$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS54203.roa File: AS54203.roa (raw, json) Hash identifier: N3ej2AKoB6xUi1UFN796TRgT0EfgLau9xcNb2UeC/vc= Subject key identifier: 3C:5B:99:B0:69:7B:13:C5:BC:9B:C7:C4:31:1E:D3:68:61:54:56:1D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 662E829BC8F952C0E2DF97BEBD6E50CB48001F53 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS54203.roa Signing time: Fri 30 Oct 2026 22:51:44 +0000 ROA not before: Fri 30 Oct 2026 22:46:44 +0000 ROA not after: Fri 29 Oct 2027 22:51:44 +0000 asID: 54203 IP address blocks: 109.64.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2e:82:9b:c8:f9:52:c0:e2:df:97:be:bd:6e:50:cb:48:00:1f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 30 22:46:44 2026 GMT Not After : Oct 29 22:51:44 2027 GMT Subject: CN=3C5B99B0697B13C5BC9BC7C4311ED3686154561D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:7b:88:ea:7d:8c:76:84:d5:68:76:7b:92: 61:11:3a:3a:1d:5f:0e:09:60:9f:8d:7a:6b:04:bc: 44:f8:63:de:27:cc:85:6f:7e:cf:2a:f2:66:5c:08: e1:4e:c0:2b:67:74:84:36:ec:00:34:e7:9f:4d:db: 1a:ab:d6:26:67:59:bc:cc:15:ec:7e:5c:9b:eb:91: cf:15:d8:92:54:dc:b4:34:77:d5:35:90:13:02:7f: 3e:4a:04:f4:f5:00:ed:70:7b:ba:12:84:5c:14:dc: f3:c5:8d:df:ac:02:74:67:71:9f:53:a0:3d:5e:4f: 1c:06:0f:a9:70:b5:f4:2a:ab:cd:c7:9b:ac:cb:08: 9d:0e:27:3b:d9:a0:3c:a5:e6:45:48:8a:20:71:54: 30:e9:4a:6b:2e:77:89:12:1d:8e:b6:a4:fb:95:d9: 45:0c:b1:f2:b3:92:0d:fe:8d:64:e2:cb:ed:4c:10: 43:65:f1:4a:d0:b4:57:8d:1c:7b:98:ae:96:57:b3: e2:1c:e2:f9:83:ba:9c:69:79:b3:13:44:e2:25:58: 87:cb:f9:e8:6e:fa:b9:61:57:86:5a:47:35:31:99: 3b:34:97:47:c7:91:c6:8f:f6:17:f3:3c:5b:15:ff: e5:1e:80:17:fb:f6:d8:dd:1e:ca:91:6b:d3:7e:fd: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5B:99:B0:69:7B:13:C5:BC:9B:C7:C4:31:1E:D3:68:61:54:56:1D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS54203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.141.0/24 Signature Algorithm: sha256WithRSAEncryption 80:64:2d:1d:6d:b3:04:2a:8c:e8:ff:b0:af:dd:cc:29:0f:fd: 1f:26:15:94:f4:af:4a:c9:0b:42:42:79:a8:e8:82:c2:41:b2: 47:ba:1a:03:e5:62:e2:d9:6b:16:f7:2c:f3:1b:a2:9b:7e:be: aa:0b:f1:34:5d:93:46:6d:a5:57:9e:69:2d:83:e0:2e:19:33: a3:32:96:28:e2:81:42:6f:2a:be:56:af:c4:cd:6e:19:76:38: 66:44:7b:b0:1f:de:45:25:f9:f6:5c:62:04:68:a6:c7:bb:10: 3c:ab:c4:58:88:36:26:b7:f9:24:b6:18:38:69:b2:fd:2f:03: 97:80:5c:5e:0d:e1:df:7c:67:b7:f1:3b:66:e3:e4:d9:13:dd: 67:d3:89:3f:3e:6e:71:b5:00:24:4a:17:32:80:91:71:cc:ed: 55:e6:11:79:8d:48:bb:1a:26:2f:12:7b:b7:e7:ec:1b:a1:ad: 7e:39:70:cf:94:e7:a4:c9:15:cf:d8:f7:ad:cc:15:a8:57:8e: 1f:4c:ea:af:2f:9b:8b:a7:d3:5b:d8:e3:ee:e2:cb:a1:44:d6: 1b:a0:3b:e4:28:6e:51:40:86:f3:0e:a2:c3:94:ca:1c:96:cc: 89:75:32:99:6a:64:57:bb:f3:ce:5a:5b:3e:c2:46:58:a5:58: ed:9b:74:e1 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUZi6Cm8j5UsDi35e+vW5Qy0gAH1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMzAyMjQ2NDRaFw0yNzEwMjkyMjUxNDRaMDMxMTAvBgNV BAMTKDNDNUI5OUIwNjk3QjEzQzVCQzlCQzdDNDMxMUVEMzY4NjE1NDU2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTnuI6n2MdoTVaHZ7kmEROjod Xw4JYJ+NemsEvET4Y94nzIVvfs8q8mZcCOFOwCtndIQ27AA0559N2xqr1iZnWbzM Fex+XJvrkc8V2JJU3LQ0d9U1kBMCfz5KBPT1AO1we7oShFwU3PPFjd+sAnRncZ9T oD1eTxwGD6lwtfQqq83Hm6zLCJ0OJzvZoDyl5kVIiiBxVDDpSmsud4kSHY62pPuV 2UUMsfKzkg3+jWTiy+1MEENl8UrQtFeNHHuYrpZXs+Ic4vmDupxpebMTROIlWIfL +ehu+rlhV4ZaRzUxmTs0l0fHkcaP9hfzPFsV/+UegBf79tjdHsqRa9N+/ZaJAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUPFuZsGl7E8W8m8fEMR7TaGFUVh0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM1NDIwMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG1AjTANBgkqhkiG9w0BAQsFAAOCAQEAgGQtHW2zBCqM6P+wr93MKQ/9 HyYVlPSvSskLQkJ5qOiCwkGyR7oaA+Vi4tlrFvcs8xuim36+qgvxNF2TRm2lV55p LYPgLhkzozKWKOKBQm8qvlavxM1uGXY4ZkR7sB/eRSX59lxiBGimx7sQPKvEWIg2 Jrf5JLYYOGmy/S8Dl4BcXg3h33xnt/E7ZuPk2RPdZ9OJPz5ucbUAJEoXMoCRcczt VeYReY1IuxomLxJ7t+fsG6Gtfjlwz5TnpMkVz9j3rcwVqFeOH0zqry+bi6fTW9jj 7uLLoUTWG6A75ChuUUCG8w6iw5TKHJbMiXUymWpkV7vzzlpbPsJGWKVY7Zt04Q== -----END CERTIFICATE-----Generated at Thu Nov 5 16:44:01 2026 by rpki-client