$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS57043.roa File: AS57043.roa (raw, json) Hash identifier: fsVqBUjFzax5sd4UHvvuMCF1AaVrVVH6Hd8X3lWV8Bw= Subject key identifier: DC:30:48:C4:5A:2B:94:7C:9B:E0:82:0C:86:7D:85:C4:59:BC:02:C4 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 71B0750518A7374CED35C31BF8ED39277BCBAB02 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS57043.roa Signing time: Mon 05 Oct 2026 06:13:34 +0000 ROA not before: Mon 05 Oct 2026 06:08:34 +0000 ROA not after: Mon 04 Oct 2027 06:13:34 +0000 asID: 57043 IP address blocks: 109.66.233.0/24 maxlen: 24 109.66.236.0/24 maxlen: 24 109.66.238.0/24 maxlen: 24 109.66.239.0/24 maxlen: 24 109.66.240.0/24 maxlen: 24 109.66.241.0/24 maxlen: 24 109.66.243.0/24 maxlen: 24 109.66.244.0/24 maxlen: 24 109.66.245.0/24 maxlen: 24 109.66.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b0:75:05:18:a7:37:4c:ed:35:c3:1b:f8:ed:39:27:7b:cb:ab:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:34 2026 GMT Not After : Oct 4 06:13:34 2027 GMT Subject: CN=DC3048C45A2B947C9BE0820C867D85C459BC02C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:e4:34:b1:55:9a:6d:2e:9c:e4:36:ba:d4: fb:e9:ef:82:f7:99:b1:f6:5c:d7:40:6e:00:74:a5: e5:8e:ae:6c:4c:2a:dd:2a:f7:7a:34:ea:fe:82:34: 1b:a3:e0:bc:93:ec:ff:17:47:0f:e7:7e:ea:07:e6: 11:77:9d:a7:ef:42:c0:01:99:19:af:9b:92:99:04: ad:49:69:01:48:eb:6a:bc:a9:73:df:6e:1f:a2:35: 8f:a0:ca:e9:cc:44:9a:6c:89:aa:a8:5f:16:7f:d2: 8c:2d:3c:ad:1a:2d:fe:8c:3e:ac:01:6a:e3:23:18: 87:de:12:ee:00:f4:a6:94:86:e1:ac:9c:15:66:a1: ce:40:fc:e1:61:f9:af:59:2a:e6:61:9c:70:cf:9f: 85:9d:a3:6a:06:c4:3c:c1:12:b3:a0:1e:6c:3f:27: 9c:f3:5e:d0:ba:6e:55:30:46:0e:d6:51:da:23:d7: 57:19:d5:0f:74:0e:0e:40:13:9a:96:75:85:99:2b: 1a:eb:90:cf:de:3a:29:5e:81:66:65:3a:17:85:d9: e2:b8:35:c0:3c:16:04:a2:6c:9e:65:dc:a0:dd:a8: af:9c:6a:1f:07:36:71:db:87:73:5b:d0:16:8d:51: 20:80:ed:4f:58:7d:47:44:c1:e6:71:c0:56:43:25: 64:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:48:C4:5A:2B:94:7C:9B:E0:82:0C:86:7D:85:C4:59:BC:02:C4 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS57043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.233.0/24 109.66.236.0/24 109.66.238.0-109.66.241.255 109.66.243.0-109.66.245.255 109.66.248.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:08:4c:0a:6a:2b:80:1b:7d:e8:ca:58:56:9e:fb:d0:35:c7: 19:3d:f6:5e:44:7f:d6:53:29:a9:eb:b1:36:b4:5b:01:36:90: b1:29:72:15:5c:84:df:be:a9:4c:44:65:73:e5:2e:4e:af:36: 36:e3:77:ef:b2:60:cb:5a:fe:be:77:57:d2:31:70:4f:6d:5b: 69:a6:fa:5e:cd:9d:5a:db:7a:75:53:30:1c:36:47:70:db:bc: 8b:f4:b9:96:a3:6f:a3:71:32:65:19:ed:07:4c:1f:eb:ec:4e: 2f:d3:0e:67:4f:3c:84:18:26:9a:7e:93:24:ff:81:51:54:1d: f4:46:8e:ba:2f:d7:87:71:1e:91:6e:9e:cd:78:72:3b:47:f9: f2:f0:9e:09:cd:65:c5:bb:1a:2e:da:6b:82:18:a5:84:e4:c9: 19:ff:78:6a:95:c6:95:1f:5f:aa:5d:da:b5:3f:3c:eb:7b:b4: 91:57:c2:88:fb:a8:44:6f:3a:a7:cd:b4:ea:7e:5d:cd:5c:86: 68:36:21:ae:b9:e4:bf:4e:b7:00:41:fc:45:23:57:b4:6b:e4: db:d8:ca:51:36:b5:f2:1c:81:16:08:85:09:cf:80:51:e9:df: 44:2b:dd:d2:03:33:a8:b2:84:34:82:f8:2b:c7:2d:bd:56:36: 48:5b:28:c6 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIUcbB1BRinN0ztNcMb+O05J3vLqwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MzRaFw0yNzEwMDQwNjEzMzRaMDMxMTAvBgNV BAMTKERDMzA0OEM0NUEyQjk0N0M5QkUwODIwQzg2N0Q4NUM0NTlCQzAyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DOQ0sVWabS6c5Da61Pvp74L3 mbH2XNdAbgB0peWOrmxMKt0q93o06v6CNBuj4LyT7P8XRw/nfuoH5hF3nafvQsAB mRmvm5KZBK1JaQFI62q8qXPfbh+iNY+gyunMRJpsiaqoXxZ/0owtPK0aLf6MPqwB auMjGIfeEu4A9KaUhuGsnBVmoc5A/OFh+a9ZKuZhnHDPn4Wdo2oGxDzBErOgHmw/ J5zzXtC6blUwRg7WUdoj11cZ1Q90Dg5AE5qWdYWZKxrrkM/eOilegWZlOheF2eK4 NcA8FgSibJ5l3KDdqK+cah8HNnHbh3Nb0BaNUSCA7U9YfUdEweZxwFZDJWTnAgMB AAGjggJsMIICaDAdBgNVHQ4EFgQU3DBIxForlHyb4IIMhn2FxFm8AsQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM1NzA0My5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4MDYwNAQC AAEwLgMEAG1C6QMEAG1C7DAMAwQBbULuAwQBbULwMAwDBABtQvMDBAFtQvQDBABt QvgwDQYJKoZIhvcNAQELBQADggEBADwITApqK4AbfejKWFae+9A1xxk99l5Ef9ZT KanrsTa0WwE2kLEpchVchN++qUxEZXPlLk6vNjbjd++yYMta/r53V9IxcE9tW2mm +l7NnVrbenVTMBw2R3DbvIv0uZajb6NxMmUZ7QdMH+vsTi/TDmdPPIQYJpp+kyT/ gVFUHfRGjrov14dxHpFuns14cjtH+fLwngnNZcW7Gi7aa4IYpYTkyRn/eGqVxpUf X6pd2rU/POt7tJFXwoj7qERvOqfNtOp+Xc1chmg2Ia655L9OtwBB/EUjV7Rr5NvY ylE2tfIcgRYIhQnPgFHp30Qr3dIDM6iyhDSC+CvHLb1WNkhbKMY= -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:30 2026 by rpki-client