$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS41171.roa File: AS41171.roa (raw, json) Hash identifier: H89lt/8CzT4M41CsLErm+QCu1qNNZb91TBB+uDgBEE0= Subject key identifier: AA:EE:47:AA:5D:83:BA:49:F7:30:3D:B7:C4:87:C1:B7:96:B8:F8:3C Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 430158F580F5A4AF3E33397987DF933BAD61FF19 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS41171.roa Signing time: Mon 05 Oct 2026 06:13:30 +0000 ROA not before: Mon 05 Oct 2026 06:08:30 +0000 ROA not after: Mon 04 Oct 2027 06:13:30 +0000 asID: 41171 IP address blocks: 109.66.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:01:58:f5:80:f5:a4:af:3e:33:39:79:87:df:93:3b:ad:61:ff:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:30 2026 GMT Not After : Oct 4 06:13:30 2027 GMT Subject: CN=AAEE47AA5D83BA49F7303DB7C487C1B796B8F83C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:2f:e4:41:1a:e0:19:c4:79:1d:ed:1e:97: 8f:1f:e6:97:50:e9:2f:36:80:ce:09:49:62:4a:d0: 2e:18:68:23:6e:fc:4e:e4:56:0b:39:35:c8:a4:2e: 4e:d3:8a:17:de:b1:09:57:bb:c4:c2:7f:4d:de:a4: 01:55:67:1a:50:17:f0:93:e4:e6:a1:25:cc:2a:aa: d1:e1:08:6d:a4:b4:a9:0c:78:66:d0:96:6a:67:af: de:b5:57:42:32:05:71:d3:d4:ef:9b:98:3d:28:75: c0:09:55:6a:8b:5d:4d:68:77:d2:03:b3:18:ad:e1: 90:12:55:59:4d:4c:b3:01:f9:45:da:20:22:8e:5a: 7d:5e:73:4d:92:58:95:73:67:91:57:1f:a7:66:33: 7a:32:27:95:2c:7b:92:3d:14:e2:fe:20:c7:6d:89: ee:b2:42:48:32:cb:57:a4:28:2c:65:7d:8e:97:f9: 4f:ce:8a:36:47:d7:80:1c:a3:31:3c:96:fb:a0:a3: 22:df:2a:08:1f:f2:f1:1c:4d:72:c9:37:d0:14:cc: 95:6d:1e:94:08:e0:1c:37:2d:08:da:3c:7d:62:9a: c9:26:ba:9c:44:0f:bd:89:28:a5:48:34:1a:0c:3a: 15:62:ed:a4:8b:de:95:dd:9f:88:9c:5d:d7:df:2d: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:47:AA:5D:83:BA:49:F7:30:3D:B7:C4:87:C1:B7:96:B8:F8:3C X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS41171.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.226.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:6f:86:50:6b:74:38:9a:64:f9:4d:4c:18:eb:ad:f7:21:57: 00:b0:47:1e:cf:50:f9:9e:6d:f5:e4:3f:8c:64:17:ce:cb:18: d3:85:56:eb:ef:34:33:83:d1:4e:87:76:02:cd:e4:90:9c:4f: 9b:89:17:24:47:57:f5:d1:2d:de:a8:ae:32:26:c2:a0:f4:30: f7:8c:37:10:a2:e4:e3:20:fa:cb:cd:c8:ff:f1:7c:f5:0e:df: 61:31:fb:81:70:40:b3:94:a4:6e:c1:d9:e2:15:57:14:ad:8f: 2a:a0:23:54:5e:ee:23:ae:7b:b2:0d:a8:62:0f:d1:c2:bc:fb: 8c:83:1c:a4:c4:75:54:a0:22:fb:de:3f:86:75:fa:a7:76:bf: 62:63:63:c5:3b:bf:9a:e1:60:02:e8:50:c9:c4:c7:45:ec:c0: 91:e7:45:01:5a:08:a3:75:34:aa:c0:4e:f1:e8:28:87:2c:69: ff:4b:11:23:16:9f:76:dc:b8:70:ef:82:53:36:89:85:d8:70: ea:f8:44:ef:d0:14:39:9d:0e:6c:6f:98:a7:9d:01:1c:a4:f1: 7c:a7:9a:82:c9:94:34:90:90:a8:b4:e4:97:bd:79:b6:eb:a1: 56:41:1c:11:23:ef:04:67:d8:f9:4f:93:08:ae:f9:f3:32:08: ee:2f:87:e2 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQwFY9YD1pK8+Mzl5h9+TO61h/xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzBaFw0yNzEwMDQwNjEzMzBaMDMxMTAvBgNV BAMTKEFBRUU0N0FBNUQ4M0JBNDlGNzMwM0RCN0M0ODdDMUI3OTZCOEY4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdi/kQRrgGcR5He0el48f5pdQ 6S82gM4JSWJK0C4YaCNu/E7kVgs5NcikLk7TihfesQlXu8TCf03epAFVZxpQF/CT 5OahJcwqqtHhCG2ktKkMeGbQlmpnr961V0IyBXHT1O+bmD0odcAJVWqLXU1od9ID sxit4ZASVVlNTLMB+UXaICKOWn1ec02SWJVzZ5FXH6dmM3oyJ5Use5I9FOL+IMdt ie6yQkgyy1ekKCxlfY6X+U/OijZH14AcozE8lvugoyLfKggf8vEcTXLJN9AUzJVt HpQI4Bw3LQjaPH1imskmupxED72JKKVINBoMOhVi7aSL3pXdn4icXdffLfMrAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUqu5Hql2Dukn3MD23xIfBt5a4+DwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MTE3MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAW1C4jANBgkqhkiG9w0BAQsFAAOCAQEALm+GUGt0OJpk+U1MGOut9yFX ALBHHs9Q+Z5t9eQ/jGQXzssY04VW6+80M4PRTod2As3kkJxPm4kXJEdX9dEt3qiu MibCoPQw94w3EKLk4yD6y83I//F89Q7fYTH7gXBAs5SkbsHZ4hVXFK2PKqAjVF7u I657sg2oYg/Rwrz7jIMcpMR1VKAi+94/hnX6p3a/YmNjxTu/muFgAuhQycTHRezA kedFAVoIo3U0qsBO8egohyxp/0sRIxafdty4cO+CUzaJhdhw6vhE79AUOZ0ObG+Y p50BHKTxfKeagsmUNJCQqLTkl715tuuhVkEcESPvBGfY+U+TCK758zII7i+H4g== -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:58 2026 by rpki-client