$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS64457.roa File: AS64457.roa (raw, json) Hash identifier: 2BSJVIQ3/VYHW79qZwLeG/OZrfHIDCgRGXdvui25bLw= Subject key identifier: 43:4F:41:F8:89:88:9C:CF:20:90:96:96:E3:62:C8:D6:DA:DE:28:37 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5A76B273FF458D7826DA1C772E4E04F09C8FF977 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS64457.roa Signing time: Mon 05 Oct 2026 06:13:06 +0000 ROA not before: Mon 05 Oct 2026 06:08:06 +0000 ROA not after: Mon 04 Oct 2027 06:13:06 +0000 asID: 64457 IP address blocks: 79.183.89.0/24 maxlen: 24 109.65.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:76:b2:73:ff:45:8d:78:26:da:1c:77:2e:4e:04:f0:9c:8f:f9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:06 2026 GMT Not After : Oct 4 06:13:06 2027 GMT Subject: CN=434F41F889889CCF20909696E362C8D6DADE2837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:5d:83:94:7a:bc:64:98:40:0a:1e:c6:ec: f7:3c:7b:01:d2:ac:55:f6:15:0c:30:6a:c2:d4:c1: 79:ac:64:71:d3:16:48:4c:e9:62:6c:2f:04:e0:b6: 11:07:ec:36:7a:12:fc:45:ae:68:3f:38:93:e6:87: b1:49:e9:e8:f9:13:d6:12:4f:e5:42:42:bf:20:9d: 10:bf:db:3a:f6:65:08:cb:90:f9:bf:9e:44:86:b3: e7:a7:ef:ba:a5:a7:f0:16:46:4c:07:56:89:57:78: a6:cb:bf:17:ae:08:68:14:38:f2:a0:c4:a7:b1:76: 41:72:16:db:e0:57:0d:7d:2a:73:d4:03:17:40:66: e1:23:3f:59:7f:ce:fb:6b:72:67:ea:c1:11:35:54: 77:c2:af:67:b9:7a:f3:6c:22:33:6f:7e:c4:5f:18: 37:26:08:04:8a:6c:45:24:2b:ff:09:12:05:cc:16: b6:8e:6b:b6:e1:1b:24:c2:51:27:e0:1e:6f:1f:05: 61:6e:af:64:ef:0e:e4:f5:55:e4:5e:bb:70:08:df: 60:c2:e4:8d:23:48:a0:ca:05:cc:f3:6f:11:48:00: ed:0f:a7:69:d6:0a:76:8e:ea:ca:e9:4a:51:2a:cf: 8e:c5:a0:ea:1f:f0:75:b6:f9:d0:0e:b6:27:6f:67: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:41:F8:89:88:9C:CF:20:90:96:96:E3:62:C8:D6:DA:DE:28:37 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS64457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.183.89.0/24 109.65.46.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f6:9d:92:8c:cf:df:91:d9:e8:aa:c1:1f:8f:b5:21:6b:4c: 2e:79:6d:4d:b6:09:15:a6:14:f4:cf:28:32:27:a6:67:b3:d2: e1:d0:4e:62:c4:13:88:c9:9c:79:1e:d3:d5:b5:87:16:24:32: 19:5d:de:bc:6e:96:dc:bc:fa:93:ac:3d:51:8e:ee:16:ec:95: 7f:f1:7a:d7:fa:70:05:71:c6:e1:8f:f3:33:d1:0e:3c:3c:9c: 93:45:84:0d:64:fd:d9:cc:74:22:f7:66:cd:58:56:7b:e1:63: d5:d5:80:e8:b5:3d:b1:cb:fa:ed:b6:ca:59:fc:e5:4b:02:84: 7b:40:c3:47:8e:db:f0:87:c5:58:db:08:13:07:8f:42:53:5e: 95:69:85:0f:f1:cc:91:e8:47:fa:11:f1:9c:be:a6:dd:c1:da: 09:8c:dc:89:1f:a5:ad:2b:bc:c4:58:39:c1:38:a3:1e:6e:54: 3e:a3:58:4b:59:ea:2e:c6:86:54:9f:11:f9:ef:2d:39:2b:2c: 47:0e:19:65:8d:8b:45:05:f4:14:a6:c7:96:c6:02:94:5a:76: e3:cf:18:1f:b7:5c:85:02:c5:b1:52:61:89:e8:dd:96:e8:a9: db:01:ab:54:12:8b:bd:a8:e2:27:24:28:59:f6:65:66:f1:8c: 04:12:6c:05 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUWnayc/9FjXgm2hx3Lk4E8JyP+XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MDZaFw0yNzEwMDQwNjEzMDZaMDMxMTAvBgNV BAMTKDQzNEY0MUY4ODk4ODlDQ0YyMDkwOTY5NkUzNjJDOEQ2REFERTI4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAU12DlHq8ZJhACh7G7Pc8ewHS rFX2FQwwasLUwXmsZHHTFkhM6WJsLwTgthEH7DZ6EvxFrmg/OJPmh7FJ6ej5E9YS T+VCQr8gnRC/2zr2ZQjLkPm/nkSGs+en77qlp/AWRkwHVolXeKbLvxeuCGgUOPKg xKexdkFyFtvgVw19KnPUAxdAZuEjP1l/zvtrcmfqwRE1VHfCr2e5evNsIjNvfsRf GDcmCASKbEUkK/8JEgXMFraOa7bhGyTCUSfgHm8fBWFur2TvDuT1VeReu3AI32DC 5I0jSKDKBczzbxFIAO0Pp2nWCnaO6srpSlEqz47FoOof8HW2+dAOtidvZ8evAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUQ09B+ImInM8gkJaW42LI1treKDcwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM2NDQ1Ny5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEAE+3WQMEAG1BLjANBgkqhkiG9w0BAQsFAAOCAQEAgfadkozP35HZ6KrB H4+1IWtMLnltTbYJFaYU9M8oMiemZ7PS4dBOYsQTiMmceR7T1bWHFiQyGV3evG6W 3Lz6k6w9UY7uFuyVf/F61/pwBXHG4Y/zM9EOPDyck0WEDWT92cx0IvdmzVhWe+Fj 1dWA6LU9scv67bbKWfzlSwKEe0DDR47b8IfFWNsIEwePQlNelWmFD/HMkehH+hHx nL6m3cHaCYzciR+lrSu8xFg5wTijHm5UPqNYS1nqLsaGVJ8R+e8tOSssRw4ZZY2L RQX0FKbHlsYClFp2488YH7dchQLFsVJhiejdluip2wGrVBKLvajiJyQoWfZlZvGM BBJsBQ== -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:59 2026 by rpki-client