$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS63099.roa File: AS63099.roa (raw, json) Hash identifier: zAnEHenqxZOmhyH3mr8/QJLlsfjyuVzFGQ/zcutp9Kk= Subject key identifier: FB:AE:36:91:E4:69:78:F0:05:3F:AE:A3:C1:2C:19:73:1E:91:BD:3E Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4CB878979ABB71DDC7FF049104F20FA5AC8B1267 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS63099.roa Signing time: Mon 05 Oct 2026 06:13:23 +0000 ROA not before: Mon 05 Oct 2026 06:08:23 +0000 ROA not after: Mon 04 Oct 2027 06:13:23 +0000 asID: 63099 IP address blocks: 79.182.116.0/24 maxlen: 24 109.66.131.0/24 maxlen: 24 109.66.135.0/24 maxlen: 24 109.66.136.0/24 maxlen: 24 109.66.145.0/24 maxlen: 24 109.66.154.0/24 maxlen: 24 109.66.161.0/24 maxlen: 24 109.66.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b8:78:97:9a:bb:71:dd:c7:ff:04:91:04:f2:0f:a5:ac:8b:12:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:23 2026 GMT Not After : Oct 4 06:13:23 2027 GMT Subject: CN=FBAE3691E46978F0053FAEA3C12C19731E91BD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:d6:30:16:26:5d:e5:7e:53:5f:d0:cf:43: df:d3:20:77:84:0b:34:67:47:47:9e:8f:dc:75:f7: e5:e8:49:a8:36:01:c6:52:5a:07:73:02:cd:24:27: 98:39:f9:04:93:73:bf:13:8a:1a:ff:23:d8:e0:7f: 8d:fb:35:22:a4:7a:19:3f:b6:33:79:0b:23:e9:0a: a4:cd:3f:1d:28:12:d9:d8:ca:12:f3:cf:9d:e8:1f: cd:ad:b0:42:a5:01:33:9b:41:34:ad:33:b4:5d:01: 53:c2:d7:68:07:c3:92:7e:07:15:5e:a5:0f:35:11: 6d:d5:54:f1:c1:ab:d8:2d:95:8f:40:6a:04:0f:34: 15:ea:61:40:42:3a:88:31:5d:35:97:0a:05:16:ee: e5:9c:f8:89:27:c3:9e:21:7d:4d:a0:6e:94:d7:28: 82:fc:2c:0c:3b:c7:9a:90:cd:c2:90:6b:bb:a5:55: 15:50:e4:a8:57:fc:e2:b6:75:47:8b:d0:5e:9a:48: 58:9f:1b:72:41:77:d6:29:5a:56:00:d9:84:68:6d: 37:ae:7d:d3:3d:66:85:77:a0:0d:b8:8d:cd:14:e3: b8:c2:3b:a9:6e:de:b6:3f:47:0b:3d:18:67:90:9f: c5:0f:85:52:8e:6e:3f:f6:2b:1f:6b:0d:4b:2d:51: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:36:91:E4:69:78:F0:05:3F:AE:A3:C1:2C:19:73:1E:91:BD:3E X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS63099.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.116.0/24 109.66.131.0/24 109.66.135.0-109.66.136.255 109.66.145.0/24 109.66.154.0/24 109.66.161.0/24 109.66.190.0/24 Signature Algorithm: sha256WithRSAEncryption 74:bc:a5:8d:c8:b6:be:c0:49:61:8a:fb:8c:44:0e:3c:8b:2d: 6b:c3:92:48:24:c9:14:e2:f9:ec:9d:f1:30:83:bd:89:81:6d: 06:25:11:15:53:62:a1:e5:fd:3b:0f:4f:42:59:2f:3e:eb:20: 39:a2:4b:96:5e:4e:64:ae:08:a2:39:75:03:9e:c0:5b:14:e3: 56:3e:23:94:28:85:4c:25:82:59:c0:fa:e7:43:f2:04:8c:61: 43:5c:c2:1a:a4:ae:d9:2f:83:1a:b4:15:50:09:d1:ab:37:16: 54:5e:ab:bb:d8:f5:82:fe:2c:9e:da:e6:e9:06:b7:28:d8:f2: c7:08:5b:1c:13:97:ac:24:c1:fe:e0:c9:92:22:4a:23:3a:d5: 66:49:2a:1b:49:b8:7c:72:68:f4:f0:16:70:a9:1e:36:fa:44: 5c:e5:be:33:b6:d7:ac:af:1a:73:96:59:05:85:e2:87:8a:0f: 43:57:a2:e0:c8:89:eb:a1:a1:63:82:4c:58:fa:95:46:0e:db: 48:2a:32:af:b1:0d:c3:05:87:f0:e0:4f:e8:4e:ef:63:17:19: f2:50:0c:c8:11:3f:f4:19:84:6f:1c:2d:b9:b3:df:83:a7:44: f4:df:ea:44:5e:10:9f:8f:9c:f9:1f:79:3e:7f:06:5d:8f:bc: e5:ad:04:46 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIUTLh4l5q7cd3H/wSRBPIPpayLEmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MjNaFw0yNzEwMDQwNjEzMjNaMDMxMTAvBgNV BAMTKEZCQUUzNjkxRTQ2OTc4RjAwNTNGQUVBM0MxMkMxOTczMUU5MUJEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lNYwFiZd5X5TX9DPQ9/TIHeE CzRnR0eej9x19+XoSag2AcZSWgdzAs0kJ5g5+QSTc78Tihr/I9jgf437NSKkehk/ tjN5CyPpCqTNPx0oEtnYyhLzz53oH82tsEKlATObQTStM7RdAVPC12gHw5J+BxVe pQ81EW3VVPHBq9gtlY9AagQPNBXqYUBCOogxXTWXCgUW7uWc+Iknw54hfU2gbpTX KIL8LAw7x5qQzcKQa7ulVRVQ5KhX/OK2dUeL0F6aSFifG3JBd9YpWlYA2YRobTeu fdM9ZoV3oA24jc0U47jCO6lu3rY/Rws9GGeQn8UPhVKObj/2Kx9rDUstUXntAgMB AAGjggJwMIICbDAdBgNVHQ4EFgQU+642keRpePAFP66jwSwZcx6RvT4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM2MzA5OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBLBggrBgEFBQcBBwEB/wQ8MDowOAQC AAEwMgMEAE+2dAMEAG1CgzAMAwQAbUKHAwQAbUKIAwQAbUKRAwQAbUKaAwQAbUKh AwQAbUK+MA0GCSqGSIb3DQEBCwUAA4IBAQB0vKWNyLa+wElhivuMRA48iy1rw5JI JMkU4vnsnfEwg72JgW0GJREVU2Kh5f07D09CWS8+6yA5okuWXk5krgiiOXUDnsBb FONWPiOUKIVMJYJZwPrnQ/IEjGFDXMIapK7ZL4MatBVQCdGrNxZUXqu72PWC/iye 2ubpBrco2PLHCFscE5esJMH+4MmSIkojOtVmSSobSbh8cmj08BZwqR42+kRc5b4z ttesrxpzllkFheKHig9DV6LgyInroaFjgkxY+pVGDttIKjKvsQ3DBYfw4E/oTu9j FxnyUAzIET/0GYRvHC25s9+Dp0T03+pEXhCfj5z5H3k+fwZdj7zlrQRG -----END CERTIFICATE-----Generated at Thu Oct 8 16:46:49 2026 by rpki-client