$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS201667.roa File: AS201667.roa (raw, json) Hash identifier: o5nkc6hvIEjX+IaFNivHvtp+Vb0ktxh6BWjWla63Eok= Subject key identifier: 52:9A:D7:E9:97:16:52:E7:AA:FA:31:1B:67:BF:D6:53:C0:07:ED:4A Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 074567E8F5EDE766CEAAAEA048F0A92C2EBB2D75 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS201667.roa Signing time: Thu 05 Nov 2026 14:32:33 +0000 ROA not before: Thu 05 Nov 2026 14:27:33 +0000 ROA not after: Thu 04 Nov 2027 14:32:33 +0000 asID: 201667 IP address blocks: 109.65.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Nov 2026 20:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:45:67:e8:f5:ed:e7:66:ce:aa:ae:a0:48:f0:a9:2c:2e:bb:2d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 5 14:27:33 2026 GMT Not After : Nov 4 14:32:33 2027 GMT Subject: CN=529AD7E9971652E7AAFA311B67BFD653C007ED4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:36:e8:22:20:45:54:5c:f2:04:d6:64:34: f7:1d:2b:88:f7:25:7f:01:00:b0:d0:2a:e4:ff:73: 6e:6e:b3:f1:d4:64:61:18:6c:b7:2f:5b:d4:27:b1: 8c:4d:92:44:4b:b5:b1:a0:79:30:9a:9f:18:2a:6e: ea:6c:9f:b5:a1:96:8e:a8:f0:54:0c:36:7f:81:05: 51:96:7b:db:83:af:54:d8:04:1d:fb:5e:3c:92:85: c9:94:8c:0f:e8:6a:9a:90:ef:87:43:ef:dc:b5:24: 39:fe:43:75:6a:e7:b8:96:22:60:52:6f:30:dc:96: 7b:04:86:f4:d5:43:69:10:1b:b6:96:fe:14:07:0b: d3:ac:8a:92:99:57:02:80:15:47:e6:2a:11:c4:da: f1:ce:f0:17:5c:16:de:88:8e:e0:06:67:fb:6b:fb: e6:55:4a:0a:34:94:9e:36:49:13:7e:33:c2:b5:2e: 21:0a:f5:16:0b:1a:19:ee:d4:e5:7b:70:2b:41:10: 07:6f:e5:e3:ea:6a:3f:93:34:68:67:76:4a:36:1d: 44:49:d6:4c:9a:27:4f:09:7e:13:aa:9f:f7:5a:ed: 0f:57:30:9c:33:ab:a1:64:82:87:66:f7:da:78:e7: 09:7f:08:f7:5d:03:ba:a8:fd:7c:01:f4:d3:33:1f: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9A:D7:E9:97:16:52:E7:AA:FA:31:1B:67:BF:D6:53:C0:07:ED:4A X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS201667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.66.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:29:8c:5f:0a:fa:32:98:bd:73:03:72:14:a6:cd:e0:01:77: af:c3:06:94:56:36:b4:49:c3:36:66:e1:6b:de:82:f2:6b:02: 79:65:94:8a:4d:54:13:e9:53:43:6d:76:bf:84:4e:76:3f:f0: 63:67:be:95:5b:c2:97:f1:1c:74:e9:6d:e6:3a:92:6c:26:99: ea:38:81:10:fb:50:b8:4a:89:5e:39:98:71:4a:c2:0d:4c:da: 10:a3:9a:69:a8:aa:9b:f0:6d:1c:78:ad:b1:a3:76:31:18:96: b1:a8:3d:ee:a3:73:63:b3:97:f3:24:66:6f:ce:72:a3:a2:16: 88:42:58:b3:02:84:17:a4:a2:53:58:40:b3:62:c9:27:15:61: 12:a7:a2:5f:83:5e:0f:97:79:d1:d2:75:b0:b6:a5:38:d5:ce: c8:19:4a:c5:9b:6c:66:e3:73:39:da:d4:89:ab:d0:46:c4:ea: 8f:0b:d6:0f:28:eb:aa:90:5b:8d:0b:21:38:87:39:85:87:54: 8e:e5:e2:78:95:5e:0d:fa:ca:8d:a8:45:b0:c7:ec:b6:4f:5b: a1:77:7f:f3:80:6c:fa:90:d6:ef:8d:cc:10:4d:a7:e0:7e:da: 70:a9:0f:d6:f8:3b:24:bf:92:dd:59:24:14:91:9a:4e:a5:b6: 89:79:7e:3e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUB0Vn6PXt52bOqq6gSPCpLC67LXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDUxNDI3MzNaFw0yNzExMDQxNDMyMzNaMDMxMTAvBgNV BAMTKDUyOUFEN0U5OTcxNjUyRTdBQUZBMzExQjY3QkZENjUzQzAwN0VENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XTboIiBFVFzyBNZkNPcdK4j3 JX8BALDQKuT/c25us/HUZGEYbLcvW9QnsYxNkkRLtbGgeTCanxgqbupsn7Whlo6o 8FQMNn+BBVGWe9uDr1TYBB37XjyShcmUjA/oapqQ74dD79y1JDn+Q3Vq57iWImBS bzDclnsEhvTVQ2kQG7aW/hQHC9OsipKZVwKAFUfmKhHE2vHO8BdcFt6IjuAGZ/tr ++ZVSgo0lJ42SRN+M8K1LiEK9RYLGhnu1OV7cCtBEAdv5ePqaj+TNGhndko2HURJ 1kyaJ08JfhOqn/da7Q9XMJwzq6Fkgodm99p45wl/CPddA7qo/XwB9NMzH6+NAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUUprX6ZcWUueq+jEbZ7/WU8AH7UowHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDE2Njcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQUIwDQYJKoZIhvcNAQELBQADggEBAE4pjF8K+jKYvXMDchSmzeAB d6/DBpRWNrRJwzZm4WvegvJrAnlllIpNVBPpU0Ntdr+ETnY/8GNnvpVbwpfxHHTp beY6kmwmmeo4gRD7ULhKiV45mHFKwg1M2hCjmmmoqpvwbRx4rbGjdjEYlrGoPe6j c2Ozl/MkZm/OcqOiFohCWLMChBekolNYQLNiyScVYRKnol+DXg+XedHSdbC2pTjV zsgZSsWbbGbjczna1Imr0EbE6o8L1g8o66qQW40LITiHOYWHVI7l4niVXg36yo2o RbDH7LZPW6F3f/OAbPqQ1u+NzBBNp+B+2nCpD9b4OyS/kt1ZJBSRmk6ltol5fj4= -----END CERTIFICATE-----Generated at Mon Nov 9 08:26:55 2026 by rpki-client