$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa File: AS214483.roa (raw, json) Hash identifier: e0faaTlVOCzZefhZLSLSjmC6oz+pPOskIcsGc+VGRzI= Subject key identifier: FF:DD:E7:65:B1:56:42:D8:16:4B:20:F0:D4:D6:85:79:E1:5F:C5:6F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1E2903379AF8804F299C9880019C41F8C65B3328 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa Signing time: Sat 10 Oct 2026 05:03:46 +0000 ROA not before: Sat 10 Oct 2026 04:58:46 +0000 ROA not after: Sat 09 Oct 2027 05:03:46 +0000 asID: 214483 IP address blocks: 109.64.165.0/24 maxlen: 24 109.65.105.0/24 maxlen: 24 109.65.144.0/24 maxlen: 24 109.65.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:29:03:37:9a:f8:80:4f:29:9c:98:80:01:9c:41:f8:c6:5b:33:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 10 04:58:46 2026 GMT Not After : Oct 9 05:03:46 2027 GMT Subject: CN=FFDDE765B15642D8164B20F0D4D68579E15FC56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:e4:4d:05:ad:19:c9:aa:15:03:c7:ae:ec: d8:c6:e3:92:a7:9e:aa:78:58:8d:8d:1a:f3:d1:e4: 68:d8:bc:a1:1b:1f:cb:11:8a:a8:72:13:63:27:55: 75:e0:e5:dd:e4:8d:d9:6d:db:04:86:a3:c2:66:b8: f6:4b:a1:fb:41:16:22:31:87:98:d4:5c:50:65:ba: d9:aa:2e:82:53:5e:32:9a:d2:54:b2:a6:e9:e7:13: 47:58:a4:18:cb:59:80:da:ba:be:73:d0:58:cb:a9: 10:10:7d:8f:0e:71:eb:55:09:36:61:e7:0d:b1:d0: 8f:c7:45:76:e3:77:1b:28:63:6d:d0:ff:8b:aa:95: 4c:ba:54:3f:dd:c4:c4:26:b5:b1:8f:61:5e:40:3a: 88:f3:71:f3:21:da:f7:8d:10:fa:3e:89:95:aa:a0: 03:2b:eb:b4:a5:65:c2:d5:c3:fc:4f:8c:47:3b:4a: f8:3d:dc:f6:86:cd:58:a7:69:78:41:59:36:ca:cb: 50:99:ed:b7:82:5b:b1:4f:17:02:1a:92:24:76:04: bd:60:0e:ba:70:17:f6:42:15:1b:79:74:e0:bd:c8: 56:9f:b9:8a:c8:0e:d8:fd:da:1a:fb:04:0a:21:ec: 94:be:d0:ac:c3:1e:f2:14:a6:1a:81:e3:22:04:37: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:E7:65:B1:56:42:D8:16:4B:20:F0:D4:D6:85:79:E1:5F:C5:6F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.165.0/24 109.65.105.0/24 109.65.144.0/24 109.65.195.0/24 Signature Algorithm: sha256WithRSAEncryption 36:4f:e8:f4:b9:9e:fe:97:8e:c7:2c:68:05:61:f1:29:68:9b: 38:d9:c6:9a:17:e4:5e:6c:bd:d8:b4:71:92:59:73:58:ba:74: c5:e9:c3:27:14:04:9e:18:7b:79:19:b8:3a:20:e5:cf:6a:2b: 0a:c3:a9:56:1e:c0:ca:3c:da:71:da:d9:31:99:05:6f:d4:b4: 5d:77:37:1f:68:88:36:3e:de:fc:c6:54:90:1f:77:55:1e:a6: dc:5d:99:bf:ff:e2:f3:46:a9:bd:b5:0d:1c:2d:7b:96:c9:5f: e9:01:fb:51:d8:b1:83:7c:f9:2a:0e:3f:4e:61:fa:2c:30:82: 21:d1:dc:ae:30:2e:33:42:ca:0c:bf:b3:8b:7d:73:0e:3a:19: 58:cc:c1:a6:85:11:b4:91:ba:4b:79:d2:7c:ba:bb:c5:d5:af: b7:e6:74:5b:8b:cd:c4:f7:bf:22:0b:bf:8b:db:f2:0e:d5:a5: c1:15:05:a8:0f:57:78:af:18:b8:4a:b0:6a:23:9b:f7:30:a3: 33:70:19:79:a7:74:76:6c:b0:59:af:aa:5c:27:dc:b4:5d:42: 10:8e:a7:4c:31:b5:30:11:92:ae:88:cd:bd:a5:5d:84:77:3b: 42:1c:c2:a3:37:57:72:72:3e:de:1e:e0:a3:79:e8:10:6b:6e: af:c6:91:e3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUHikDN5r4gE8pnJiAAZxB+MZbMygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTAwNDU4NDZaFw0yNzEwMDkwNTAzNDZaMDMxMTAvBgNV BAMTKEZGRERFNzY1QjE1NjQyRDgxNjRCMjBGMEQ0RDY4NTc5RTE1RkM1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRuRNBa0ZyaoVA8eu7NjG45Kn nqp4WI2NGvPR5GjYvKEbH8sRiqhyE2MnVXXg5d3kjdlt2wSGo8JmuPZLoftBFiIx h5jUXFBlutmqLoJTXjKa0lSypunnE0dYpBjLWYDaur5z0FjLqRAQfY8OcetVCTZh 5w2x0I/HRXbjdxsoY23Q/4uqlUy6VD/dxMQmtbGPYV5AOojzcfMh2veNEPo+iZWq oAMr67SlZcLVw/xPjEc7Svg93PaGzVinaXhBWTbKy1CZ7beCW7FPFwIakiR2BL1g DrpwF/ZCFRt5dOC9yFafuYrIDtj92hr7BAoh7JS+0KzDHvIUphqB4yIEN2djAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQU/93nZbFWQtgWSyDw1NaFeeFfxW8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTQ0ODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4E AgABMBgDBABtQKUDBABtQWkDBABtQZADBABtQcMwDQYJKoZIhvcNAQELBQADggEB ADZP6PS5nv6XjscsaAVh8SlomzjZxpoX5F5svdi0cZJZc1i6dMXpwycUBJ4Ye3kZ uDog5c9qKwrDqVYewMo82nHa2TGZBW/UtF13Nx9oiDY+3vzGVJAfd1Ueptxdmb// 4vNGqb21DRwte5bJX+kB+1HYsYN8+SoOP05h+iwwgiHR3K4wLjNCygy/s4t9cw46 GVjMwaaFEbSRukt50ny6u8XVr7fmdFuLzcT3vyILv4vb8g7VpcEVBagPV3ivGLhK sGojm/cwozNwGXmndHZssFmvqlwn3LRdQhCOp0wxtTARkq6Izb2lXYR3O0IcwqM3 V3JyPt4e4KN56BBrbq/GkeM= -----END CERTIFICATE-----Generated at Tue Oct 13 11:45:41 2026 by rpki-client