$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207994.roa File: AS207994.roa (raw, json) Hash identifier: UiIIwN4mxsiETVKvwnKhtDRc5AMB2RBffLaq0gqw9FU= Subject key identifier: 4B:23:4A:57:4E:2E:5B:0C:10:64:8C:C7:5E:9B:77:FB:2A:05:03:D1 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 30951A6E8BDDBF4712BED7C87CBB6B5EC5E8AE9B Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207994.roa Signing time: Wed 28 Oct 2026 12:13:48 +0000 ROA not before: Wed 28 Oct 2026 12:08:48 +0000 ROA not after: Wed 27 Oct 2027 12:13:48 +0000 asID: 207994 IP address blocks: 79.182.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:95:1a:6e:8b:dd:bf:47:12:be:d7:c8:7c:bb:6b:5e:c5:e8:ae:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 28 12:08:48 2026 GMT Not After : Oct 27 12:13:48 2027 GMT Subject: CN=4B234A574E2E5B0C10648CC75E9B77FB2A0503D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:b2:73:c5:ff:f2:96:1f:f6:ad:f9:22:dc: d2:da:c4:b6:40:94:2e:a2:70:2f:58:b7:2a:ca:46: f1:22:73:41:b0:62:5c:04:5b:40:a4:01:26:b9:cb: b4:2a:0e:0a:f8:bd:08:92:42:4f:2d:31:48:34:27: 03:59:8b:53:02:a1:f4:4b:0c:3c:c2:9c:4c:d3:32: 63:8b:38:1a:61:59:a1:69:cb:8e:17:d5:ec:84:8a: 81:95:0b:ee:67:14:30:d2:1f:b1:17:76:94:3c:f9: b1:de:89:08:4d:07:73:90:e7:ed:65:bc:13:4c:a0: af:7d:fa:17:53:6d:29:3f:c1:f3:a7:ca:d5:10:e2: 68:08:86:5a:26:80:07:b5:e4:7b:35:9e:07:6a:53: 30:3d:cd:d4:2f:f3:6f:25:41:e3:04:e8:e7:2f:d2: 26:54:c2:4f:93:3e:fc:b0:39:b2:31:1b:6e:c8:21: 3d:36:d6:dd:71:e6:2d:03:00:86:8e:51:6a:72:0e: 26:74:7e:be:94:80:1e:67:2b:90:1b:d4:74:35:82: c4:b7:56:88:fd:83:42:33:73:ec:cd:95:f1:b9:d9: c8:82:f6:ff:29:e2:31:05:4a:25:6c:d7:8d:c4:e4: 9c:65:5c:4f:19:33:d3:89:27:6b:fd:f6:71:eb:fb: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:4A:57:4E:2E:5B:0C:10:64:8C:C7:5E:9B:77:FB:2A:05:03:D1 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS207994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.10.0/24 Signature Algorithm: sha256WithRSAEncryption 60:39:01:df:fc:7f:f1:ed:2c:9b:9a:b3:d4:56:47:06:36:cf: e6:71:63:38:1d:ac:bc:eb:9e:f3:e4:19:bc:43:32:bf:05:d6: 42:c4:15:bd:52:0e:16:be:6b:e8:46:12:15:ce:72:9a:10:2c: 95:2d:12:3e:fb:9f:e1:8c:38:51:40:d7:00:a5:7f:bb:e2:e3: 78:b9:13:99:d5:b4:28:4d:73:27:f2:e2:e4:9f:cf:a5:02:a6: 8b:f0:c0:73:b8:3e:5c:d7:6f:95:ea:d7:b4:30:d5:5c:85:da: 33:4d:2f:96:80:b2:9c:cc:31:fd:f0:4f:37:b3:d0:14:28:9c: 8f:0a:d4:06:42:31:e4:99:28:79:9a:a1:92:fc:40:1d:84:62: a8:8e:21:4e:8f:a6:13:a8:5d:64:ef:7d:9a:45:22:79:2f:86: aa:06:3b:73:47:59:c5:16:26:12:96:6c:38:c9:6a:59:11:86: b3:49:b4:f3:6f:c7:3a:87:08:6a:db:b2:89:0c:70:dc:90:9a: 38:7b:a1:90:a2:bb:49:6a:cb:51:3e:5e:15:11:19:dd:cc:05: 22:5e:f4:20:80:90:ee:ab:c8:11:57:90:71:63:67:df:fb:cc: df:d9:09:86:31:69:c4:3d:f4:2d:b2:6d:78:1b:98:56:28:07: 46:e4:3e:4e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUMJUabovdv0cSvtfIfLtrXsXorpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjgxMjA4NDhaFw0yNzEwMjcxMjEzNDhaMDMxMTAvBgNV BAMTKDRCMjM0QTU3NEUyRTVCMEMxMDY0OENDNzVFOUI3N0ZCMkEwNTAzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BbJzxf/ylh/2rfki3NLaxLZA lC6icC9YtyrKRvEic0GwYlwEW0CkASa5y7QqDgr4vQiSQk8tMUg0JwNZi1MCofRL DDzCnEzTMmOLOBphWaFpy44X1eyEioGVC+5nFDDSH7EXdpQ8+bHeiQhNB3OQ5+1l vBNMoK99+hdTbSk/wfOnytUQ4mgIhlomgAe15Hs1ngdqUzA9zdQv828lQeME6Ocv 0iZUwk+TPvywObIxG27IIT021t1x5i0DAIaOUWpyDiZ0fr6UgB5nK5Ab1HQ1gsS3 Voj9g0Izc+zNlfG52ciC9v8p4jEFSiVs143E5JxlXE8ZM9OJJ2v99nHr+6qHAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUSyNKV04uWwwQZIzHXpt3+yoFA9EwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDc5OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtgowDQYJKoZIhvcNAQELBQADggEBAGA5Ad/8f/HtLJuas9RWRwY2 z+ZxYzgdrLzrnvPkGbxDMr8F1kLEFb1SDha+a+hGEhXOcpoQLJUtEj77n+GMOFFA 1wClf7vi43i5E5nVtChNcyfy4uSfz6UCpovwwHO4PlzXb5Xq17Qw1VyF2jNNL5aA spzMMf3wTzez0BQonI8K1AZCMeSZKHmaoZL8QB2EYqiOIU6PphOoXWTvfZpFInkv hqoGO3NHWcUWJhKWbDjJalkRhrNJtPNvxzqHCGrbsokMcNyQmjh7oZCiu0lqy1E+ XhURGd3MBSJe9CCAkO6ryBFXkHFjZ9/7zN/ZCYYxacQ99C2ybXgbmFYoB0bkPk4= -----END CERTIFICATE-----Generated at Sun Nov 8 06:47:23 2026 by rpki-client