$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215224.roa File: AS215224.roa (raw, json) Hash identifier: NKxSc5rnQcs4rwlaQTWSV34AErOFbYw0rKFBTakelPE= Subject key identifier: 7E:74:FC:9D:AB:E8:06:87:7B:28:B4:75:5E:53:F6:E2:0B:FB:A8:5C Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7F2B96ACD286D68BA8F30EF870394F63384F2E46 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215224.roa Signing time: Thu 08 Oct 2026 11:25:15 +0000 ROA not before: Thu 08 Oct 2026 11:20:15 +0000 ROA not after: Thu 07 Oct 2027 11:25:15 +0000 asID: 215224 IP address blocks: 79.182.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 13:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2b:96:ac:d2:86:d6:8b:a8:f3:0e:f8:70:39:4f:63:38:4f:2e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 8 11:20:15 2026 GMT Not After : Oct 7 11:25:15 2027 GMT Subject: CN=7E74FC9DABE806877B28B4755E53F6E20BFBA85C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:b6:33:ce:c9:38:be:02:a2:d1:9f:f5:2b: 26:27:55:8d:6a:7f:23:48:dc:be:85:d3:bb:0e:ab: f9:67:08:9f:35:8d:53:21:17:96:af:63:f3:8f:2b: 19:2f:42:7c:8a:ee:57:fd:b6:bb:5d:cd:ca:57:7d: 0c:19:e0:b6:5c:ef:31:d1:56:5d:85:fe:d1:20:e1: 1f:4e:e6:f4:fc:58:fb:f3:8b:b0:c7:6d:da:f3:00: 0b:36:20:ea:ed:af:45:0b:b3:47:39:f1:10:52:45: 0c:95:8b:0b:a3:f0:55:c1:79:ca:e9:d4:e5:97:73: 45:44:c2:68:4f:5b:ed:e0:ae:e6:4b:d3:51:df:35: b2:d7:bd:e8:a2:50:cf:2b:35:77:4a:02:92:14:ff: eb:76:c2:7b:c0:ad:9c:23:09:48:50:c5:98:b1:cc: c3:27:40:c8:ca:1d:00:2a:3d:8a:c9:c1:2d:a7:09: 4f:91:a8:51:50:8a:c8:11:44:1d:77:17:50:0e:16: 34:ef:9c:24:1d:d6:fe:46:ed:cf:8b:47:b8:83:36: 94:ab:5d:89:2c:07:bb:46:b3:8b:ce:fb:c2:76:be: 6f:dc:1d:6f:6e:cc:bf:61:88:8d:17:98:1a:b8:bd: 9e:ee:fe:e1:de:25:99:32:f9:6d:17:8b:d7:4b:fb: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:74:FC:9D:AB:E8:06:87:7B:28:B4:75:5E:53:F6:E2:0B:FB:A8:5C X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS215224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.21.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:be:81:c6:4e:75:de:5f:ce:1a:37:e5:3e:78:92:fe:f0:e6: fe:51:54:ff:9b:95:63:9b:ed:a6:ff:17:0f:21:de:7b:eb:f3: 03:61:fd:0a:bc:31:30:67:b2:bc:be:f3:07:95:c6:c4:75:16: 3a:b7:89:ed:0a:4a:93:57:a1:0f:fb:ec:df:2e:95:c5:c7:20: 4f:62:37:0a:db:fd:17:3c:48:58:65:3d:79:12:d6:a9:96:d8: 43:0f:af:32:53:52:55:46:f5:97:be:ef:10:37:40:36:4c:f1: 57:5a:c4:cb:f8:f3:9a:e2:cf:4c:13:d8:d3:0c:3f:84:d3:5b: bd:cb:ed:d8:ea:5e:68:9b:fb:e3:be:a9:ed:de:a0:e1:94:41: f0:50:53:25:e3:e6:9b:97:61:eb:7a:ab:46:5e:19:31:65:5c: 24:24:18:86:5d:df:d5:39:5a:46:71:78:8d:f2:17:5d:99:88: 48:ab:ba:82:ca:24:6d:31:41:43:21:ef:ce:f2:2e:ad:65:f5: bd:35:c4:26:3e:27:a8:de:df:2d:db:8b:fe:94:f1:94:3a:ca: 5b:62:e6:6b:fc:7b:23:21:47:8a:54:b5:16:d5:c0:7c:20:a0: a0:2e:cf:87:1a:0b:38:7f:83:7f:2b:7f:b0:16:dd:d9:91:4a: 72:3b:77:ae -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUfyuWrNKG1ouo8w74cDlPYzhPLkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDgxMTIwMTVaFw0yNzEwMDcxMTI1MTVaMDMxMTAvBgNV BAMTKDdFNzRGQzlEQUJFODA2ODc3QjI4QjQ3NTVFNTNGNkUyMEJGQkE4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhrYzzsk4vgKi0Z/1KyYnVY1q fyNI3L6F07sOq/lnCJ81jVMhF5avY/OPKxkvQnyK7lf9trtdzcpXfQwZ4LZc7zHR Vl2F/tEg4R9O5vT8WPvzi7DHbdrzAAs2IOrtr0ULs0c58RBSRQyViwuj8FXBecrp 1OWXc0VEwmhPW+3gruZL01HfNbLXveiiUM8rNXdKApIU/+t2wnvArZwjCUhQxZix zMMnQMjKHQAqPYrJwS2nCU+RqFFQisgRRB13F1AOFjTvnCQd1v5G7c+LR7iDNpSr XYksB7tGs4vO+8J2vm/cHW9uzL9hiI0XmBq4vZ7u/uHeJZky+W0Xi9dL+45NAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUfnT8navoBod7KLR1XlP24gv7qFwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTUyMjQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPthUwDQYJKoZIhvcNAQELBQADggEBAIy+gcZOdd5fzho35T54kv7w 5v5RVP+blWOb7ab/Fw8h3nvr8wNh/Qq8MTBnsry+8weVxsR1Fjq3ie0KSpNXoQ/7 7N8ulcXHIE9iNwrb/Rc8SFhlPXkS1qmW2EMPrzJTUlVG9Ze+7xA3QDZM8VdaxMv4 85riz0wT2NMMP4TTW73L7djqXmib++O+qe3eoOGUQfBQUyXj5puXYet6q0ZeGTFl XCQkGIZd39U5WkZxeI3yF12ZiEiruoLKJG0xQUMh787yLq1l9b01xCY+J6je3y3b i/6U8ZQ6ylti5mv8eyMhR4pUtRbVwHwgoKAuz4caCzh/g38rf7AW3dmRSnI7d64= -----END CERTIFICATE-----Generated at Tue Oct 13 19:44:47 2026 by rpki-client