$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: x/CTGrnyMwwoOGa4lvskM30q2Ilnnx25TfSZh3JvPwU= Subject key identifier: CC:FA:79:D0:A3:32:00:8F:C0:83:83:E3:B1:CF:9D:D3:CB:14:B3:56 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 680FB76272E06757020D06E627BEDD05C59C9D39 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa Signing time: Sat 10 Oct 2026 13:03:32 +0000 ROA not before: Sat 10 Oct 2026 12:58:32 +0000 ROA not after: Sat 09 Oct 2027 13:03:32 +0000 asID: 214432 IP address blocks: 79.182.32.0/24 maxlen: 24 79.182.52.0/24 maxlen: 24 79.182.75.0/24 maxlen: 24 79.182.76.0/24 maxlen: 24 79.182.123.0/24 maxlen: 24 79.183.12.0/24 maxlen: 24 109.66.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 21:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0f:b7:62:72:e0:67:57:02:0d:06:e6:27:be:dd:05:c5:9c:9d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 10 12:58:32 2026 GMT Not After : Oct 9 13:03:32 2027 GMT Subject: CN=CCFA79D0A332008FC08383E3B1CF9DD3CB14B356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:76:fd:95:c8:04:b9:68:70:05:b3:cd:01: cd:a7:be:61:0e:bc:ab:8b:2a:7f:09:a5:5b:7e:4e: bf:2d:e9:10:3f:fb:ed:26:7f:7d:2a:9d:9a:63:69: fd:36:a7:40:71:9d:e5:31:a1:3f:61:77:ac:b8:89: 1f:cf:69:82:36:e7:43:b8:0f:20:eb:f8:f2:05:38: 13:1e:20:91:05:4a:9f:f6:17:82:c2:3a:bd:86:17: d3:df:d2:1d:0b:6c:7d:97:fc:0d:4e:da:6f:83:61: 62:e8:1b:f5:db:da:ce:62:71:bf:a4:b5:9e:d4:0b: 4c:e2:27:24:14:04:ba:a4:61:28:06:4a:98:2e:f7: c7:94:ba:21:bd:d4:d6:c3:bc:a7:60:ca:76:39:83: 26:6f:5e:96:af:ed:d2:60:12:63:4a:c0:f6:44:f4: c7:1c:25:9c:9c:10:a8:de:f8:59:49:ec:a2:bb:06: b8:2f:60:26:3e:7d:6b:3d:67:44:6e:4c:f8:ef:eb: 19:ef:2e:da:71:a6:c2:de:c8:02:0c:7d:d7:9c:e8: f6:3b:ce:ad:ae:80:65:e2:da:d8:80:ea:ef:68:58: 11:ef:62:a8:20:39:a4:46:64:ad:96:d3:cf:75:c1: 3b:7a:4a:7f:66:17:71:b4:d5:63:b2:69:45:4a:58: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:79:D0:A3:32:00:8F:C0:83:83:E3:B1:CF:9D:D3:CB:14:B3:56 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.32.0/24 79.182.52.0/24 79.182.75.0-79.182.76.255 79.182.123.0/24 79.183.12.0/24 109.66.81.0/24 Signature Algorithm: sha256WithRSAEncryption 77:d4:38:cc:12:be:33:ba:ed:48:d0:10:61:84:fc:6e:c8:d4: 05:dc:24:1d:97:63:9d:16:53:4f:69:3e:07:b3:6c:52:87:7e: 4d:db:ab:cf:74:83:f0:b9:d7:c9:f0:31:57:89:2c:af:64:72: fb:98:38:6a:7c:4c:9e:db:f8:b9:7b:ef:80:be:a1:3c:85:12: 3b:4a:e4:da:6d:b6:40:0d:09:d3:29:0a:98:79:e7:21:dc:12: ad:da:97:85:b9:3c:f3:c5:32:8a:e6:0f:db:c0:3e:3a:31:47: 24:5d:df:99:4b:e5:25:21:44:a5:da:c8:9c:3c:af:f7:14:1d: eb:a1:1e:e8:82:71:e8:a7:70:a0:80:3a:9f:41:8b:40:1d:a5: 01:f3:cb:a5:bb:8e:53:aa:7a:e1:a3:01:37:76:32:5a:6b:4d: b9:b4:2c:c8:22:05:57:72:5d:0b:b5:3b:8d:f5:cd:24:74:dd: 4a:8e:53:21:22:3d:97:99:49:10:e5:05:27:09:41:6d:8d:aa: 2e:ce:42:04:b8:3b:47:90:81:34:21:2a:02:53:4f:85:ec:a8: e2:23:a4:7d:43:60:08:5e:5c:6f:75:b5:d1:f5:fe:06:95:15: ff:5f:fa:01:7f:28:07:bb:f1:f6:85:59:f0:21:a5:90:30:2a: a8:93:26:0f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUaA+3YnLgZ1cCDQbmJ77dBcWcnTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTAxMjU4MzJaFw0yNzEwMDkxMzAzMzJaMDMxMTAvBgNV BAMTKENDRkE3OUQwQTMzMjAwOEZDMDgzODNFM0IxQ0Y5REQzQ0IxNEIzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Anb9lcgEuWhwBbPNAc2nvmEO vKuLKn8JpVt+Tr8t6RA/++0mf30qnZpjaf02p0BxneUxoT9hd6y4iR/PaYI250O4 DyDr+PIFOBMeIJEFSp/2F4LCOr2GF9Pf0h0LbH2X/A1O2m+DYWLoG/Xb2s5icb+k tZ7UC0ziJyQUBLqkYSgGSpgu98eUuiG91NbDvKdgynY5gyZvXpav7dJgEmNKwPZE 9MccJZycEKje+FlJ7KK7BrgvYCY+fWs9Z0RuTPjv6xnvLtpxpsLeyAIMfdec6PY7 zq2ugGXi2tiA6u9oWBHvYqggOaRGZK2W0891wTt6Sn9mF3G01WOyaUVKWAd/AgMB AAGjggJrMIICZzAdBgNVHQ4EFgQUzPp50KMyAI/Ag4Pjsc+d08sUs1YwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTQ0MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcBAf8ENjA0MDIE AgABMCwDBABPtiADBABPtjQwDAMEAE+2SwMEAE+2TAMEAE+2ewMEAE+3DAMEAG1C UTANBgkqhkiG9w0BAQsFAAOCAQEAd9Q4zBK+M7rtSNAQYYT8bsjUBdwkHZdjnRZT T2k+B7NsUod+Tdurz3SD8LnXyfAxV4ksr2Ry+5g4anxMntv4uXvvgL6hPIUSO0rk 2m22QA0J0ykKmHnnIdwSrdqXhbk888UyiuYP28A+OjFHJF3fmUvlJSFEpdrInDyv 9xQd66Ee6IJx6KdwoIA6n0GLQB2lAfPLpbuOU6p64aMBN3YyWmtNubQsyCIFV3Jd C7U7jfXNJHTdSo5TISI9l5lJEOUFJwlBbY2qLs5CBLg7R5CBNCEqAlNPheyo4iOk fUNgCF5cb3W10fX+BpUV/1/6AX8oB7vx9oVZ8CGlkDAqqJMmDw== -----END CERTIFICATE-----Generated at Tue Oct 13 02:02:16 2026 by rpki-client