$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: UFhmftO2ErvDvp3gBBKubk8p4e0eYB9dPxiDQxf5F5Y= Subject key identifier: 58:C4:D1:16:CF:4D:FF:FF:D1:1E:6F:D0:70:7C:DB:16:3F:1E:D6:33 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 725DD5FA015B0FAAB5FB3802F20E377DC6400EC2 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa Signing time: Sat 10 Oct 2026 09:09:26 +0000 ROA not before: Sat 10 Oct 2026 09:04:26 +0000 ROA not after: Sat 09 Oct 2027 09:09:26 +0000 asID: 212238 IP address blocks: 79.176.255.0/24 maxlen: 24 79.182.7.0/24 maxlen: 24 79.182.8.0/24 maxlen: 24 79.182.18.0/24 maxlen: 24 79.182.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 15:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5d:d5:fa:01:5b:0f:aa:b5:fb:38:02:f2:0e:37:7d:c6:40:0e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 10 09:04:26 2026 GMT Not After : Oct 9 09:09:26 2027 GMT Subject: CN=58C4D116CF4DFFFFD11E6FD0707CDB163F1ED633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:b4:ad:eb:38:f5:db:18:44:31:84:f5:14: ad:9c:f5:28:90:43:e3:0e:e8:9c:0e:60:85:ca:72: 59:80:69:8e:ce:08:59:db:2e:df:36:91:d8:93:d0: cd:a9:12:30:3c:66:2a:12:d0:27:84:46:79:93:a1: 00:63:39:65:f7:0b:8c:41:37:d8:9c:ee:16:45:cd: 2c:5c:95:9c:4a:d4:79:ed:b8:a7:96:da:ba:99:ee: 67:a7:47:43:56:35:a7:6f:5e:c0:73:b4:b8:42:72: 5c:12:53:35:dd:bc:8b:ab:75:2e:f9:39:66:d1:9a: 3d:cd:5d:52:cc:b7:ef:e6:28:2c:bd:3d:c7:4b:da: 54:ee:a2:a0:fb:60:26:e6:f1:40:3f:d9:4d:c0:e1: 3f:ea:5f:8c:66:06:7d:af:a5:3e:69:cf:ba:64:f2: cb:a1:e8:e2:e0:23:47:81:a1:72:8e:4a:42:02:46: 6e:02:2f:9c:75:2b:4f:e4:6a:6d:3e:c7:4a:de:10: e2:59:1b:04:51:55:19:46:5f:6f:3f:bd:b5:9d:10: 7d:02:8c:48:f9:5d:ed:78:ba:39:96:cb:0c:ac:85: 53:fc:90:d9:38:b1:40:c8:34:07:19:e7:91:dd:c7: bb:1f:5b:06:95:48:19:cf:67:0b:c0:da:93:39:78: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C4:D1:16:CF:4D:FF:FF:D1:1E:6F:D0:70:7C:DB:16:3F:1E:D6:33 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.255.0/24 79.182.7.0-79.182.8.255 79.182.18.0/24 79.182.38.0/24 Signature Algorithm: sha256WithRSAEncryption 00:08:1d:8f:1c:25:1f:08:d9:bd:00:56:f8:e3:46:c7:43:6a: 52:6b:d8:17:13:37:85:45:57:d2:c1:8b:9a:26:a0:f9:d5:ed: 19:f8:7d:17:60:2f:f9:7b:2e:66:c3:20:ec:79:7f:df:88:4e: 5a:45:30:89:a9:59:14:cc:48:3c:32:b1:bb:b7:49:30:04:10: 84:f6:38:84:d5:c7:43:f0:3d:50:7f:a2:42:f4:38:76:6b:97: 87:ac:8b:94:35:f9:d3:b7:a7:ec:4d:dd:cf:93:d5:d2:37:33: a3:94:03:0b:fd:7c:ba:4f:4d:77:c8:df:f7:6a:b4:b5:a3:91: 3c:70:43:a8:f7:79:22:ec:ef:3e:9d:15:31:49:df:d6:d5:d1: 72:d1:c2:24:84:89:58:6d:fc:22:24:7a:65:5e:b2:15:80:bf: 51:0a:f6:06:79:6e:cb:07:35:c9:02:a2:83:de:54:b1:b2:13: 1d:8a:0a:3b:0b:65:2c:ba:c1:08:84:f1:98:bb:d3:3d:09:8b: eb:d1:75:0b:36:65:42:9e:e8:32:c0:b0:65:a9:8f:cf:fd:aa: a3:79:dd:25:2a:dd:4b:5c:7c:7e:58:24:8e:69:56:71:e2:03: 4b:93:1d:3c:37:c9:fa:95:3b:cc:8f:b9:8c:51:5a:2d:92:42: a4:9a:7d:41 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUcl3V+gFbD6q1+zgC8g43fcZADsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTAwOTA0MjZaFw0yNzEwMDkwOTA5MjZaMDMxMTAvBgNV BAMTKDU4QzREMTE2Q0Y0REZGRkZEMTFFNkZEMDcwN0NEQjE2M0YxRUQ2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBLSt6zj12xhEMYT1FK2c9SiQ Q+MO6JwOYIXKclmAaY7OCFnbLt82kdiT0M2pEjA8ZioS0CeERnmToQBjOWX3C4xB N9ic7hZFzSxclZxK1HntuKeW2rqZ7menR0NWNadvXsBztLhCclwSUzXdvIurdS75 OWbRmj3NXVLMt+/mKCy9PcdL2lTuoqD7YCbm8UA/2U3A4T/qX4xmBn2vpT5pz7pk 8suh6OLgI0eBoXKOSkICRm4CL5x1K0/kam0+x0reEOJZGwRRVRlGX28/vbWdEH0C jEj5Xe14ujmWywyshVP8kNk4sUDINAcZ55Hdx7sfWwaVSBnPZwvA2pM5eAJxAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUWMTRFs9N///RHm/QcHzbFj8e1jMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTIyMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMCYE AgABMCADBABPsP8wDAMEAE+2BwMEAE+2CAMEAE+2EgMEAE+2JjANBgkqhkiG9w0B AQsFAAOCAQEAAAgdjxwlHwjZvQBW+ONGx0NqUmvYFxM3hUVX0sGLmiag+dXtGfh9 F2Av+XsuZsMg7Hl/34hOWkUwialZFMxIPDKxu7dJMAQQhPY4hNXHQ/A9UH+iQvQ4 dmuXh6yLlDX507en7E3dz5PV0jczo5QDC/18uk9Nd8jf92q0taORPHBDqPd5Iuzv Pp0VMUnf1tXRctHCJISJWG38IiR6ZV6yFYC/UQr2Bnluywc1yQKig95UsbITHYoK OwtlLLrBCITxmLvTPQmL69F1CzZlQp7oMsCwZamPz/2qo3ndJSrdS1x8flgkjmlW ceIDS5MdPDfJ+pU7zI+5jFFaLZJCpJp9QQ== -----END CERTIFICATE-----Generated at Wed Oct 14 06:44:49 2026 by rpki-client