$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS213323.roa File: AS213323.roa (raw, json) Hash identifier: PWKPEFAh91yX8FsLm5FJbQ8lz6HXW7BdIcSKeTMfL+c= Subject key identifier: 1E:0E:FC:F1:B6:D6:3B:4C:E1:89:3A:14:50:76:26:5E:BE:44:12:40 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 54B2D25661D4ADBBCE192613C0F9D6E13701BF84 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS213323.roa Signing time: Sun 25 Oct 2026 02:22:10 +0000 ROA not before: Sun 25 Oct 2026 02:17:10 +0000 ROA not after: Sun 24 Oct 2027 02:22:10 +0000 asID: 213323 IP address blocks: 79.182.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b2:d2:56:61:d4:ad:bb:ce:19:26:13:c0:f9:d6:e1:37:01:bf:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 25 02:17:10 2026 GMT Not After : Oct 24 02:22:10 2027 GMT Subject: CN=1E0EFCF1B6D63B4CE1893A145076265EBE441240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:f7:b0:fd:b3:a7:c2:56:d6:b7:a9:88:3e: 69:9c:23:1a:87:fe:aa:7e:c5:ce:fa:5d:60:ef:a8: 71:06:8e:47:5e:36:9b:f7:e5:69:3e:74:5a:4f:94: b2:d1:3f:f8:8c:3c:98:78:3f:96:8f:f5:9f:17:73: c0:10:20:a4:8d:ef:30:64:cb:c1:f1:82:a1:c6:a6: 98:23:98:6a:83:cd:1f:0e:b8:a7:af:17:35:9d:63: e1:8e:fb:27:db:36:e0:66:84:55:10:52:48:fa:19: 54:d0:09:0a:65:4a:ba:46:c6:ed:14:f8:d6:be:0b: 37:6a:95:69:c3:7f:de:c4:f1:17:f6:d8:38:74:04: 71:2c:14:b0:70:92:ab:58:8f:c4:63:a7:f1:47:cb: 14:19:0d:39:90:bd:ca:0f:1b:b7:87:1a:b6:eb:24: 45:cd:af:1b:dc:42:ea:d0:b0:c0:db:a7:18:12:cb: c5:99:a2:fc:4d:63:f9:f9:4e:12:e6:fc:c8:e6:b3: db:29:d3:67:b2:eb:03:48:9c:81:3e:71:8f:36:53: 19:99:24:68:31:72:e7:d0:fc:c5:0c:0f:d8:56:e1: 44:97:2c:57:16:f2:f9:dc:be:bd:ef:70:bb:f4:62: d4:c7:25:1e:01:5a:80:b6:e1:fe:fd:b5:7a:98:6d: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0E:FC:F1:B6:D6:3B:4C:E1:89:3A:14:50:76:26:5E:BE:44:12:40 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS213323.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.71.0/24 Signature Algorithm: sha256WithRSAEncryption b7:f6:47:06:7f:3c:f2:c6:82:b5:37:d4:e9:18:36:9a:b6:eb: a6:79:77:8a:fb:09:9c:ad:a4:e2:02:0d:12:04:dd:16:c4:01: 60:59:21:20:fa:6e:b4:bf:4a:23:fb:ac:d0:7b:ed:23:a7:35: 5e:f0:d8:29:30:c0:9c:bb:5f:5b:8f:4c:d0:2b:f1:db:e3:64: 02:d5:40:86:5a:78:75:28:84:5a:0a:17:f6:35:75:95:b8:22: 48:c1:40:d6:49:7a:c6:83:81:25:78:53:18:56:d7:31:cf:ff: 8f:a1:8e:41:96:6e:3d:e4:99:ea:8e:91:f3:4e:cb:4a:c0:4e: 87:80:53:fd:eb:17:7c:d8:fc:e2:03:b0:0c:27:2a:9f:98:51: b9:9f:24:b6:9d:62:1b:18:3f:d2:5a:2c:53:0e:8e:aa:5e:cb: e6:d0:a9:61:f6:f7:c3:a2:71:dd:6d:9f:e5:62:64:24:dc:a1: 6d:c0:5b:22:7a:2c:89:ea:9e:ea:06:53:74:01:62:24:3e:a5: d7:59:35:1b:dd:9a:7f:9b:c1:43:56:de:56:60:d3:b7:b4:34: 73:8f:3c:dd:25:04:8a:05:cb:79:56:99:7a:87:92:62:23:bb: 02:97:87:6a:bc:90:68:6c:e4:80:85:57:7e:35:91:65:e6:f1: 49:49:64:c6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUVLLSVmHUrbvOGSYTwPnW4TcBv4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjUwMjE3MTBaFw0yNzEwMjQwMjIyMTBaMDMxMTAvBgNV BAMTKDFFMEVGQ0YxQjZENjNCNENFMTg5M0ExNDUwNzYyNjVFQkU0NDEyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUYfew/bOnwlbWt6mIPmmcIxqH /qp+xc76XWDvqHEGjkdeNpv35Wk+dFpPlLLRP/iMPJh4P5aP9Z8Xc8AQIKSN7zBk y8HxgqHGppgjmGqDzR8OuKevFzWdY+GO+yfbNuBmhFUQUkj6GVTQCQplSrpGxu0U +Na+CzdqlWnDf97E8Rf22Dh0BHEsFLBwkqtYj8Rjp/FHyxQZDTmQvcoPG7eHGrbr JEXNrxvcQurQsMDbpxgSy8WZovxNY/n5ThLm/Mjms9sp02ey6wNInIE+cY82UxmZ JGgxcufQ/MUMD9hW4USXLFcW8vncvr3vcLv0YtTHJR4BWoC24f79tXqYbYBrAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUHg788bbWO0zhiToUUHYmXr5EEkAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTMzMjMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtkcwDQYJKoZIhvcNAQELBQADggEBALf2RwZ/PPLGgrU31OkYNpq2 66Z5d4r7CZytpOICDRIE3RbEAWBZISD6brS/SiP7rNB77SOnNV7w2CkwwJy7X1uP TNAr8dvjZALVQIZaeHUohFoKF/Y1dZW4IkjBQNZJesaDgSV4UxhW1zHP/4+hjkGW bj3kmeqOkfNOy0rAToeAU/3rF3zY/OIDsAwnKp+YUbmfJLadYhsYP9JaLFMOjqpe y+bQqWH298Oicd1tn+ViZCTcoW3AWyJ6LInqnuoGU3QBYiQ+pddZNRvdmn+bwUNW 3lZg07e0NHOPPN0lBIoFy3lWmXqHkmIjuwKXh2q8kGhs5ICFV341kWXm8UlJZMY= -----END CERTIFICATE-----Generated at Sat Nov 7 14:24:21 2026 by rpki-client