$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: isn7nr2dzfRyzafUjbz6xnFdV0BhVZC+ZHZ91gN1uxs= Subject key identifier: 13:AF:51:99:4B:31:BD:56:FD:86:E0:73:1F:1C:EE:A5:2A:60:A5:3E Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 58B1E5625A79FD8DB56A3817064B4329C911A53A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa Signing time: Tue 06 Oct 2026 18:32:04 +0000 ROA not before: Tue 06 Oct 2026 18:27:04 +0000 ROA not after: Tue 05 Oct 2027 18:32:04 +0000 asID: 9009 IP address blocks: 79.180.17.0/24 maxlen: 24 79.182.15.0/24 maxlen: 24 79.183.11.0/24 maxlen: 24 109.65.13.0/24 maxlen: 24 109.66.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b1:e5:62:5a:79:fd:8d:b5:6a:38:17:06:4b:43:29:c9:11:a5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 6 18:27:04 2026 GMT Not After : Oct 5 18:32:04 2027 GMT Subject: CN=13AF51994B31BD56FD86E0731F1CEEA52A60A53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:dd:47:31:75:54:e9:0b:f5:b6:1f:dd:ce: 75:3a:9b:07:b3:ca:2c:cd:65:f6:1c:3e:63:e3:37: 20:7a:40:e1:4f:57:df:3c:8c:77:ea:e9:40:e7:8b: de:b5:96:3a:28:6e:2e:82:e2:e1:4a:43:60:0c:5e: cb:d5:ae:d6:19:42:22:ad:89:f9:82:82:33:91:57: 96:fb:f3:a7:6b:2e:e0:e2:2d:db:6f:91:d8:3d:59: a7:55:e1:e5:b5:18:35:21:8f:e6:c3:35:46:d7:ce: 71:66:f1:94:f5:61:71:e5:1c:ea:d1:10:be:32:6a: b0:87:b9:d6:6f:b5:5d:df:8f:dd:5c:fe:05:fd:83: 8b:3e:38:4d:47:f6:79:7f:81:4b:43:52:fc:2e:b0: 83:2c:46:ad:c6:18:9b:e2:5b:cb:31:01:29:52:a0: 5e:d4:fc:e1:5a:62:3b:b1:71:cf:d3:80:21:69:cd: f2:5e:67:aa:7e:8f:24:0d:f0:40:62:d1:6c:9e:8c: 0e:0f:a0:f0:ef:d2:02:bf:85:a0:82:d3:ef:da:2f: 06:1c:cd:c0:8c:eb:5c:26:75:42:75:af:1f:16:9d: 03:a8:90:c5:c5:62:40:05:43:c3:e9:81:5c:3f:9d: 14:6e:65:04:48:5c:74:06:75:e2:da:f1:f2:e9:50: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:51:99:4B:31:BD:56:FD:86:E0:73:1F:1C:EE:A5:2A:60:A5:3E X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.17.0/24 79.182.15.0/24 79.183.11.0/24 109.65.13.0/24 109.66.13.0/24 Signature Algorithm: sha256WithRSAEncryption 26:69:de:d5:64:89:46:6e:1e:d8:84:37:0c:55:79:b4:c1:58: 15:bf:27:b8:ee:4e:33:02:72:d8:5b:fa:65:91:7f:4d:46:66: c8:a6:f7:69:5a:e1:fe:69:92:01:90:94:ff:f3:a2:02:fb:05: fc:b7:5b:9d:3d:27:7b:9e:d6:87:80:f2:22:27:39:a7:b7:03: 2c:23:d4:b6:a1:5d:95:9d:12:a2:77:30:1c:fe:0a:83:79:19: b6:dd:e4:ab:53:26:c2:ee:f1:9e:dc:76:5f:c4:4c:3e:9a:2c: a5:77:ea:b7:c3:5f:e8:f2:84:84:52:a9:97:ce:c4:7e:5f:97: 32:e9:23:fd:61:a9:4a:60:23:5a:76:34:07:65:14:ec:14:06: 4d:fc:66:7a:7d:21:4e:3b:c6:41:8c:38:56:7e:83:63:1c:b3: 86:90:f4:2e:65:43:cf:9b:5f:59:c2:f1:6d:c4:f9:c9:53:fa: 3c:4f:39:bb:56:05:f0:43:fd:0f:81:9a:f0:06:d6:17:ed:42: 26:3c:18:3c:2f:fe:a0:57:e1:95:4a:21:51:c6:f8:5d:bd:38: 6a:4f:6a:d8:49:70:00:a1:17:45:0e:e6:e9:f9:07:ce:cf:6e: fd:4f:35:b1:8d:12:6d:06:23:e2:4c:98:39:59:68:17:b3:55: 06:64:90:76 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUWLHlYlp5/Y21ajgXBktDKckRpTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDYxODI3MDRaFw0yNzEwMDUxODMyMDRaMDMxMTAvBgNV BAMTKDEzQUY1MTk5NEIzMUJENTZGRDg2RTA3MzFGMUNFRUE1MkE2MEE1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspN1HMXVU6Qv1th/dznU6mwez yizNZfYcPmPjNyB6QOFPV988jHfq6UDni961ljoobi6C4uFKQ2AMXsvVrtYZQiKt ifmCgjORV5b786drLuDiLdtvkdg9WadV4eW1GDUhj+bDNUbXznFm8ZT1YXHlHOrR EL4yarCHudZvtV3fj91c/gX9g4s+OE1H9nl/gUtDUvwusIMsRq3GGJviW8sxASlS oF7U/OFaYjuxcc/TgCFpzfJeZ6p+jyQN8EBi0WyejA4PoPDv0gK/haCC0+/aLwYc zcCM61wmdUJ1rx8WnQOokMXFYkAFQ8PpgVw/nRRuZQRIXHQGdeLa8fLpUM7zAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUE69RmUsxvVb9huBzHxzupSpgpT4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5MDA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIA ATAeAwQAT7QRAwQAT7YPAwQAT7cLAwQAbUENAwQAbUINMA0GCSqGSIb3DQEBCwUA A4IBAQAmad7VZIlGbh7YhDcMVXm0wVgVvye47k4zAnLYW/plkX9NRmbIpvdpWuH+ aZIBkJT/86IC+wX8t1udPSd7ntaHgPIiJzmntwMsI9S2oV2VnRKidzAc/gqDeRm2 3eSrUybC7vGe3HZfxEw+miyld+q3w1/o8oSEUqmXzsR+X5cy6SP9YalKYCNadjQH ZRTsFAZN/GZ6fSFOO8ZBjDhWfoNjHLOGkPQuZUPPm19ZwvFtxPnJU/o8Tzm7VgXw Q/0PgZrwBtYX7UImPBg8L/6gV+GVSiFRxvhdvThqT2rYSXAAoRdFDubp+QfOz279 TzWxjRJtBiPiTJg5WWgXs1UGZJB2 -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:05 2026 by rpki-client