$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9457.roa File: AS9457.roa (raw, json) Hash identifier: 5fGZHPfG7/Oh51Vk3YFDUPhF2ivsv1vMTOb3zqbuKyI= Subject key identifier: FB:80:61:56:F6:C5:4E:F7:1B:C7:46:8B:C1:40:41:DB:A0:19:0A:57 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5A0E6F8069E662167D7EEC5E1DE1709B7B078773 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9457.roa Signing time: Mon 05 Oct 2026 06:13:14 +0000 ROA not before: Mon 05 Oct 2026 06:08:14 +0000 ROA not after: Mon 04 Oct 2027 06:13:14 +0000 asID: 9457 IP address blocks: 109.66.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0e:6f:80:69:e6:62:16:7d:7e:ec:5e:1d:e1:70:9b:7b:07:87:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 5 06:08:14 2026 GMT Not After : Oct 4 06:13:14 2027 GMT Subject: CN=FB806156F6C54EF71BC7468BC14041DBA0190A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:85:f5:3a:a5:8e:ca:b0:f1:6d:8b:44:9c: 9f:c9:95:18:99:02:6f:da:f6:7d:f5:a5:68:bc:79: 7f:3a:54:c4:80:32:bd:e1:fc:52:b3:18:6c:1b:e6: 91:5b:b4:32:fa:66:0b:30:14:53:6d:68:7a:f6:5e: e3:51:d2:78:82:e0:10:ef:bf:95:e6:9d:b9:17:79: de:d5:6c:06:b7:e3:6a:10:de:44:22:14:7f:d1:90: ad:7a:9d:5c:a8:d2:2b:50:bb:a4:fc:2c:7b:91:9c: ae:d5:d2:f5:17:ea:4d:d2:09:c4:c3:a2:34:a3:07: a7:90:38:18:72:52:a1:85:42:a5:ab:a5:bf:3a:17: 48:63:8a:b7:6b:1b:e4:00:ae:bd:ad:77:81:88:54: 44:3a:9d:fb:2d:aa:5a:81:88:00:5a:01:bd:a5:6f: 11:c4:2a:f3:5d:d9:66:ff:48:55:05:71:07:82:49: 4f:a7:70:36:3f:07:4b:56:fc:59:cf:84:b2:a3:b3: 56:ad:63:c1:2c:8d:71:02:36:02:46:3e:05:54:1b: b2:f1:3a:db:eb:73:38:b4:fa:de:99:b9:fd:0c:2e: 21:44:eb:1e:37:ba:e9:31:71:f6:1a:7f:86:51:49: a8:b3:33:12:47:eb:40:42:15:d5:20:f0:a3:b6:01: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:80:61:56:F6:C5:4E:F7:1B:C7:46:8B:C1:40:41:DB:A0:19:0A:57 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.141.0/24 Signature Algorithm: sha256WithRSAEncryption df:57:b0:af:78:92:8e:7f:b1:83:cc:88:fc:0b:39:8e:18:c8: 43:a9:4c:8e:b4:d3:35:b4:f0:09:73:f7:b1:f4:9d:86:e5:b0: 55:24:d1:4d:98:f6:fb:5a:e1:e5:7b:4b:83:84:4d:d7:1f:4c: 43:f3:59:3c:b5:68:c5:90:a0:31:80:60:bd:c1:2f:88:ba:64: 1f:00:89:c1:02:3f:22:7c:4c:14:31:64:75:ac:10:d1:0a:05: 8f:b3:fd:75:27:a8:f5:24:ec:fa:ab:da:55:89:2f:cc:e1:aa: 98:98:f8:1c:51:f7:0d:c3:55:ea:30:27:7b:30:79:f4:34:70: 2d:b1:5b:dd:d7:22:4a:fd:8c:21:19:28:01:ac:c7:97:83:93: 54:b2:4a:bd:e4:2d:2e:d2:b3:ef:39:7a:52:c3:ce:a8:10:43: cf:ec:92:32:ba:9d:34:39:d9:62:43:50:c6:bd:95:d2:15:36: bb:75:59:3c:54:77:04:b5:21:e9:9a:72:a2:97:3c:d8:79:cd: 8c:15:2a:43:55:de:33:74:2c:fd:5a:47:3a:32:21:a3:27:7c: ec:c9:0e:fe:09:8a:05:d8:64:ba:b2:ec:ab:a9:4f:8c:94:00: 66:17:d8:80:d2:8a:ef:bc:6c:65:0a:8d:49:a1:9e:f2:57:7d: e8:60:6a:1b -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUWg5vgGnmYhZ9fuxeHeFwm3sHh3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDUwNjA4MTRaFw0yNzEwMDQwNjEzMTRaMDMxMTAvBgNV BAMTKEZCODA2MTU2RjZDNTRFRjcxQkM3NDY4QkMxNDA0MURCQTAxOTBBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDoX1OqWOyrDxbYtEnJ/JlRiZ Am/a9n31pWi8eX86VMSAMr3h/FKzGGwb5pFbtDL6ZgswFFNtaHr2XuNR0niC4BDv v5XmnbkXed7VbAa342oQ3kQiFH/RkK16nVyo0itQu6T8LHuRnK7V0vUX6k3SCcTD ojSjB6eQOBhyUqGFQqWrpb86F0hjirdrG+QArr2td4GIVEQ6nfstqlqBiABaAb2l bxHEKvNd2Wb/SFUFcQeCSU+ncDY/B0tW/FnPhLKjs1atY8EsjXECNgJGPgVUG7Lx Otvrczi0+t6Zuf0MLiFE6x43uukxcfYaf4ZRSaizMxJH60BCFdUg8KO2AU/zAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQU+4BhVvbFTvcbx0aLwUBB26AZClcwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5NDU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAbUKNMA0GCSqGSIb3DQEBCwUAA4IBAQDfV7CveJKOf7GDzIj8CzmOGMhD qUyOtNM1tPAJc/ex9J2G5bBVJNFNmPb7WuHle0uDhE3XH0xD81k8tWjFkKAxgGC9 wS+IumQfAInBAj8ifEwUMWR1rBDRCgWPs/11J6j1JOz6q9pViS/M4aqYmPgcUfcN w1XqMCd7MHn0NHAtsVvd1yJK/YwhGSgBrMeXg5NUskq95C0u0rPvOXpSw86oEEPP 7JIyup00OdliQ1DGvZXSFTa7dVk8VHcEtSHpmnKilzzYec2MFSpDVd4zdCz9Wkc6 MiGjJ3zsyQ7+CYoF2GS6suyrqU+MlABmF9iA0orvvGxlCo1JoZ7yV33oYGob -----END CERTIFICATE-----Generated at Thu Oct 8 13:55:56 2026 by rpki-client