$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS40929.roa File: AS40929.roa (raw, json) Hash identifier: XvK+nqeCPuXD2d3sGy9L5yxGa8kpIUvgrOuE1A4ygig= Subject key identifier: BC:AB:B6:6F:4D:9F:86:69:2F:56:22:B5:C0:1C:35:A0:78:56:85:89 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 69375A7EF8A0F8A59F89BC80D178B52DABF233D6 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS40929.roa Signing time: Mon 05 Oct 2026 06:13:10 +0000 ROA not before: Mon 05 Oct 2026 06:08:10 +0000 ROA not after: Mon 04 Oct 2027 06:13:10 +0000 asID: 40929 IP address blocks: 109.66.108.0/24 maxlen: 24 109.66.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:37:5a:7e:f8:a0:f8:a5:9f:89:bc:80:d1:78:b5:2d:ab:f2:33:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:10 2026 GMT Not After : Oct 4 06:13:10 2027 GMT Subject: CN=BCABB66F4D9F86692F5622B5C01C35A078568589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:c2:86:3b:79:dd:0f:fe:2e:5a:96:df:d1: f9:26:3e:cf:88:00:c0:6a:8b:69:af:56:a8:13:29: 46:05:24:51:30:be:5f:95:0f:c3:41:b3:a4:4e:81: ed:f2:eb:30:65:91:de:e9:83:6a:ae:08:30:39:a7: c3:9e:b6:67:2b:ff:7e:2b:f4:7f:f9:fe:53:71:e2: 0f:a8:d1:0b:20:a7:f1:86:c3:c0:3b:09:9f:65:d2: f4:d5:22:47:39:6d:c7:84:4d:6a:34:3f:36:70:12: 10:e1:1a:c3:ed:88:1a:e3:e3:78:5a:a7:13:57:e8: 44:1f:58:a9:1c:93:39:ab:e3:c6:ad:5d:36:c1:d3: 7c:bd:1b:64:e8:b2:b9:8c:19:b1:1f:67:64:db:3b: a4:fd:3e:b0:58:e8:df:44:71:25:4b:a6:c5:7c:3b: 10:7b:24:f6:ae:9b:df:aa:b0:47:77:0b:32:ed:19: 4a:d9:f3:c4:0d:25:08:3c:ee:11:cc:dd:ba:94:f9: 29:ff:6f:65:fd:0f:49:6d:1a:c7:88:2f:9d:e2:ad: 87:7b:dc:8e:c1:aa:d5:c6:4b:90:9e:f8:ba:46:8f: 98:c3:5d:77:2c:ab:4d:51:10:cd:ee:b2:38:e3:72: 93:4b:35:d2:85:fb:86:57:b0:38:11:9c:2e:37:f5: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AB:B6:6F:4D:9F:86:69:2F:56:22:B5:C0:1C:35:A0:78:56:85:89 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS40929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.108.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:5b:f1:80:3b:94:15:2e:cd:22:a3:13:a8:95:dc:e1:6f:73: 9d:66:94:f7:f7:50:ea:df:6d:8b:eb:03:e1:69:98:56:2a:fe: 40:02:62:b5:9c:60:b3:b0:e6:4d:7c:77:73:27:8d:08:5f:57: ad:25:86:6f:f2:27:fe:43:b3:ea:6d:ca:82:c1:c0:8f:64:e3: 41:6b:1b:dd:54:93:a8:73:57:b2:3f:e9:87:83:b6:6f:37:09: 90:ae:7a:25:24:74:2b:e7:57:2f:7d:88:02:9d:b1:57:c7:67: 42:cd:db:e8:82:26:4e:88:01:e3:47:1f:ca:09:d0:57:91:ca: 82:e9:45:e2:a0:f3:11:68:80:24:d3:61:24:7a:9d:5a:c1:47: d8:24:92:5c:6f:25:e0:65:f1:f8:b3:4c:11:d7:5b:da:87:9f: f8:0b:1e:33:fd:6c:73:77:8b:d6:0d:b8:8d:26:ad:be:07:fa: 4f:78:57:3e:44:07:76:88:55:1a:85:b6:97:f8:a3:02:0c:fb: 3f:57:9b:f7:c2:90:71:10:5d:e2:f2:b1:a9:c2:6a:ac:9e:f5: 3b:08:38:2d:29:3f:b2:c0:38:69:ec:32:71:4c:ff:ea:0c:d5: 00:6d:9d:7e:af:85:cd:14:d2:6f:7d:43:1c:f6:c9:54:e4:d5: 21:d1:36:cb -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUaTdafvig+KWfibyA0Xi1LavyM9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MTBaFw0yNzEwMDQwNjEzMTBaMDMxMTAvBgNV BAMTKEJDQUJCNjZGNEQ5Rjg2NjkyRjU2MjJCNUMwMUMzNUEwNzg1Njg1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRcKGO3ndD/4uWpbf0fkmPs+I AMBqi2mvVqgTKUYFJFEwvl+VD8NBs6ROge3y6zBlkd7pg2quCDA5p8Oetmcr/34r 9H/5/lNx4g+o0Qsgp/GGw8A7CZ9l0vTVIkc5bceETWo0PzZwEhDhGsPtiBrj43ha pxNX6EQfWKkckzmr48atXTbB03y9G2TosrmMGbEfZ2TbO6T9PrBY6N9EcSVLpsV8 OxB7JPaum9+qsEd3CzLtGUrZ88QNJQg87hHM3bqU+Sn/b2X9D0ltGseIL53irYd7 3I7BqtXGS5Ce+LpGj5jDXXcsq01REM3usjjjcpNLNdKF+4ZXsDgRnC439YDNAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUvKu2b02fhmkvViK1wBw1oHhWhYkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDkyOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAW1CbDANBgkqhkiG9w0BAQsFAAOCAQEALlvxgDuUFS7NIqMTqJXc4W9z nWaU9/dQ6t9ti+sD4WmYVir+QAJitZxgs7DmTXx3cyeNCF9XrSWGb/In/kOz6m3K gsHAj2TjQWsb3VSTqHNXsj/ph4O2bzcJkK56JSR0K+dXL32IAp2xV8dnQs3b6IIm TogB40cfygnQV5HKgulF4qDzEWiAJNNhJHqdWsFH2CSSXG8l4GXx+LNMEddb2oef +AseM/1sc3eL1g24jSatvgf6T3hXPkQHdohVGoW2l/ijAgz7P1eb98KQcRBd4vKx qcJqrJ71Owg4LSk/ssA4aewycUz/6gzVAG2dfq+FzRTSb31DHPbJVOTVIdE2yw== -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:47 2026 by rpki-client