$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS62651.roa File: AS62651.roa (raw, json) Hash identifier: V3JwkIx/hGRlP3trUFfyajYB+gKEbQGhsbEj3f8gSOI= Subject key identifier: A2:E2:57:C3:A9:7B:03:FC:A6:77:4A:14:17:B8:BF:A2:35:3D:01:E0 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6B30D7E417974CF7ED3381F823988844C046D8EB Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS62651.roa Signing time: Fri 30 Oct 2026 22:53:57 +0000 ROA not before: Fri 30 Oct 2026 22:48:57 +0000 ROA not after: Fri 29 Oct 2027 22:53:57 +0000 asID: 62651 IP address blocks: 79.176.77.0/24 maxlen: 24 79.176.87.0/24 maxlen: 24 79.176.99.0/24 maxlen: 24 109.64.127.0/24 maxlen: 24 109.64.137.0/24 maxlen: 24 109.64.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:30:d7:e4:17:97:4c:f7:ed:33:81:f8:23:98:88:44:c0:46:d8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 30 22:48:57 2026 GMT Not After : Oct 29 22:53:57 2027 GMT Subject: CN=A2E257C3A97B03FCA6774A1417B8BFA2353D01E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:f1:91:dc:6b:9a:7e:cf:a9:7d:11:42:71: e4:fe:df:ef:42:c6:05:ee:c4:b0:3f:ba:a5:91:cb: 0d:30:d9:1d:3a:ae:d7:ac:a9:3b:27:e4:93:8b:a2: 6a:20:72:11:92:3f:a1:80:60:83:8a:8b:5a:78:e6: 19:71:2c:8f:a2:67:72:9d:7e:6d:cf:4e:0c:1d:44: ee:bf:70:6f:7a:e6:37:99:04:5a:e3:e8:50:29:e2: d7:67:66:4e:b3:89:e2:07:eb:84:24:52:ce:c4:92: d1:44:8c:06:12:26:09:17:a9:f2:0f:5c:ea:83:b6: 53:9e:a9:73:f1:d5:4c:45:71:a7:b4:3b:8e:8f:2c: 73:b4:39:6e:67:5c:4c:1e:3f:83:c9:7a:7f:85:52: 36:ac:ce:34:8c:0c:1a:6f:dd:49:36:79:4a:e4:86: f3:0e:1b:dd:d4:91:d0:c1:d0:67:f8:64:f3:ca:b6: 89:6c:39:e8:99:20:ec:af:d1:35:f9:ac:39:96:9f: 4c:aa:39:7e:3e:6a:27:97:89:61:bb:64:13:56:90: a2:57:90:24:1f:6f:24:e5:64:bd:e5:0d:41:de:d7: fb:85:c2:54:9b:6f:42:a6:51:d3:88:42:34:6c:1e: ac:a9:c0:86:f9:9a:e5:2f:fd:99:5b:c7:61:4d:8b: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E2:57:C3:A9:7B:03:FC:A6:77:4A:14:17:B8:BF:A2:35:3D:01:E0 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS62651.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.77.0/24 79.176.87.0/24 79.176.99.0/24 109.64.127.0/24 109.64.137.0/24 109.64.142.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:9f:44:f7:e7:ea:90:dc:45:a4:ed:32:76:40:b5:40:bc:24: 6f:95:5f:44:7f:84:80:e3:48:2b:62:aa:42:9f:f7:f7:aa:35: 76:19:89:7d:0c:de:ea:3b:d8:76:c8:e5:3a:00:72:da:6e:90: 97:20:2c:a2:95:cf:6d:bc:2d:ad:e6:c7:5d:5e:50:be:fa:6a: ed:9b:5f:46:de:d1:ae:b6:90:3f:07:25:8e:99:89:5c:75:00: a9:9f:1b:4a:36:8c:d3:01:15:35:6f:c5:c7:83:49:04:7c:95: 17:0c:fb:5e:48:0a:4a:c5:e4:34:47:b6:be:4c:10:56:18:54: c7:66:82:61:4d:e1:f3:f6:1b:bc:94:55:36:26:b9:f4:f5:f1: 43:59:c9:2c:7f:46:d4:91:6c:1e:32:ea:05:59:68:5d:17:0c: 1c:34:9a:00:5f:b6:17:bc:a1:68:a3:d0:8b:0f:5f:ae:d5:24: 29:83:02:45:b9:04:d6:5e:a9:9f:c1:4a:f5:c5:9c:c5:95:ae: cf:64:32:d0:b9:54:30:f7:9a:73:74:76:df:45:04:11:0b:ad: 1a:bc:a3:0c:ce:b5:c5:9d:ee:d8:0d:70:59:da:eb:c1:fa:c6: b4:5d:f2:8a:a1:83:ef:ea:86:23:f7:76:6a:57:07:cc:98:97: cf:96:25:99 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUazDX5BeXTPftM4H4I5iIRMBG2OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMzAyMjQ4NTdaFw0yNzEwMjkyMjUzNTdaMDMxMTAvBgNV BAMTKEEyRTI1N0MzQTk3QjAzRkNBNjc3NEExNDE3QjhCRkEyMzUzRDAxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzfGR3Guafs+pfRFCceT+3+9C xgXuxLA/uqWRyw0w2R06rtesqTsn5JOLomogchGSP6GAYIOKi1p45hlxLI+iZ3Kd fm3PTgwdRO6/cG965jeZBFrj6FAp4tdnZk6zieIH64QkUs7EktFEjAYSJgkXqfIP XOqDtlOeqXPx1UxFcae0O46PLHO0OW5nXEweP4PJen+FUjaszjSMDBpv3Uk2eUrk hvMOG93UkdDB0Gf4ZPPKtolsOeiZIOyv0TX5rDmWn0yqOX4+aieXiWG7ZBNWkKJX kCQfbyTlZL3lDUHe1/uFwlSbb0KmUdOIQjRsHqypwIb5muUv/Zlbx2FNi6c5AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUouJXw6l7A/ymd0oUF7i/ojU9AeAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM2MjY1MS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQC AAEwJAMEAE+wTQMEAE+wVwMEAE+wYwMEAG1AfwMEAG1AiQMEAG1AjjANBgkqhkiG 9w0BAQsFAAOCAQEACp9E9+fqkNxFpO0ydkC1QLwkb5VfRH+EgONIK2KqQp/396o1 dhmJfQze6jvYdsjlOgBy2m6QlyAsopXPbbwtrebHXV5Qvvpq7ZtfRt7RrraQPwcl jpmJXHUAqZ8bSjaM0wEVNW/Fx4NJBHyVFwz7XkgKSsXkNEe2vkwQVhhUx2aCYU3h 8/YbvJRVNia59PXxQ1nJLH9G1JFsHjLqBVloXRcMHDSaAF+2F7yhaKPQiw9frtUk KYMCRbkE1l6pn8FK9cWcxZWuz2Qy0LlUMPeac3R230UEEQutGryjDM61xZ3u2A1w WdrrwfrGtF3yiqGD7+qGI/d2alcHzJiXz5YlmQ== -----END CERTIFICATE-----Generated at Thu Nov 5 11:09:16 2026 by rpki-client