$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS8881.roa File: AS8881.roa (raw, json) Hash identifier: p+pJ/fL5xZXIeQ20mRNwek7pmgh+xnM3YGMNnf1qYA4= Subject key identifier: F3:EE:CC:5A:FE:ED:24:25:B0:9A:4F:9C:D4:03:EF:76:FC:0B:38:44 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7A7969F19E50575D2930CB881F3DB26BB7B9FF57 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS8881.roa Signing time: Thu 22 Oct 2026 20:55:28 +0000 ROA not before: Thu 22 Oct 2026 20:50:28 +0000 ROA not after: Thu 21 Oct 2027 20:55:28 +0000 asID: 8881 IP address blocks: 109.65.254.0/24 maxlen: 24 109.65.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Nov 2026 12:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:79:69:f1:9e:50:57:5d:29:30:cb:88:1f:3d:b2:6b:b7:b9:ff:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 22 20:50:28 2026 GMT Not After : Oct 21 20:55:28 2027 GMT Subject: CN=F3EECC5AFEED2425B09A4F9CD403EF76FC0B3844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:77:61:85:e9:1d:94:5c:f3:60:90:92:dc: a2:b7:f6:bd:56:72:1c:f0:15:40:62:fc:8d:e7:7d: 97:f9:db:bc:ae:b6:8a:46:0c:26:ec:2c:c4:6f:82: 79:ab:19:3d:20:07:40:e8:19:72:48:e9:31:29:88: 77:91:a2:a2:13:1d:93:b9:11:6f:b1:d4:ff:50:c5: 4f:da:4c:6f:cd:bf:49:14:d7:62:09:8b:3a:99:7b: 6c:4c:91:38:48:0c:9a:e0:e4:ab:88:ae:61:49:7d: 4d:b6:a2:49:be:02:2b:15:59:a1:93:64:91:1d:29: a2:3e:55:a8:92:de:87:26:0b:39:9f:c5:ce:90:ea: 7a:b5:68:77:bf:c9:b5:6e:0e:7a:c4:46:55:be:03: a4:88:32:e3:8f:7e:a4:3c:12:f3:d1:12:91:8f:1b: 30:8c:63:4b:39:e1:b7:45:fb:64:ae:20:fc:78:dd: 7d:df:63:3d:61:d5:cd:3d:5c:4b:75:11:79:3f:55: 53:63:aa:15:3f:6f:f1:ee:91:f1:32:4c:5d:cf:8f: 23:b6:b8:59:de:65:fd:84:51:4c:0f:12:19:98:7a: 5e:e4:d1:28:81:45:bc:2a:12:39:a1:76:bf:20:81: 94:3a:79:b3:24:ab:a9:69:68:29:97:b4:e6:ff:34: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:CC:5A:FE:ED:24:25:B0:9A:4F:9C:D4:03:EF:76:FC:0B:38:44 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS8881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.254.0/23 Signature Algorithm: sha256WithRSAEncryption b7:48:fe:ff:c4:09:1f:6f:d2:2e:46:79:c7:3c:a7:52:cb:75: d6:3c:14:6e:0a:43:35:a5:52:c4:6d:ae:37:12:02:f4:29:0f: 31:6a:cb:31:57:a0:0b:5a:f5:bd:1a:e2:db:ca:d2:1a:28:b4: 28:3e:49:9e:70:48:86:ab:37:6f:bc:9e:f0:47:dd:59:b8:b1: d2:7b:f5:c8:49:26:41:77:a8:20:7f:73:63:2e:13:68:ef:34: 27:d5:26:97:90:46:83:94:67:90:69:87:f4:b2:13:fe:1c:51: 13:9f:82:64:30:ed:c9:1e:bd:5d:5e:94:ae:bd:77:ac:b6:b0: 3e:3b:7e:95:7c:88:2d:bf:e4:bb:5a:86:95:9a:5f:45:3f:3a: 59:a2:22:d2:cc:b0:1a:71:fc:33:30:9e:bd:e3:16:23:38:ba: 4e:3b:d4:9e:fe:7a:9e:eb:2a:10:9e:eb:a6:b5:b2:b5:16:f7: 72:49:95:91:04:bf:ab:3b:1c:a7:6e:ef:e3:2e:9c:ec:4d:d0: 83:5b:14:23:fe:fa:f9:f9:c0:67:bb:b8:40:00:38:fe:b2:9f: e3:67:74:51:a4:f8:81:3a:0a:fe:20:a9:ed:b4:c6:8d:bc:01: 29:32:f1:58:f3:de:14:9d:25:c9:1d:25:99:68:c2:ee:6d:c4: 33:9f:63:05 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUenlp8Z5QV10pMMuIHz2ya7e5/1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjIyMDUwMjhaFw0yNzEwMjEyMDU1MjhaMDMxMTAvBgNV BAMTKEYzRUVDQzVBRkVFRDI0MjVCMDlBNEY5Q0Q0MDNFRjc2RkMwQjM4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yndhhekdlFzzYJCS3KK39r1W chzwFUBi/I3nfZf527yutopGDCbsLMRvgnmrGT0gB0DoGXJI6TEpiHeRoqITHZO5 EW+x1P9QxU/aTG/Nv0kU12IJizqZe2xMkThIDJrg5KuIrmFJfU22okm+AisVWaGT ZJEdKaI+VaiS3ocmCzmfxc6Q6nq1aHe/ybVuDnrERlW+A6SIMuOPfqQ8EvPREpGP GzCMY0s54bdF+2SuIPx43X3fYz1h1c09XEt1EXk/VVNjqhU/b/HukfEyTF3PjyO2 uFneZf2EUUwPEhmYel7k0SiBRbwqEjmhdr8ggZQ6ebMkq6lpaCmXtOb/NPSrAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQU8+7MWv7tJCWwmk+c1APvdvwLOEQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM4ODgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBbUH+MA0GCSqGSIb3DQEBCwUAA4IBAQC3SP7/xAkfb9IuRnnHPKdSy3XW PBRuCkM1pVLEba43EgL0KQ8xassxV6ALWvW9GuLbytIaKLQoPkmecEiGqzdvvJ7w R91ZuLHSe/XISSZBd6ggf3NjLhNo7zQn1SaXkEaDlGeQaYf0shP+HFETn4JkMO3J Hr1dXpSuvXestrA+O36VfIgtv+S7WoaVml9FPzpZoiLSzLAacfwzMJ694xYjOLpO O9Se/nqe6yoQnuumtbK1FvdySZWRBL+rOxynbu/jLpzsTdCDWxQj/vr5+cBnu7hA ADj+sp/jZ3RRpPiBOgr+IKnttMaNvAEpMvFY894UnSXJHSWZaMLubcQzn2MF -----END CERTIFICATE-----Generated at Wed Nov 4 07:32:36 2026 by rpki-client