$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: tEtBZZu1+/2wBiQ9Upa9w7NfLVdVhdm3az0caqAKqjE= Subject key identifier: 9D:A4:C5:F3:84:A8:53:72:49:EE:61:6B:B9:1A:26:26:A1:BE:28:CE Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 19558E7BAA58D10556C769AEBCEA221006392416 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa Signing time: Sat 10 Oct 2026 02:33:09 +0000 ROA not before: Sat 10 Oct 2026 02:28:09 +0000 ROA not after: Sat 09 Oct 2027 02:33:09 +0000 asID: 147281 IP address blocks: 79.176.4.0/24 maxlen: 24 79.180.8.0/24 maxlen: 24 79.182.10.0/24 maxlen: 24 79.182.11.0/24 maxlen: 24 79.183.3.0/24 maxlen: 24 109.64.4.0/24 maxlen: 24 109.65.1.0/24 maxlen: 24 109.65.2.0/24 maxlen: 24 109.65.5.0/24 maxlen: 24 109.66.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:8e:7b:aa:58:d1:05:56:c7:69:ae:bc:ea:22:10:06:39:24:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 10 02:28:09 2026 GMT Not After : Oct 9 02:33:09 2027 GMT Subject: CN=9DA4C5F384A8537249EE616BB91A2626A1BE28CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:b9:73:fe:81:a7:e8:06:07:ca:0f:da:d9: e6:48:c1:4a:e9:5b:5e:ff:4a:86:8b:ae:36:5a:79: 02:5c:44:1b:4c:33:81:de:ea:6e:e8:24:52:e5:f0: 58:74:ce:48:e8:f6:93:fd:1a:e9:ff:be:fd:dd:8e: b5:df:22:fb:54:02:7e:76:26:e4:32:e0:5d:15:82: 2b:95:e3:f3:74:b6:54:f3:85:d5:90:67:5e:49:8c: 3d:8e:1b:64:93:5d:81:68:29:11:d8:37:3a:d3:8c: 5b:2c:6f:c2:8e:79:49:8d:dc:38:99:28:32:42:b8: 8c:ef:e5:f8:4e:d7:cc:04:19:8b:8b:47:f7:b8:18: e0:d1:ab:75:f1:7f:04:42:0f:3c:36:05:ea:4f:dd: e4:fb:c7:14:97:ed:60:d0:40:80:9f:15:d5:fd:a0: d3:e2:04:49:97:d4:20:76:75:12:9d:54:67:4a:a0: 81:35:d1:2d:f7:ca:cb:96:15:5c:c2:64:7a:7a:39: 5d:32:74:ad:79:2e:57:07:a0:bd:8c:ca:ce:55:f0: 6f:83:04:e3:bc:b5:ac:f8:b8:56:54:fe:7e:53:64: 38:8b:9c:f6:de:1d:62:ba:09:c3:b2:56:93:69:32: ad:35:0f:0b:a2:7c:4a:27:2b:83:19:04:a5:57:8e: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A4:C5:F3:84:A8:53:72:49:EE:61:6B:B9:1A:26:26:A1:BE:28:CE X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.4.0/24 79.180.8.0/24 79.182.10.0/23 79.183.3.0/24 109.64.4.0/24 109.65.1.0-109.65.2.255 109.65.5.0/24 109.66.42.0/24 Signature Algorithm: sha256WithRSAEncryption da:cd:f2:29:8c:67:87:13:f1:16:07:0d:6d:3c:7c:0b:0d:c5: c3:01:eb:41:c4:3a:c0:88:5a:04:5b:5c:9f:28:f6:4e:00:70: 1f:97:3e:f1:ba:c6:9d:dc:b7:d3:4f:95:04:09:43:2c:5a:a3: ec:75:82:6c:be:14:e1:78:c6:34:ed:32:2a:25:f2:57:1c:1c: 5a:23:9c:1d:a9:2d:be:cb:fc:3a:0c:5a:dd:e4:f1:01:0e:76: 8f:e3:08:71:25:5e:0a:22:e5:86:47:e6:4c:90:4b:da:10:bd: a2:d1:46:32:d4:6b:d1:b3:04:5f:95:e5:60:6c:54:11:eb:c9: a2:08:13:73:13:a9:a2:0e:26:ff:ca:0f:c0:dc:e8:a6:29:97: 2c:6e:08:d9:93:07:e4:c8:6d:a7:00:f1:2f:01:a8:5c:16:06: 71:3b:27:60:15:04:71:db:cd:5a:d3:e9:31:fc:b8:5d:a8:c4: 73:f9:aa:9f:9e:29:56:09:8d:bc:49:e2:12:70:b2:00:75:8e: 2e:67:15:b2:4b:0c:a3:a9:d6:a8:20:23:f6:d9:dc:e9:2d:42: 28:4e:23:b9:1c:eb:aa:39:14:29:6b:36:46:7e:f5:75:b1:bb: b8:e1:13:e3:f7:c6:a9:c8:c6:cc:ec:c2:74:6c:50:8b:64:e7: 80:88:91:72 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGVWOe6pY0QVWx2muvOoiEAY5JBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTAwMjI4MDlaFw0yNzEwMDkwMjMzMDlaMDMxMTAvBgNV BAMTKDlEQTRDNUYzODRBODUzNzI0OUVFNjE2QkI5MUEyNjI2QTFCRTI4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpS7lz/oGn6AYHyg/a2eZIwUrp W17/SoaLrjZaeQJcRBtMM4He6m7oJFLl8Fh0zkjo9pP9Gun/vv3djrXfIvtUAn52 JuQy4F0VgiuV4/N0tlTzhdWQZ15JjD2OG2STXYFoKRHYNzrTjFssb8KOeUmN3DiZ KDJCuIzv5fhO18wEGYuLR/e4GODRq3XxfwRCDzw2BepP3eT7xxSX7WDQQICfFdX9 oNPiBEmX1CB2dRKdVGdKoIE10S33ysuWFVzCZHp6OV0ydK15LlcHoL2Mys5V8G+D BOO8taz4uFZU/n5TZDiLnPbeHWK6CcOyVpNpMq01DwuifEonK4MZBKVXjuI9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUnaTF84SoU3JJ7mFruRomJqG+KM4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUQYIKwYBBQUHAQcBAf8EQjBAMD4E AgABMDgDBABPsAQDBABPtAgDBAFPtgoDBABPtwMDBABtQAQwDAMEAG1BAQMEAG1B AgMEAG1BBQMEAG1CKjANBgkqhkiG9w0BAQsFAAOCAQEA2s3yKYxnhxPxFgcNbTx8 Cw3FwwHrQcQ6wIhaBFtcnyj2TgBwH5c+8brGndy300+VBAlDLFqj7HWCbL4U4XjG NO0yKiXyVxwcWiOcHaktvsv8Ogxa3eTxAQ52j+MIcSVeCiLlhkfmTJBL2hC9otFG MtRr0bMEX5XlYGxUEevJoggTcxOpog4m/8oPwNzopimXLG4I2ZMH5MhtpwDxLwGo XBYGcTsnYBUEcdvNWtPpMfy4XajEc/mqn54pVgmNvEniEnCyAHWOLmcVsksMo6nW qCAj9tnc6S1CKE4juRzrqjkUKWs2Rn71dbG7uOET4/fGqcjGzOzCdGxQi2TngIiR cg== -----END CERTIFICATE-----Generated at Tue Oct 13 12:41:09 2026 by rpki-client