$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402866.roa File: AS402866.roa (raw, json) Hash identifier: Slin0xKlPVAbmHU++VBldSTGvgl9Q+saskyw6atloEM= Subject key identifier: EE:C2:26:24:A8:7E:53:99:F1:F1:41:83:C0:94:D0:50:39:FF:B2:60 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 305874B1AC9DC2957971D12CC9C674983EAD0EC6 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402866.roa Signing time: Mon 05 Oct 2026 06:12:57 +0000 ROA not before: Mon 05 Oct 2026 06:07:57 +0000 ROA not after: Mon 04 Oct 2027 06:12:57 +0000 asID: 402866 IP address blocks: 109.64.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:58:74:b1:ac:9d:c2:95:79:71:d1:2c:c9:c6:74:98:3e:ad:0e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:07:57 2026 GMT Not After : Oct 4 06:12:57 2027 GMT Subject: CN=EEC22624A87E5399F1F14183C094D05039FFB260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:f4:55:6e:1c:6c:2a:ff:b9:c8:82:a1:42: 8b:73:37:d4:78:46:e1:4a:33:15:13:43:d1:e2:66: f6:26:36:5e:42:ce:cb:87:72:46:18:f3:a7:38:74: 1c:d4:02:ad:c9:b6:bd:c0:ab:b8:70:87:ad:9f:61: 12:92:56:75:1d:42:90:cf:19:cb:5e:2f:a5:ec:0a: 46:f8:3a:cf:87:0a:be:39:26:60:12:ee:3b:7c:29: ab:e5:c9:5a:cb:af:3a:9d:07:3f:43:2a:ef:e5:c6: f5:18:b5:8b:62:55:b2:e1:ad:a0:67:4a:f1:f5:58: e8:8e:e9:7e:95:23:a1:cd:9c:31:a1:4f:d8:1b:1d: 82:e4:a6:e4:17:cf:bb:2f:9e:2c:dd:1b:1b:a4:f4: d3:a1:5e:0e:87:ed:ee:8e:b4:0d:c2:bc:98:ee:c4: 9b:29:fb:cd:3a:51:c1:98:f9:2b:3c:37:62:d2:43: a8:2e:71:15:e4:39:a1:5f:7e:b2:9d:d8:d4:aa:d7: e8:cd:fc:c9:6f:94:9d:be:fc:4e:f2:a2:a6:e8:7b: 28:84:13:17:4a:d4:c3:f9:0c:8b:8d:7d:9c:1d:bf: 30:1a:f2:7b:9f:7f:05:df:d8:f5:4b:54:9b:3f:2c: ba:ac:1c:44:cd:59:1d:14:94:f3:ca:68:9c:ee:ae: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C2:26:24:A8:7E:53:99:F1:F1:41:83:C0:94:D0:50:39:FF:B2:60 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.159.0/24 Signature Algorithm: sha256WithRSAEncryption 71:72:5e:5c:dd:37:42:94:51:31:04:53:a6:94:87:1e:3f:a9: cf:21:12:c0:4b:fb:19:5f:42:f4:a3:8b:65:d7:44:24:5e:80: c5:b1:9d:e7:fd:03:75:42:55:17:46:40:e0:21:6b:f1:db:0e: 66:84:f3:c8:fb:11:d4:81:6d:56:1c:51:e3:07:f3:41:d9:bb: 19:1d:5b:21:97:f1:7b:ab:fb:81:06:38:9f:1c:14:50:65:dc: c6:2b:23:23:ba:b4:25:0c:15:c0:2b:01:13:21:fc:43:cf:9e: f4:d8:fc:33:af:9a:5e:d7:84:7f:8a:98:a4:95:31:ed:d7:d3: db:7d:20:a3:63:de:cc:d0:e8:a8:08:74:9b:ad:d4:e7:46:15: ce:99:80:bc:32:f2:8a:c1:60:2b:0a:38:a9:07:7b:29:3e:47: 31:19:00:ff:65:d6:f1:85:0b:f5:34:f1:59:b5:9e:80:bc:9a: bd:90:51:a6:a0:fc:92:32:d4:f7:ac:bf:9c:0c:53:9f:cd:a6: 81:b9:fc:be:16:49:26:38:83:6e:ac:71:46:cb:11:be:39:d7: a6:60:19:44:ba:ce:51:af:d3:ec:e0:6e:db:9f:a3:25:1e:1b: dd:e6:7a:29:69:46:a0:c9:50:86:26:35:6d:2b:f3:44:92:5b: 3a:0f:01:76 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUMFh0saydwpV5cdEsycZ0mD6tDsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA3NTdaFw0yNzEwMDQwNjEyNTdaMDMxMTAvBgNV BAMTKEVFQzIyNjI0QTg3RTUzOTlGMUYxNDE4M0MwOTREMDUwMzlGRkIyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSM/RVbhxsKv+5yIKhQotzN9R4 RuFKMxUTQ9HiZvYmNl5CzsuHckYY86c4dBzUAq3Jtr3Aq7hwh62fYRKSVnUdQpDP GcteL6XsCkb4Os+HCr45JmAS7jt8KavlyVrLrzqdBz9DKu/lxvUYtYtiVbLhraBn SvH1WOiO6X6VI6HNnDGhT9gbHYLkpuQXz7svnizdGxuk9NOhXg6H7e6OtA3CvJju xJsp+806UcGY+Ss8N2LSQ6gucRXkOaFffrKd2NSq1+jN/MlvlJ2+/E7yoqboeyiE ExdK1MP5DIuNfZwdvzAa8nuffwXf2PVLVJs/LLqsHETNWR0UlPPKaJzurkhFAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU7sImJKh+U5nx8UGDwJTQUDn/smAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDI4NjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQJ8wDQYJKoZIhvcNAQELBQADggEBAHFyXlzdN0KUUTEEU6aUhx4/ qc8hEsBL+xlfQvSji2XXRCRegMWxnef9A3VCVRdGQOAha/HbDmaE88j7EdSBbVYc UeMH80HZuxkdWyGX8Xur+4EGOJ8cFFBl3MYrIyO6tCUMFcArARMh/EPPnvTY/DOv ml7XhH+KmKSVMe3X09t9IKNj3szQ6KgIdJut1OdGFc6ZgLwy8orBYCsKOKkHeyk+ RzEZAP9l1vGFC/U08Vm1noC8mr2QUaag/JIy1Pesv5wMU5/NpoG5/L4WSSY4g26s cUbLEb4516ZgGUS6zlGv0+zgbtufoyUeG93meilpRqDJUIYmNW0r80SSWzoPAXY= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:43 2026 by rpki-client