$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS134494.roa File: AS134494.roa (raw, json) Hash identifier: 0qYm07vZXjZQpl7TZxwP4B/9/BAELXS2hewNEBDmp0c= Subject key identifier: EE:9E:48:24:6A:8F:8F:67:F9:AE:3F:14:47:06:72:2E:21:88:3F:FD Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 324EE8C6BB6F19074CF419F3D0C03B01410C8021 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS134494.roa Signing time: Thu 05 Nov 2026 06:51:34 +0000 ROA not before: Thu 05 Nov 2026 06:46:34 +0000 ROA not after: Thu 04 Nov 2027 06:51:34 +0000 asID: 134494 IP address blocks: 109.64.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4e:e8:c6:bb:6f:19:07:4c:f4:19:f3:d0:c0:3b:01:41:0c:80:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 5 06:46:34 2026 GMT Not After : Nov 4 06:51:34 2027 GMT Subject: CN=EE9E48246A8F8F67F9AE3F144706722E21883FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:8e:43:17:f6:73:0a:c8:1e:97:8d:6d:32: 50:72:50:b2:71:9f:55:97:c9:38:44:a0:0e:ff:eb: d1:8d:fa:50:84:8b:08:c9:72:85:d1:53:8c:c4:4b: 0e:70:75:45:8b:e1:aa:de:e0:a0:54:7f:68:10:21: ef:af:93:79:3d:83:5b:71:3c:9c:78:88:07:13:b4: ec:76:25:c1:9c:9d:c2:e7:99:67:f9:e1:ec:d5:3a: ea:22:e7:da:86:14:a0:35:72:fa:55:83:d9:52:f3: 46:f5:f4:ce:b1:17:d0:96:f4:d8:d4:63:05:b7:e7: c7:40:3f:dc:7f:5d:12:d3:85:85:e9:82:45:a5:e0: 6b:52:49:33:33:47:03:fd:bf:0e:0a:62:a9:03:eb: a6:b4:ac:0f:0b:3f:5e:82:e5:d2:21:a3:51:62:1e: 7d:55:32:25:78:18:3d:96:e7:7f:48:17:d9:3d:82: b5:7d:15:7e:43:ac:21:df:ad:9e:29:54:8f:b8:5a: 9e:7f:de:1b:d1:9c:87:45:39:84:c2:25:e7:8f:5d: 1a:be:85:bf:41:7d:49:8f:68:c9:b1:43:a8:71:fc: 9c:e7:9b:8b:51:bc:92:02:06:c0:11:54:0e:73:47: 51:17:6d:a9:cd:20:2c:fa:80:6e:14:d5:5e:79:1a: a8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9E:48:24:6A:8F:8F:67:F9:AE:3F:14:47:06:72:2E:21:88:3F:FD X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS134494.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.7.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:3f:c4:2c:25:07:dc:9d:6a:75:13:ff:f7:3a:c1:a9:d3:75: b7:59:0d:b1:62:5b:16:d5:27:e3:0a:95:32:00:ba:62:0e:98: 82:2d:5d:f8:f3:97:ab:7a:61:2e:55:0f:1c:58:02:df:a2:2d: e0:c9:98:30:96:30:58:eb:f8:07:b6:da:f4:bc:25:a7:89:cd: 56:99:4b:20:bd:b4:f3:f2:6b:9b:e7:9c:ee:6c:34:07:a1:0f: ab:17:00:76:ee:2f:2f:85:ec:48:8d:17:97:f8:56:41:fb:48: aa:ac:a2:f9:6e:94:92:58:59:af:61:19:5b:21:4a:09:17:dd: a3:1d:1e:49:45:80:c3:a3:2a:99:72:44:2b:aa:4b:a7:61:b1: 75:da:31:a9:6a:29:01:30:66:e9:fa:4d:62:56:a1:83:4a:b8: ed:67:26:59:f4:bc:a3:f0:9c:7d:23:6a:40:bd:f7:a1:d7:a0: a5:ff:d8:1d:70:68:1b:2f:f4:c0:b3:af:9a:21:60:9e:04:eb: fa:ce:33:dc:0a:2b:fd:6f:65:b8:92:ee:ab:29:13:68:a8:4f: fe:a9:f4:39:28:cb:b4:f5:e0:74:41:44:84:99:d3:15:ba:92: 72:99:49:90:66:d2:db:a2:f5:34:b3:78:14:1c:38:f1:63:86: f4:31:dd:fa -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUMk7oxrtvGQdM9Bnz0MA7AUEMgCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDUwNjQ2MzRaFw0yNzExMDQwNjUxMzRaMDMxMTAvBgNV BAMTKEVFOUU0ODI0NkE4RjhGNjdGOUFFM0YxNDQ3MDY3MjJFMjE4ODNGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdI5DF/ZzCsgel41tMlByULJx n1WXyThEoA7/69GN+lCEiwjJcoXRU4zESw5wdUWL4are4KBUf2gQIe+vk3k9g1tx PJx4iAcTtOx2JcGcncLnmWf54ezVOuoi59qGFKA1cvpVg9lS80b19M6xF9CW9NjU YwW358dAP9x/XRLThYXpgkWl4GtSSTMzRwP9vw4KYqkD66a0rA8LP16C5dIho1Fi Hn1VMiV4GD2W539IF9k9grV9FX5DrCHfrZ4pVI+4Wp5/3hvRnIdFOYTCJeePXRq+ hb9BfUmPaMmxQ6hx/Jznm4tRvJICBsARVA5zR1EXbanNICz6gG4U1V55Gqj7AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU7p5IJGqPj2f5rj8URwZyLiGIP/0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzQ0OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQAcwDQYJKoZIhvcNAQELBQADggEBAH4/xCwlB9ydanUT//c6wanT dbdZDbFiWxbVJ+MKlTIAumIOmIItXfjzl6t6YS5VDxxYAt+iLeDJmDCWMFjr+Ae2 2vS8JaeJzVaZSyC9tPPya5vnnO5sNAehD6sXAHbuLy+F7EiNF5f4VkH7SKqsovlu lJJYWa9hGVshSgkX3aMdHklFgMOjKplyRCuqS6dhsXXaMalqKQEwZun6TWJWoYNK uO1nJln0vKPwnH0jakC996HXoKX/2B1waBsv9MCzr5ohYJ4E6/rOM9wKK/1vZbiS 7qspE2ioT/6p9Dkoy7T14HRBRISZ0xW6knKZSZBm0tui9TSzeBQcOPFjhvQx3fo= -----END CERTIFICATE-----Generated at Sat Nov 7 13:19:55 2026 by rpki-client