$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS47172.roa File: AS47172.roa (raw, json) Hash identifier: 4aJn3MpRUHY5Dt0oNUQJmeLF6Pbp7Ckg7pTAKtvxJfk= Subject key identifier: 4C:91:50:21:0B:0B:6E:CB:AD:5C:D6:D1:97:43:18:ED:48:B0:69:45 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0639AFA58F18325E5EEFB739374DC88BE9D524C5 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS47172.roa Signing time: Mon 05 Oct 2026 06:13:42 +0000 ROA not before: Mon 05 Oct 2026 06:08:42 +0000 ROA not after: Mon 04 Oct 2027 06:13:42 +0000 asID: 47172 IP address blocks: 109.66.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:39:af:a5:8f:18:32:5e:5e:ef:b7:39:37:4d:c8:8b:e9:d5:24:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:42 2026 GMT Not After : Oct 4 06:13:42 2027 GMT Subject: CN=4C9150210B0B6ECBAD5CD6D1974318ED48B06945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b4:50:b4:75:92:a2:d7:00:55:57:30:6c:ad: 43:ea:64:0f:3a:fc:a3:b2:14:32:2e:5f:b8:0f:f2: 83:83:fb:0a:c4:3f:3a:b7:a7:24:a7:6f:0a:93:b2: 55:d9:22:35:b2:9b:84:06:87:c0:fa:27:02:5e:4a: fb:1d:78:13:91:03:6e:35:49:ad:0b:70:bb:1a:c8: 1b:b6:50:b5:c1:17:0e:3d:ef:d9:f4:cf:45:c5:db: 1d:49:9d:57:1e:8f:51:b9:c9:14:c9:bf:cb:c5:cf: d6:89:b0:00:4d:b5:3f:5b:8c:86:a9:4d:23:69:58: 9b:e8:de:1f:9d:32:51:7a:a2:1f:4f:96:ff:64:9f: 45:a2:e1:6d:69:81:3b:de:c1:34:d9:be:a0:42:f9: 00:10:31:82:b9:38:bb:a3:de:75:fb:24:ed:2f:15: 79:b3:28:cc:e7:5d:d3:87:54:3f:d9:05:44:4a:04: 87:22:e3:fa:31:2f:6f:af:47:b8:b8:f5:f0:18:dd: 82:57:1b:c7:71:52:b9:f5:ea:5b:6d:d1:0e:1d:cd: 23:89:54:70:d0:f6:97:e8:43:ba:4d:23:b3:ad:bd: f6:9e:32:d6:2d:46:53:0d:8c:6d:8d:a8:ee:98:93: 28:02:b9:71:df:26:92:56:1c:4f:ae:56:b2:8f:a1: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:91:50:21:0B:0B:6E:CB:AD:5C:D6:D1:97:43:18:ED:48:B0:69:45 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS47172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.56.0/24 Signature Algorithm: sha256WithRSAEncryption 56:83:74:5c:37:72:82:c5:e4:d9:29:0e:a1:4a:b8:b3:d3:86: 92:1c:69:2c:21:b3:5d:00:70:2c:e4:22:fa:eb:b0:50:33:42: e3:2a:23:f0:af:5b:8e:77:e4:e1:24:dc:5f:0d:2a:05:a5:13: 4b:6c:b4:53:72:af:71:7a:45:db:b8:33:4a:9e:18:f7:f3:78: 0f:47:95:c0:bd:55:23:4a:70:52:fa:53:42:58:00:4a:fc:15: c9:99:16:ed:97:bb:fd:15:f3:c4:c1:8f:24:dd:48:6f:83:35: 90:f8:13:9d:71:60:90:a3:24:da:a0:b9:f6:70:8a:2e:43:02: 6e:3c:ee:0d:31:ce:45:87:40:5e:55:aa:dd:12:a2:f4:29:30: ec:b4:02:97:7b:9e:53:20:28:5a:17:f2:95:4a:02:ed:0a:0b: 00:43:27:87:b4:5a:09:fd:72:e5:14:4d:1f:6b:bf:69:3a:d5: 3b:51:a7:e7:22:a2:9d:73:67:4f:36:50:9a:b6:38:ae:25:69: 43:af:b9:f4:39:4f:8f:5a:ae:54:78:71:1e:a9:94:e4:d0:4e: d8:79:56:10:c0:a1:23:b7:49:31:ef:cb:11:c3:a1:1d:45:4e: 1f:a5:28:72:07:ae:4f:15:4e:a3:17:26:42:ee:67:3d:dd:d8: a3:3d:d6:85 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUBjmvpY8YMl5e77c5N03Ii+nVJMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4NDJaFw0yNzEwMDQwNjEzNDJaMDMxMTAvBgNV BAMTKDRDOTE1MDIxMEIwQjZFQ0JBRDVDRDZEMTk3NDMxOEVENDhCMDY5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDktFC0dZKi1wBVVzBsrUPqZA86 /KOyFDIuX7gP8oOD+wrEPzq3pySnbwqTslXZIjWym4QGh8D6JwJeSvsdeBORA241 Sa0LcLsayBu2ULXBFw4979n0z0XF2x1JnVcej1G5yRTJv8vFz9aJsABNtT9bjIap TSNpWJvo3h+dMlF6oh9Plv9kn0Wi4W1pgTvewTTZvqBC+QAQMYK5OLuj3nX7JO0v FXmzKMznXdOHVD/ZBURKBIci4/oxL2+vR7i49fAY3YJXG8dxUrn16ltt0Q4dzSOJ VHDQ9pfoQ7pNI7OtvfaeMtYtRlMNjG2NqO6YkygCuXHfJpJWHE+uVrKPodS5AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUTJFQIQsLbsutXNbRl0MY7UiwaUUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0NzE3Mi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG1CODANBgkqhkiG9w0BAQsFAAOCAQEAVoN0XDdygsXk2SkOoUq4s9OG khxpLCGzXQBwLOQi+uuwUDNC4yoj8K9bjnfk4STcXw0qBaUTS2y0U3KvcXpF27gz Sp4Y9/N4D0eVwL1VI0pwUvpTQlgASvwVyZkW7Ze7/RXzxMGPJN1Ib4M1kPgTnXFg kKMk2qC59nCKLkMCbjzuDTHORYdAXlWq3RKi9Ckw7LQCl3ueUyAoWhfylUoC7QoL AEMnh7RaCf1y5RRNH2u/aTrVO1Gn5yKinXNnTzZQmrY4riVpQ6+59DlPj1quVHhx HqmU5NBO2HlWEMChI7dJMe/LEcOhHUVOH6UocgeuTxVOoxcmQu5nPd3Yoz3WhQ== -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:02 2026 by rpki-client