$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: jXeWCAHbhjyX1EdxHE9ZdhbAZSxKnct/I+cOubgmkCM= Subject key identifier: 99:C4:71:1B:56:A9:0F:08:76:8C:40:35:0B:C8:9B:10:C2:23:62:7C Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 20639078ED16364E560FEECE746E8ED4F13DEB8C Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa Signing time: Tue 06 Oct 2026 05:27:01 +0000 ROA not before: Tue 06 Oct 2026 05:22:01 +0000 ROA not after: Tue 05 Oct 2027 05:27:01 +0000 asID: 7029 IP address blocks: 79.176.176.0/22 maxlen: 24 79.180.12.0/22 maxlen: 24 79.180.20.0/22 maxlen: 24 79.180.28.0/22 maxlen: 24 79.180.36.0/22 maxlen: 24 79.182.140.0/22 maxlen: 24 79.182.232.0/22 maxlen: 24 109.64.12.0/22 maxlen: 24 109.64.104.0/22 maxlen: 24 109.65.40.0/22 maxlen: 24 109.65.108.0/22 maxlen: 24 109.65.168.0/22 maxlen: 24 109.65.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:63:90:78:ed:16:36:4e:56:0f:ee:ce:74:6e:8e:d4:f1:3d:eb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 05:22:01 2026 GMT Not After : Oct 5 05:27:01 2027 GMT Subject: CN=99C4711B56A90F08768C40350BC89B10C223627C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:01:6f:5e:66:6d:43:54:ad:d8:89:dc:94: f5:b5:8d:f7:f0:78:73:ba:24:59:b1:b4:f5:12:d3: a9:98:e8:70:08:69:ba:2e:8a:b0:67:d3:61:55:08: 8e:53:bc:da:0b:f6:31:42:e0:fa:12:e5:78:d9:68: e3:ff:3f:96:3d:2c:13:9d:4f:d0:f2:42:61:0a:bf: fa:8e:b7:4e:da:66:13:0c:52:d4:1e:c5:aa:45:72: 06:04:1d:b6:e5:eb:bc:94:1c:1e:93:2d:ef:4d:70: 94:fb:8b:e4:37:ce:3e:b7:43:a0:a5:d6:62:f3:a5: 6f:00:d2:b2:4f:0e:80:7f:d6:4e:fa:bf:c1:fa:86: 98:75:2e:e7:28:b5:52:90:d0:de:7b:a7:e6:95:5f: e0:9e:96:65:a1:02:a3:4d:22:da:2f:89:ab:c3:94: b4:44:52:b9:20:70:ae:05:e3:e1:ee:50:d8:fc:30: 11:4f:89:01:9b:ea:b7:5e:3e:06:2d:21:d2:8b:10: d7:5b:24:d8:f9:4d:5e:ec:00:cf:15:11:11:96:07: e3:61:95:c3:c2:20:15:06:02:fc:8a:86:2a:85:ea: 82:ab:69:0d:39:25:45:53:e4:d9:f9:98:09:9d:d5: e2:e6:4f:cc:52:2a:2b:ab:0d:3d:3a:1f:b5:a6:5f: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:71:1B:56:A9:0F:08:76:8C:40:35:0B:C8:9B:10:C2:23:62:7C X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.176.0/22 79.180.12.0/22 79.180.20.0/22 79.180.28.0/22 79.180.36.0/22 79.182.140.0/22 79.182.232.0/22 109.64.12.0/22 109.64.104.0/22 109.65.40.0/22 109.65.108.0/22 109.65.168.0/21 Signature Algorithm: sha256WithRSAEncryption 03:da:ff:47:8b:21:54:74:65:5d:05:c1:44:46:09:56:7f:92: 66:64:5e:17:c2:f9:87:ab:e1:38:19:e0:8a:67:e6:86:63:3c: d4:52:ed:40:91:1f:cf:86:78:9f:d0:fb:73:c6:71:fe:ad:83: 82:4c:1d:c8:56:66:a8:90:f2:60:1c:bc:4f:80:f0:0a:3d:7b: eb:07:ab:26:69:db:02:62:ea:44:24:1d:e0:82:87:b8:7c:e3: 85:13:2f:46:8e:8f:00:c2:b0:9d:b8:c7:ee:78:14:3c:95:3f: 41:36:7f:bb:f8:3a:47:fb:e6:79:ae:8f:fa:2c:8c:cf:b6:0a: d1:81:ff:80:dd:a6:a5:04:94:0d:8f:f4:9e:41:fb:9c:ac:29: 3e:66:d9:f4:be:17:52:8a:02:23:61:a2:82:b4:20:68:f5:69: d5:88:06:0a:64:ea:ba:fb:de:0e:0d:b7:96:9e:14:02:ac:a1: 15:3f:3f:0c:a1:aa:cd:6c:b3:06:66:1a:48:f2:a7:3c:5d:f2: 40:af:dd:0b:3c:74:ca:ab:25:3f:06:0f:e1:aa:6a:d2:0e:95: 11:f7:fa:a0:4f:dc:f5:e8:89:a8:a4:9a:79:fa:e0:13:25:50: 3f:31:c6:d7:00:fe:62:cd:56:80:75:61:88:ac:80:44:7e:ed: 70:73:75:67 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIGOQeO0WNk5WD+7OdG6O1PE964wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYwNTIyMDFaFw0yNzEwMDUwNTI3MDFaMDMxMTAvBgNV BAMTKDk5QzQ3MTFCNTZBOTBGMDg3NjhDNDAzNTBCQzg5QjEwQzIyMzYyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/QFvXmZtQ1St2InclPW1jffw eHO6JFmxtPUS06mY6HAIabouirBn02FVCI5TvNoL9jFC4PoS5XjZaOP/P5Y9LBOd T9DyQmEKv/qOt07aZhMMUtQexapFcgYEHbbl67yUHB6TLe9NcJT7i+Q3zj63Q6Cl 1mLzpW8A0rJPDoB/1k76v8H6hph1LucotVKQ0N57p+aVX+CelmWhAqNNItoviavD lLREUrkgcK4F4+HuUNj8MBFPiQGb6rdePgYtIdKLENdbJNj5TV7sAM8VERGWB+Nh lcPCIBUGAvyKhiqF6oKraQ05JUVT5Nn5mAmd1eLmT8xSKiurDT06H7WmX6I5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUmcRxG1apDwh2jEA1C8ibEMIjYnwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM3MDI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIA ATBIAwQCT7CwAwQCT7QMAwQCT7QUAwQCT7QcAwQCT7QkAwQCT7aMAwQCT7boAwQC bUAMAwQCbUBoAwQCbUEoAwQCbUFsAwQDbUGoMA0GCSqGSIb3DQEBCwUAA4IBAQAD 2v9HiyFUdGVdBcFERglWf5JmZF4XwvmHq+E4GeCKZ+aGYzzUUu1AkR/Phnif0Ptz xnH+rYOCTB3IVmaokPJgHLxPgPAKPXvrB6smadsCYupEJB3ggoe4fOOFEy9Gjo8A wrCduMfueBQ8lT9BNn+7+DpH++Z5ro/6LIzPtgrRgf+A3aalBJQNj/SeQfucrCk+ Ztn0vhdSigIjYaKCtCBo9WnViAYKZOq6+94ODbeWnhQCrKEVPz8MoarNbLMGZhpI 8qc8XfJAr90LPHTKqyU/Bg/hqmrSDpUR9/qgT9z16ImopJp5+uATJVA/McbXAP5i zVaAdWGIrIBEfu1wc3Vn -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:49 2026 by rpki-client