$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS403157.roa File: AS403157.roa (raw, json) Hash identifier: R67AIZdmLfE3ZiarEk7YI9cVYHeynYE1eQXYc+b84aM= Subject key identifier: 1C:B7:E0:60:B6:44:7F:F1:BF:4B:6F:5B:38:13:FA:C1:E1:69:77:6E Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5F78110DD060B4F3474E280560AEF9FA3859753D Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS403157.roa Signing time: Sat 31 Oct 2026 20:26:21 +0000 ROA not before: Sat 31 Oct 2026 20:21:21 +0000 ROA not after: Sat 30 Oct 2027 20:26:21 +0000 asID: 403157 IP address blocks: 79.182.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 18:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:78:11:0d:d0:60:b4:f3:47:4e:28:05:60:ae:f9:fa:38:59:75:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 31 20:21:21 2026 GMT Not After : Oct 30 20:26:21 2027 GMT Subject: CN=1CB7E060B6447FF1BF4B6F5B3813FAC1E169776E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:9c:a2:16:4f:ca:42:3f:8b:30:b0:4e:2e: 0d:01:e1:f4:96:71:f6:0b:04:6a:10:ec:83:f1:cf: 1f:2e:3e:ca:84:ee:44:76:70:7c:c2:b3:41:cf:9f: b5:c2:29:07:c6:37:a7:6d:5d:49:ae:7e:a2:c3:0e: 46:a4:84:97:37:f2:78:f6:a0:45:02:6b:8f:0e:70: a8:c0:79:73:43:7b:62:0d:cd:77:f9:40:f4:86:fa: ff:64:80:d9:f3:25:3f:cf:c3:63:ca:39:48:87:14: f3:04:ef:6a:f3:3a:37:6e:36:08:51:fc:3a:c7:6c: fd:48:1c:af:e3:e4:8f:50:53:ae:f2:6e:34:56:22: 63:8f:3f:6c:2c:89:74:23:4b:b7:b6:36:c0:54:c9: 90:41:68:5a:15:84:12:1d:3f:fa:6d:27:b2:b4:d6: 29:00:4a:34:3e:30:f8:06:3b:54:10:e0:c1:7a:cb: f0:da:90:2c:18:68:ef:94:c9:bb:95:1f:2f:22:0f: cf:0d:20:c1:94:38:9a:94:f5:34:0a:cd:fb:5d:6a: 1e:43:fc:26:40:7c:b3:5d:6d:d3:a5:48:da:47:7e: fc:a6:3a:80:ad:21:f3:4b:7f:9e:d3:27:64:c6:9f: 05:c6:1e:4f:b7:7f:ef:90:a4:34:ed:7a:10:3f:41: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B7:E0:60:B6:44:7F:F1:BF:4B:6F:5B:38:13:FA:C1:E1:69:77:6E X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS403157.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.126.0/24 Signature Algorithm: sha256WithRSAEncryption 58:f9:06:9b:d7:60:e7:6e:7b:40:32:b6:a4:bf:ed:c7:c6:99: 2a:f3:16:ac:b8:6f:ed:ae:67:e5:35:5b:b3:f6:b4:ce:72:7d: 53:35:7e:b4:8f:71:4d:b7:d4:e1:28:b0:88:83:80:71:04:6e: 2c:7f:dd:88:d5:d2:33:60:c6:5f:c6:03:7a:57:45:18:32:c2: 49:86:2c:c9:19:52:0d:11:eb:e5:f6:9f:fe:f1:51:ed:cf:e3: 1a:48:0b:52:83:e7:1d:2f:85:49:c5:7c:63:32:27:97:a9:2b: 20:a0:16:19:60:d2:2e:3f:55:15:26:64:13:83:38:2e:66:e4: 81:ef:e1:c0:4b:65:ec:11:bc:65:ec:d8:f1:10:bf:65:7c:84: 32:30:0d:09:3d:96:b9:05:2d:16:33:2a:ba:f6:8b:d0:48:83: fb:04:94:cd:6f:5b:59:2e:12:5e:16:37:c2:9e:5e:51:4d:48: 27:16:31:e1:9c:dc:63:c7:1a:da:cd:50:e7:c1:95:61:8c:b0: e1:a1:b5:d1:14:f2:a3:41:c3:d7:5a:99:a4:39:98:6d:98:be: 52:1e:fc:42:ca:b9:5f:7c:5e:23:7f:24:9d:1d:15:ee:9f:b4: b6:d0:75:6b:d4:85:58:1a:06:6d:51:66:bf:fb:43:f0:72:44: 38:5f:1f:68 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUX3gRDdBgtPNHTigFYK75+jhZdT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMzEyMDIxMjFaFw0yNzEwMzAyMDI2MjFaMDMxMTAvBgNV BAMTKDFDQjdFMDYwQjY0NDdGRjFCRjRCNkY1QjM4MTNGQUMxRTE2OTc3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhJyiFk/KQj+LMLBOLg0B4fSW cfYLBGoQ7IPxzx8uPsqE7kR2cHzCs0HPn7XCKQfGN6dtXUmufqLDDkakhJc38nj2 oEUCa48OcKjAeXNDe2INzXf5QPSG+v9kgNnzJT/Pw2PKOUiHFPME72rzOjduNghR /DrHbP1IHK/j5I9QU67ybjRWImOPP2wsiXQjS7e2NsBUyZBBaFoVhBIdP/ptJ7K0 1ikASjQ+MPgGO1QQ4MF6y/DakCwYaO+UybuVHy8iD88NIMGUOJqU9TQKzftdah5D /CZAfLNdbdOlSNpHfvymOoCtIfNLf57TJ2TGnwXGHk+3f++QpDTtehA/QV7rAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUHLfgYLZEf/G/S29bOBP6weFpd24wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDMxNTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtn4wDQYJKoZIhvcNAQELBQADggEBAFj5BpvXYOdue0AytqS/7cfG mSrzFqy4b+2uZ+U1W7P2tM5yfVM1frSPcU231OEosIiDgHEEbix/3YjV0jNgxl/G A3pXRRgywkmGLMkZUg0R6+X2n/7xUe3P4xpIC1KD5x0vhUnFfGMyJ5epKyCgFhlg 0i4/VRUmZBODOC5m5IHv4cBLZewRvGXs2PEQv2V8hDIwDQk9lrkFLRYzKrr2i9BI g/sElM1vW1kuEl4WN8KeXlFNSCcWMeGc3GPHGtrNUOfBlWGMsOGhtdEU8qNBw9da maQ5mG2YvlIe/ELKuV98XiN/JJ0dFe6ftLbQdWvUhVgaBm1RZr/7Q/ByRDhfH2g= -----END CERTIFICATE-----Generated at Thu Nov 5 03:55:00 2026 by rpki-client