
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218736.roa
File: AS218736.roa (raw, json)
Hash identifier: hQ7j/vT8iZ8xGzSHN0mwAz6l1VWrwyHZHIdNTJSeeg0=
Subject key identifier: 93:40:F0:C9:FC:D4:0A:BE:BC:09:9C:46:02:CE:9F:1B:E1:29:44:21
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 07AAC2B0B49EAFA8AA1BF27449B4E4AA7B457E31
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218736.roa
Signing time: Sat 24 Oct 2026 22:17:48 +0000
ROA not before: Sat 24 Oct 2026 22:12:48 +0000
ROA not after: Sat 23 Oct 2027 22:17:48 +0000
asID: 218736
IP address blocks: 79.182.39.0/24 maxlen: 24
79.182.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:aa:c2:b0:b4:9e:af:a8:aa:1b:f2:74:49:b4:e4:aa:7b:45:7e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 24 22:12:48 2026 GMT
Not After : Oct 23 22:17:48 2027 GMT
Subject: CN=9340F0C9FCD40ABEBC099C4602CE9F1BE1294421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:fc:08:f8:a7:bf:17:5e:f6:9e:ff:c2:32:
2f:31:e3:fa:67:7c:e2:79:11:1a:96:af:4e:c2:2f:
16:54:4b:3a:8d:9b:c6:0a:0a:8a:54:95:03:18:ca:
62:9b:06:e0:cf:2c:80:77:0d:c0:46:e7:5b:66:b3:
46:d1:74:93:a0:e6:c9:6a:c1:3f:c7:57:36:15:15:
8e:44:14:9d:4b:bb:47:10:39:07:72:72:36:f5:46:
d8:f4:46:9a:fc:73:77:29:b6:ba:5d:76:32:df:f6:
a6:60:2e:e5:57:60:d3:61:6a:34:ff:09:e0:d6:dc:
df:a9:b5:77:08:64:c0:d8:29:4b:48:51:0b:68:8c:
8b:0f:50:1a:17:ff:84:bd:ff:5d:23:65:49:f3:4d:
a0:88:56:b1:5f:1f:5c:d7:8f:23:87:61:81:24:7b:
8b:26:04:b7:c0:7c:7a:7c:b4:63:59:a1:b9:0c:e3:
f5:5c:d9:1c:dc:16:92:12:e8:c0:88:b1:05:79:af:
f0:78:d1:99:c4:66:d8:23:0e:3c:4a:67:e4:dd:52:
0c:f4:ce:6f:0b:f4:5e:f8:94:77:88:62:67:a6:2b:
8b:1b:66:54:28:b7:01:e4:42:bc:0e:4e:1f:94:3e:
78:35:cc:d2:93:bf:f7:98:f8:91:a2:87:3a:0e:4d:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:F0:C9:FC:D4:0A:BE:BC:09:9C:46:02:CE:9F:1B:E1:29:44:21
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.39.0/24
79.182.70.0/24
Signature Algorithm: sha256WithRSAEncryption
52:4c:72:23:95:75:59:ba:97:a3:e1:31:5f:23:a1:b0:ca:ad:
a0:0c:1a:a0:02:d1:ba:0a:d7:23:1a:db:f9:2d:01:48:71:d3:
ca:63:67:c9:2e:9f:e4:fc:8f:6d:42:d0:fd:20:43:f3:e0:ba:
a8:cb:54:02:d4:ae:69:4e:cf:71:e2:0d:ec:88:10:b7:d5:f4:
8d:67:f6:87:04:a5:9a:33:cc:9c:a8:da:7f:ae:7c:16:2d:97:
44:69:36:ac:a8:02:91:cd:f9:ff:9c:7e:f7:95:ad:a7:99:ce:
31:b6:9a:54:25:21:bc:cf:19:ac:31:34:36:9b:8e:1a:b5:c6:
3a:d8:4c:5a:be:3e:e0:a6:af:89:1f:a3:cf:97:6d:e4:db:ee:
9a:1e:d3:2e:ad:73:e9:f2:be:3e:b4:5d:92:1b:d3:67:8c:c5:
8f:cd:c5:45:cf:ed:a4:a9:b5:aa:ff:03:bf:f5:af:94:8e:13:
89:68:36:b6:7e:21:f1:d0:8b:ca:c4:03:69:7d:df:fa:09:c9:
9e:54:8b:41:14:47:9a:78:95:c1:3f:04:db:81:99:1f:31:2c:
0b:10:e4:3d:9d:00:8d:d3:29:e8:16:76:67:fd:0f:cb:99:7f:
82:4e:5e:af:54:88:ce:f3:9a:e1:9b:0f:59:29:b7:21:c9:28:
00:bf:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:34:53 2026 by rpki-client