$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS174.roa File: AS174.roa (raw, json) Hash identifier: lecU7XJ/bXenXUdm4dO3fhBYzrcI4S9LXn0HrWNWSy8= Subject key identifier: C2:0D:89:66:DA:3E:60:A2:14:6A:1B:9B:EB:FB:7A:79:E3:47:94:7E Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1558C86E7364C097FDBCAF3704EBE41456AAA743 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS174.roa Signing time: Thu 29 Oct 2026 08:56:56 +0000 ROA not before: Thu 29 Oct 2026 08:51:56 +0000 ROA not after: Thu 28 Oct 2027 08:56:56 +0000 asID: 174 IP address blocks: 79.180.120.0/22 maxlen: 24 79.183.24.0/22 maxlen: 24 109.65.48.0/22 maxlen: 24 109.66.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:58:c8:6e:73:64:c0:97:fd:bc:af:37:04:eb:e4:14:56:aa:a7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 29 08:51:56 2026 GMT Not After : Oct 28 08:56:56 2027 GMT Subject: CN=C20D8966DA3E60A2146A1B9BEBFB7A79E347947E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:04:a4:2c:bc:e2:70:94:11:5e:63:e8:e7:3f: f2:d0:8d:6e:ce:77:b4:24:97:2a:9c:ab:f1:2d:f8: f7:bb:b3:db:0f:c5:c7:cb:56:63:36:ba:26:a8:44: a7:0d:4b:4b:32:f4:09:b3:06:84:eb:01:ca:0e:dc: 38:7d:d6:0c:b5:23:a5:f4:37:1c:51:d9:32:e1:7c: 09:f0:d2:52:4c:a7:3e:51:8f:5b:db:b0:0b:ef:ef: b1:99:aa:61:f9:92:40:d5:80:c2:70:e2:02:1e:d9: 86:fa:24:b4:07:9f:a9:0f:7b:68:22:95:48:b5:60: 79:a7:87:79:79:a0:a7:43:5a:36:2b:b6:c7:7e:e7: e3:d3:71:e5:de:7a:67:df:a3:b0:5a:93:5c:52:19: 0e:42:6e:85:93:ba:a7:72:79:a2:6a:42:65:16:3a: 7a:dc:8a:ce:cd:66:4d:ae:3d:6a:1d:93:dd:01:3c: 41:b9:98:5e:40:4e:94:4c:f1:7a:6b:e5:3c:bb:f7: 59:05:83:55:7c:af:18:14:d6:61:10:3b:05:d5:d7: 00:3e:70:bc:31:cc:20:4a:60:a7:cf:17:7d:3f:ea: 37:6f:00:c7:75:8e:43:d2:49:b0:fa:15:2f:5e:e1: 01:85:fe:36:c1:72:8b:96:1e:95:50:d3:4b:f3:70: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0D:89:66:DA:3E:60:A2:14:6A:1B:9B:EB:FB:7A:79:E3:47:94:7E X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.120.0/22 79.183.24.0/22 109.65.48.0/22 109.66.252.0/24 Signature Algorithm: sha256WithRSAEncryption de:88:f9:c9:ad:af:d4:e4:5b:f5:d8:6e:a5:52:0e:82:5e:fe: d2:83:ed:11:52:7a:6c:a1:b5:1d:80:11:8e:63:cb:7e:36:4a: c8:d7:06:ae:2e:cd:d4:92:fd:7f:78:43:b8:4e:8b:ba:4c:1f: 34:8e:04:64:a9:ba:c0:ed:30:a7:f8:e5:27:22:6c:11:ce:c1: 36:d5:fb:aa:22:a8:03:ed:ea:fc:af:51:f3:0c:f5:69:e8:02: c0:6e:5a:4b:c3:35:73:c2:cd:92:af:cb:ae:1e:f4:dd:01:e8: da:f1:48:90:22:0e:c6:40:54:16:be:61:da:18:ea:62:72:9e: 57:d5:64:af:a0:a7:c7:83:94:0e:52:a6:9e:8b:79:c0:44:ea: 46:83:f6:8a:f0:6f:7c:27:08:aa:f5:5b:7b:6b:01:ed:c2:8e: 60:1e:06:39:53:e0:21:e1:39:d8:ad:0a:ce:dd:44:15:ea:51: be:fd:06:68:4c:16:8d:4a:d3:3d:a8:b8:ea:72:dc:77:bd:68: 11:5c:b5:8a:7c:14:dc:1e:ed:75:0c:8c:4e:8a:ad:31:75:85: 6c:0b:e9:7e:89:48:8c:09:11:a2:ed:45:16:a0:d1:d9:08:02: fc:ed:5d:1c:83:b0:cd:aa:c9:57:5b:fd:c3:94:1e:ed:1b:15: 33:cd:b6:65 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUFVjIbnNkwJf9vK83BOvkFFaqp0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjkwODUxNTZaFw0yNzEwMjgwODU2NTZaMDMxMTAvBgNV BAMTKEMyMEQ4OTY2REEzRTYwQTIxNDZBMUI5QkVCRkI3QTc5RTM0Nzk0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBKQsvOJwlBFeY+jnP/LQjW7O d7Qklyqcq/Et+Pe7s9sPxcfLVmM2uiaoRKcNS0sy9AmzBoTrAcoO3Dh91gy1I6X0 NxxR2TLhfAnw0lJMpz5Rj1vbsAvv77GZqmH5kkDVgMJw4gIe2Yb6JLQHn6kPe2gi lUi1YHmnh3l5oKdDWjYrtsd+5+PTceXeemffo7Bak1xSGQ5CboWTuqdyeaJqQmUW Onrcis7NZk2uPWodk90BPEG5mF5ATpRM8Xpr5Ty791kFg1V8rxgU1mEQOwXV1wA+ cLwxzCBKYKfPF30/6jdvAMd1jkPSSbD6FS9e4QGF/jbBcouWHpVQ00vzcKaJAgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUwg2JZto+YKIUahub6/t6eeNHlH4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuG XHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgAB MBgDBAJPtHgDBAJPtxgDBAJtQTADBABtQvwwDQYJKoZIhvcNAQELBQADggEBAN6I +cmtr9TkW/XYbqVSDoJe/tKD7RFSemyhtR2AEY5jy342SsjXBq4uzdSS/X94Q7hO i7pMHzSOBGSpusDtMKf45ScibBHOwTbV+6oiqAPt6vyvUfMM9WnoAsBuWkvDNXPC zZKvy64e9N0B6NrxSJAiDsZAVBa+YdoY6mJynlfVZK+gp8eDlA5Spp6LecBE6kaD 9orwb3wnCKr1W3trAe3CjmAeBjlT4CHhOditCs7dRBXqUb79BmhMFo1K0z2ouOpy 3He9aBFctYp8FNwe7XUMjE6KrTF1hWwL6X6JSIwJEaLtRRag0dkIAvztXRyDsM2q yVdb/cOUHu0bFTPNtmU= -----END CERTIFICATE-----Generated at Thu Nov 5 08:57:58 2026 by rpki-client