$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS213378.roa File: AS213378.roa (raw, json) Hash identifier: /nHSvpXzZZ1E0Rc4AYx0UmW7eLNth0z6qdUjrqfXRPU= Subject key identifier: A1:E2:30:59:1F:F0:FF:2C:A8:90:F8:50:65:6A:76:6E:27:30:B6:F5 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 42037D7FD5095D7F1BBD7A88E0BB58ACD5F7D1B4 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS213378.roa Signing time: Thu 08 Oct 2026 14:27:21 +0000 ROA not before: Thu 08 Oct 2026 14:22:21 +0000 ROA not after: Thu 07 Oct 2027 14:27:21 +0000 asID: 213378 IP address blocks: 79.176.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:03:7d:7f:d5:09:5d:7f:1b:bd:7a:88:e0:bb:58:ac:d5:f7:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 8 14:22:21 2026 GMT Not After : Oct 7 14:27:21 2027 GMT Subject: CN=A1E230591FF0FF2CA890F850656A766E2730B6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:3a:b5:e0:51:85:85:1a:bb:42:46:60:f0: 0e:e0:15:9c:0e:29:3a:a3:e6:53:39:c4:be:f9:b4: 56:d8:88:59:7b:ff:5a:e5:ee:80:d2:fd:ec:d4:30: 40:5e:21:fb:ef:1e:c0:bc:fc:c9:63:e5:0d:73:c9: a4:83:0c:27:43:00:be:fc:e8:e8:55:44:87:2e:8b: aa:d1:44:33:e4:f6:5a:71:39:8b:f3:fa:46:ae:48: a6:63:d0:2f:8a:0a:31:9a:88:ec:d3:79:7b:a3:06: 2b:41:2f:c5:0f:c3:a7:91:ab:07:37:ba:52:5d:f1: 9c:ed:4b:f0:4b:a7:9d:82:0b:4b:ee:78:f4:dd:3d: bd:cc:2e:fe:df:7b:96:3e:fc:e5:97:7c:04:c9:f9: 82:dc:b2:aa:a8:d6:bf:d3:cc:09:5f:e1:b0:9a:49: 5e:0c:a6:5a:93:51:42:e7:00:74:98:b6:6e:7f:46: 99:e9:47:70:31:a1:a7:3c:74:c1:f8:31:46:21:b2: 80:cd:9b:a8:b6:6e:0e:98:5b:f5:3d:33:20:7d:89: f2:b5:74:63:12:f8:c3:e5:72:16:fc:21:2d:a0:04: 56:3e:01:bb:f0:da:9c:35:c4:f4:75:ed:8d:8b:14: e6:18:94:77:18:68:5b:d1:07:f0:d3:80:79:18:58: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E2:30:59:1F:F0:FF:2C:A8:90:F8:50:65:6A:76:6E:27:30:B6:F5 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS213378.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.47.0/24 Signature Algorithm: sha256WithRSAEncryption d2:8b:dd:4a:94:c8:42:c6:38:c6:6b:b6:4b:2f:cc:d8:1e:bc: ef:35:5e:a2:8a:f6:59:87:58:02:f5:c3:02:ae:95:49:f1:df: 87:f8:54:f7:e4:12:50:bf:13:db:5c:bf:0a:8a:e9:a8:16:c8: 16:10:d7:38:69:d0:72:33:eb:d4:19:55:c6:d2:b8:53:34:5a: 0d:28:d9:69:b1:b4:6e:76:bb:5c:f4:ee:91:9e:01:97:0c:8e: 1e:0f:ad:53:12:da:18:bc:a7:30:99:e6:b1:4d:d3:29:90:bc: 2b:00:ee:05:fe:13:72:42:22:61:22:66:11:99:db:75:73:c6: 31:5e:b9:9b:98:16:59:db:c3:fb:10:1a:0c:69:f1:09:ad:67: 13:db:dd:07:af:56:56:1f:fb:ce:ad:99:c8:c0:c2:3c:a0:10: 90:2d:68:42:eb:aa:f8:84:83:f7:9c:7c:64:40:fe:ca:8e:ea: 71:81:50:38:04:57:de:f9:4a:13:c7:fd:63:61:fa:1a:54:6b: 04:ee:e1:67:59:a2:43:38:b4:9b:cb:58:85:00:18:aa:a5:60: cb:60:df:e9:40:31:2d:12:e7:e8:24:c5:fc:5d:62:c4:d4:cb: 19:f9:bd:c7:2f:c1:72:b4:94:42:8d:05:59:b3:0a:ba:9d:a7: 8c:8c:70:e8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUQgN9f9UJXX8bvXqI4LtYrNX30bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDgxNDIyMjFaFw0yNzEwMDcxNDI3MjFaMDMxMTAvBgNV BAMTKEExRTIzMDU5MUZGMEZGMkNBODkwRjg1MDY1NkE3NjZFMjczMEI2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PDq14FGFhRq7QkZg8A7gFZwO KTqj5lM5xL75tFbYiFl7/1rl7oDS/ezUMEBeIfvvHsC8/Mlj5Q1zyaSDDCdDAL78 6OhVRIcui6rRRDPk9lpxOYvz+kauSKZj0C+KCjGaiOzTeXujBitBL8UPw6eRqwc3 ulJd8ZztS/BLp52CC0vuePTdPb3MLv7fe5Y+/OWXfATJ+YLcsqqo1r/TzAlf4bCa SV4MplqTUULnAHSYtm5/RpnpR3Axoac8dMH4MUYhsoDNm6i2bg6YW/U9MyB9ifK1 dGMS+MPlchb8IS2gBFY+Abvw2pw1xPR17Y2LFOYYlHcYaFvRB/DTgHkYWEiRAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUoeIwWR/w/yyokPhQZWp2bicwtvUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTMzNzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPsC8wDQYJKoZIhvcNAQELBQADggEBANKL3UqUyELGOMZrtksvzNge vO81XqKK9lmHWAL1wwKulUnx34f4VPfkElC/E9tcvwqK6agWyBYQ1zhp0HIz69QZ VcbSuFM0Wg0o2WmxtG52u1z07pGeAZcMjh4PrVMS2hi8pzCZ5rFN0ymQvCsA7gX+ E3JCImEiZhGZ23VzxjFeuZuYFlnbw/sQGgxp8QmtZxPb3QevVlYf+86tmcjAwjyg EJAtaELrqviEg/ecfGRA/sqO6nGBUDgEV975ShPH/WNh+hpUawTu4WdZokM4tJvL WIUAGKqlYMtg3+lAMS0S5+gkxfxdYsTUyxn5vccvwXK0lEKNBVmzCrqdp4yMcOg= -----END CERTIFICATE-----Generated at Tue Oct 13 00:15:41 2026 by rpki-client