:f7:e3:10:71:a2:b5:b3:71:fc:0d:15:02:89:fb: b3:06:75:85:a9:66:5c:15:02:1b:a1:66:82:fb:09: 59:17:da:11:5a:2c:02:dc:c4:9b:ea:f7:d5:8f:10: e8:07:5d:91:bd:51:90:e6:a6:3f:23:00:ed:cd:76: 4c:1b:6e:2e:08:8a:87:6a:44:31:60:56:a5:59:fb: cf:10:b5:aa:19:2c:df:77:18:64:ac:5c:4b:36:34: 20:9f:0f:ad:61:5c:a0:77:9e:db:e9:22:44:eb:72: 9d:46:0d:70:12:78:8c:27:51:fe:aa:ba:0d:b4:2f: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B4:8B:B1:6E:D0:65:2C:49:75:58:82:92:FD:BF:A8:7B:BC:9B:0A X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402857.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.136.0/24 Signature Algorithm: sha256WithRSAEncryption d9:8b:0b:dc:ef:a4:4e:66:32:ec:47:99:12:5e:e6:d8:5e:b8: af:26:4e:bb:ba:e8:0d:3a:40:e5:72:d2:f0:a4:5a:24:15:ce: b2:17:76:c5:ac:4c:30:62:cb:bc:d7:c2:b9:c1:09:58:e8:ff: 88:85:b8:8b:2e:75:af:64:0c:3f:3e:03:b5:cf:d3:53:af:6b: e9:1d:98:9c:2d:f6:d9:96:40:2c:13:e0:9c:8e:aa:22:51:93: 77:b3:3b:70:ef:49:fb:7e:e0:c7:9e:1f:26:94:ac:d4:53:9d: 6e:6d:d5:50:2a:af:76:1a:b2:3a:53:cc:1e:25:f9:2d:51:90: 2d:f6:c7:1e:b3:8c:c4:5f:73:17:85:a6:c5:ff:ca:be:5f:4e: d9:a2:78:f4:c3:1c:50:d5:fd:00:80:d7:d4:08:db:77:05:38: 55:b3:27:19:1e:fe:67:b5:a0:76:ec:b2:e6:4a:7b:fe:e5:65: 01:2f:c4:9d:b7:80:e8:c2:57:66:31:6d:43:1c:04:98:b5:3f: ae:a2:d1:31:7e:21:04:2d:68:db:dd:2c:07:40:31:6a:58:8b: 5b:19:58:7b:f0:f1:ac:02:91:68:7e:c5:74:0c:8a:3a:01:49: 58:b9:85:f3:50:ee:20:36:75:cc:13:94:7f:10:c6:65:ae:87: c9:d6:49:c5 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUCiZTRJqdzM7UJa8470aHgZdbkpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3NTdaFw0yNzEwMDQwNjEyNTdaMDMxMTAvBgNV BAMTKDcxQjQ4QkIxNkVEMDY1MkM0OTc1NTg4MjkyRkRCRkE4N0JCQzlCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+7mT/21QkJ1st/VNUZxX/mYF cNpJlfS5UDil16EX/nvPbRuH94oF636Xy5Kt46dc6B0j2kebogAs9jcc5nM34zmU xxusEG0BLV1R14ilJ8467iPZb9oMEan5HEfgTVwZ6xkBld9pz0aA8Wylpad5k1b4 6GdiRRwypUDvC8B8uMee1hgAusX34xBxorWzcfwNFQKJ+7MGdYWpZlwVAhuhZoL7 CVkX2hFaLALcxJvq99WPEOgHXZG9UZDmpj8jAO3Ndkwbbi4IiodqRDFgVqVZ+88Q taoZLN93GGSsXEs2NCCfD61hXKB3ntvpIkTrcp1GDXASeIwnUf6qug20L3/7AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUcbSLsW7QZSxJdViCkv2/qHu8mwowHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDI4NTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQIgwDQYJKoZIhvcNAQELBQADggEBANmLC9zvpE5mMuxHmRJe5the uK8mTru66A06QOVy0vCkWiQVzrIXdsWsTDBiy7zXwrnBCVjo/4iFuIsuda9kDD8+ A7XP01Ova+kdmJwt9tmWQCwT4JyOqiJRk3ezO3DvSft+4MeeHyaUrNRTnW5t1VAq r3YasjpTzB4l+S1RkC32xx6zjMRfcxeFpsX/yr5fTtmiePTDHFDV/QCA19QI23cF OFWzJxke/me1oHbssuZKe/7lZQEvxJ23gOjCV2YxbUMcBJi1P66i0TF+IQQtaNvd LAdAMWpYi1sZWHvw8awCkWh+xXQMijoBSVi5hfNQ7iA2dcwTlH8QxmWuh8nWScU= -----END CERTIFICATE-----Generated at Thu Oct 8 07:19:40 2026 by rpki-client