$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: o6DdQ+o/MXVMvJR11WJNI6tvHFr4Su1XDIS3xgbgtaE= Subject key identifier: 78:F1:E1:93:D7:76:E4:7E:F6:8D:AF:CC:E8:2D:EA:5E:A8:11:AF:6F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7C8C8EEBA3710B50F3524F6BE94B3E3479D96DFB Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS40676.roa Signing time: Tue 13 Oct 2026 03:44:30 +0000 ROA not before: Tue 13 Oct 2026 03:39:30 +0000 ROA not after: Tue 12 Oct 2027 03:44:30 +0000 asID: 40676 IP address blocks: 79.182.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 05:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:8e:eb:a3:71:0b:50:f3:52:4f:6b:e9:4b:3e:34:79:d9:6d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 13 03:39:30 2026 GMT Not After : Oct 12 03:44:30 2027 GMT Subject: CN=78F1E193D776E47EF68DAFCCE82DEA5EA811AF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:65:9b:1f:4c:4f:86:00:83:a6:2a:35:f2: 76:13:ef:2d:3d:b9:89:ff:f0:d5:d1:c0:60:f4:8a: c6:04:4c:1f:ee:24:ba:e6:7d:9c:d1:50:2b:75:dd: 0a:82:a3:45:24:2f:3a:0f:f9:f2:c4:f4:4d:70:3c: 47:b1:cd:b3:73:ec:31:fa:3b:70:3d:a1:1a:55:b6: c0:88:35:32:ba:7f:db:5b:f0:59:8c:5e:d1:5e:1b: ec:0e:a0:cf:f3:99:4b:37:e5:28:a6:e1:4a:36:d5: 8f:45:c4:d6:ad:7b:3a:8e:e9:7f:d6:e8:57:65:49: 6c:4e:05:2a:9e:6a:b4:6e:ef:1f:de:28:64:66:b9: f0:50:1c:ce:00:2d:fa:2f:05:35:55:53:3f:3e:28: 3e:74:04:62:27:ac:fc:38:eb:e9:81:06:16:ff:db: fc:04:28:1d:26:3e:87:17:a2:09:0a:4d:bb:ef:3a: 18:ad:a2:61:fb:6d:d7:8d:ab:49:cd:f9:77:35:18: 57:87:ae:f3:1b:d1:e1:02:60:43:fe:5b:d9:a9:ad: d1:0e:94:93:ca:34:e1:bb:77:61:e3:83:92:6c:ef: 3f:02:76:0d:ae:60:19:4e:b7:52:2b:8b:cc:bd:6b: e7:7a:26:bf:14:f3:06:68:23:99:58:e8:5a:f0:f6: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F1:E1:93:D7:76:E4:7E:F6:8D:AF:CC:E8:2D:EA:5E:A8:11:AF:6F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.31.0/24 Signature Algorithm: sha256WithRSAEncryption c8:62:83:a8:39:a6:6c:c8:cc:4c:31:07:da:90:9c:89:66:82: 0e:34:12:47:71:2c:2e:1c:4c:92:e4:af:dd:12:11:ba:28:f9: d5:0c:fc:44:37:5d:96:2b:dd:c6:b2:d3:89:af:69:a3:a9:2f: 9a:50:e3:d2:84:43:b4:14:83:27:c1:6e:38:1f:e6:54:31:d3: 41:fd:6a:07:1f:0f:2f:97:5f:14:fc:69:5f:da:b2:b9:3c:fe: 12:95:dd:7b:06:4d:27:cc:dd:39:76:a0:df:7a:04:83:ca:88: 95:5f:16:f2:7b:78:64:eb:fb:f5:11:17:6d:d7:02:45:32:06: ce:63:7f:96:11:61:0a:6c:8e:cf:3b:9c:47:7d:b5:0e:b1:97: 60:ac:68:8f:33:84:90:97:4e:ec:06:97:cb:2b:e6:45:88:27: 9e:80:93:06:b9:98:cd:d7:1d:2a:e3:8a:48:20:78:26:e0:98: f0:08:7b:40:f6:42:70:2f:b9:2d:d0:b2:ca:00:06:fa:f7:7c: c4:10:d6:2a:23:5f:0f:13:34:af:ba:8f:28:ac:7f:69:59:6b: 9b:cc:51:48:02:6b:9e:c5:4e:14:40:a4:d5:4d:6f:3e:3a:3f: ed:47:98:66:98:d0:4f:f9:98:64:00:5e:ba:57:7e:9d:b8:4b: ee:56:94:f3 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUfIyO66NxC1DzUk9r6Us+NHnZbfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTMwMzM5MzBaFw0yNzEwMTIwMzQ0MzBaMDMxMTAvBgNV BAMTKDc4RjFFMTkzRDc3NkU0N0VGNjhEQUZDQ0U4MkRFQTVFQTgxMUFGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg22WbH0xPhgCDpio18nYT7y09 uYn/8NXRwGD0isYETB/uJLrmfZzRUCt13QqCo0UkLzoP+fLE9E1wPEexzbNz7DH6 O3A9oRpVtsCINTK6f9tb8FmMXtFeG+wOoM/zmUs35Sim4Uo21Y9FxNatezqO6X/W 6FdlSWxOBSqearRu7x/eKGRmufBQHM4ALfovBTVVUz8+KD50BGInrPw46+mBBhb/ 2/wEKB0mPocXogkKTbvvOhitomH7bdeNq0nN+Xc1GFeHrvMb0eECYEP+W9mprdEO lJPKNOG7d2Hjg5Js7z8Cdg2uYBlOt1Iri8y9a+d6Jr8U8wZoI5lY6Frw9kRLAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUePHhk9d25H72ja/M6C3qXqgRr28wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDY3Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAE+2HzANBgkqhkiG9w0BAQsFAAOCAQEAyGKDqDmmbMjMTDEH2pCciWaC DjQSR3EsLhxMkuSv3RIRuij51Qz8RDddlivdxrLTia9po6kvmlDj0oRDtBSDJ8Fu OB/mVDHTQf1qBx8PL5dfFPxpX9qyuTz+EpXdewZNJ8zdOXag33oEg8qIlV8W8nt4 ZOv79REXbdcCRTIGzmN/lhFhCmyOzzucR321DrGXYKxojzOEkJdO7AaXyyvmRYgn noCTBrmYzdcdKuOKSCB4JuCY8Ah7QPZCcC+5LdCyygAG+vd8xBDWKiNfDxM0r7qP KKx/aVlrm8xRSAJrnsVOFECk1U1vPjo/7UeYZpjQT/mYZABeuld+nbhL7laU8w== -----END CERTIFICATE-----Generated at Wed Oct 21 17:09:46 2026 by rpki-client