$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402976.roa File: AS402976.roa (raw, json) Hash identifier: q4LJHkUPZ0tpf869NkmEPRizlF74Js44TL3+d4EGJJs= Subject key identifier: 7E:E3:D2:33:A0:5D:A8:0E:CC:97:FA:BD:09:83:AD:ED:C8:E4:98:50 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 111D09C8A8EFD9B967E4497EE0377457AD4FC17D Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402976.roa Signing time: Mon 05 Oct 2026 06:13:40 +0000 ROA not before: Mon 05 Oct 2026 06:08:40 +0000 ROA not after: Mon 04 Oct 2027 06:13:40 +0000 asID: 402976 IP address blocks: 109.66.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:09:c8:a8:ef:d9:b9:67:e4:49:7e:e0:37:74:57:ad:4f:c1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:40 2026 GMT Not After : Oct 4 06:13:40 2027 GMT Subject: CN=7EE3D233A05DA80ECC97FABD0983ADEDC8E49850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:3b:eb:d9:de:7a:bc:5b:bf:36:cb:7b:4e: bc:b0:a0:03:45:37:d1:2e:a6:1e:ed:f5:94:0c:14: 87:3d:53:73:97:5b:5a:8e:28:ac:d4:59:c2:89:c7: 13:44:55:40:0f:e6:2e:5d:1d:04:77:87:8e:ad:ca: 78:09:be:4a:d7:46:b4:fa:8b:eb:52:9d:db:51:3f: 74:d1:41:d1:3f:02:56:03:a1:dd:13:29:72:51:58: a1:c7:82:bf:8a:d6:e5:c8:5e:d3:08:bc:17:83:10: 9d:e7:9c:e4:16:dc:8f:fc:28:ef:5c:b2:4a:5b:36: 61:95:f5:ac:53:c7:6d:3b:7d:fd:f2:bd:3f:7f:81: 09:6b:29:1a:e0:32:5d:c6:ce:a5:3a:bb:dd:8d:43: c1:d2:72:55:09:ba:69:49:d4:77:a8:a3:63:6a:fa: fb:f8:bd:b0:e0:14:1d:35:8f:58:65:89:ad:ef:49: 9b:0f:ed:ca:50:b6:b6:3a:de:10:78:32:20:cd:7b: 73:98:32:e7:41:5d:50:87:0c:f5:97:cb:98:63:e3: 83:0b:3f:7d:34:67:bd:7f:7e:36:fe:54:5b:12:3e: eb:62:8c:89:eb:a3:16:48:f9:cc:10:57:49:fb:4e: df:33:a3:bd:4e:69:c2:9f:cc:5c:86:98:42:94:0d: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:D2:33:A0:5D:A8:0E:CC:97:FA:BD:09:83:AD:ED:C8:E4:98:50 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.44.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ec:5c:51:74:c6:3a:78:48:92:aa:3e:78:6d:ac:a0:ea:4d: dc:0c:59:78:d3:3e:1e:3b:20:69:f5:44:c7:f3:f7:78:14:ea: 58:72:0e:42:36:9d:00:05:52:80:f5:2c:50:e7:b0:da:14:b2: b7:bc:48:25:52:c4:23:dc:45:51:e4:6c:7f:9f:6f:a1:a4:2b: a6:d0:e6:48:c3:c6:be:ec:79:7d:02:c8:86:bd:e0:e0:d3:f2: fe:c7:90:f4:f7:fe:34:81:f4:48:82:e9:c5:b0:f2:b6:6c:1b: d2:af:db:a5:72:3c:a1:d7:7a:2c:bb:8b:cb:55:cb:67:ab:dc: 06:d9:11:ce:13:12:71:78:28:2f:d5:fe:0e:80:37:4d:23:ca: 01:1d:81:d3:f3:f0:73:5a:f4:6d:ae:ce:96:9f:f8:d4:82:15: 73:3e:36:1f:3b:83:45:23:b7:17:a7:84:36:49:17:05:27:fd: 04:a1:36:03:90:ec:11:5d:fd:2d:5a:99:fb:fb:6c:5f:5b:54: 04:9f:88:63:51:71:8c:1f:e3:85:76:b1:7e:98:18:2e:cc:6a: 85:49:e6:5e:b0:73:b5:a9:7c:02:f0:c5:c0:32:08:37:68:31: f4:4d:2c:83:c7:33:a6:1c:3e:95:7b:e5:c7:ea:f5:2d:f0:23: d7:79:0d:e2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUER0JyKjv2bln5El+4Dd0V61PwX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDBaFw0yNzEwMDQwNjEzNDBaMDMxMTAvBgNV BAMTKDdFRTNEMjMzQTA1REE4MEVDQzk3RkFCRDA5ODNBREVEQzhFNDk4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtTvr2d56vFu/Nst7TrywoANF N9Euph7t9ZQMFIc9U3OXW1qOKKzUWcKJxxNEVUAP5i5dHQR3h46tyngJvkrXRrT6 i+tSndtRP3TRQdE/AlYDod0TKXJRWKHHgr+K1uXIXtMIvBeDEJ3nnOQW3I/8KO9c skpbNmGV9axTx207ff3yvT9/gQlrKRrgMl3GzqU6u92NQ8HSclUJumlJ1Heoo2Nq +vv4vbDgFB01j1hlia3vSZsP7cpQtrY63hB4MiDNe3OYMudBXVCHDPWXy5hj44ML P300Z71/fjb+VFsSPutijInroxZI+cwQV0n7Tt8zo71OacKfzFyGmEKUDXMhAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUfuPSM6BdqA7Ml/q9CYOt7cjkmFAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDI5NzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQiwwDQYJKoZIhvcNAQELBQADggEBACLsXFF0xjp4SJKqPnhtrKDq TdwMWXjTPh47IGn1RMfz93gU6lhyDkI2nQAFUoD1LFDnsNoUsre8SCVSxCPcRVHk bH+fb6GkK6bQ5kjDxr7seX0CyIa94ODT8v7HkPT3/jSB9EiC6cWw8rZsG9Kv26Vy PKHXeiy7i8tVy2er3AbZEc4TEnF4KC/V/g6AN00jygEdgdPz8HNa9G2uzpaf+NSC FXM+Nh87g0UjtxenhDZJFwUn/QShNgOQ7BFd/S1amfv7bF9bVASfiGNRcYwf44V2 sX6YGC7MaoVJ5l6wc7WpfALwxcAyCDdoMfRNLIPHM6YcPpV75cfq9S3wI9d5DeI= -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:54 2026 by rpki-client