
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218780.roa
File: AS218780.roa (raw, json)
Hash identifier: tpHsIkXCQ1gwCf8x+F8HAbjRfEdwUn6HoFny8EYZfCU=
Subject key identifier: 39:56:08:D0:80:21:EF:5D:61:06:12:69:63:44:B8:CF:2E:84:AC:22
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 64DC0053D19C2A62D478EFEE8D8BE071FEE86BC8
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218780.roa
Signing time: Thu 05 Nov 2026 08:29:40 +0000
ROA not before: Thu 05 Nov 2026 08:24:40 +0000
ROA not after: Thu 04 Nov 2027 08:29:40 +0000
asID: 218780
IP address blocks: 79.176.106.0/24 maxlen: 24
109.64.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:dc:00:53:d1:9c:2a:62:d4:78:ef:ee:8d:8b:e0:71:fe:e8:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Nov 5 08:24:40 2026 GMT
Not After : Nov 4 08:29:40 2027 GMT
Subject: CN=395608D08021EF5D610612696344B8CF2E84AC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:49:d2:8b:ef:8f:08:56:9b:ff:e0:34:08:
96:e0:59:35:3b:ad:f0:c1:d6:98:cf:2f:97:c1:89:
b8:17:ac:e7:e1:e8:94:db:cc:fa:e8:d9:77:d0:4a:
09:4e:41:3b:55:ea:f8:18:ab:ff:ff:e5:44:54:15:
b0:73:e9:c3:46:f4:28:c7:78:8a:a7:54:1a:fc:14:
fa:52:7d:be:0c:c5:3b:88:b7:f9:10:fc:0a:bb:6f:
d5:ed:01:18:38:b4:50:a6:21:67:30:2f:ae:01:6e:
4c:3b:45:20:2e:52:9b:46:0c:8e:74:5d:06:1b:7e:
20:5e:74:59:24:fc:28:09:96:8e:3f:64:9f:4e:97:
1c:56:49:c7:dd:58:b8:82:57:b7:b7:9a:40:02:50:
be:da:82:fe:24:93:e2:41:d7:c6:a6:14:30:fa:bf:
06:78:aa:50:ca:48:7d:ff:fb:5f:8a:d7:d8:8a:79:
f5:bf:53:d4:91:a3:56:d4:ee:0e:0a:ef:aa:60:d7:
5e:8d:61:6f:c5:9d:c2:43:db:f8:46:aa:d5:9f:55:
b3:28:9b:0c:ca:bb:b1:59:0a:5e:ae:1f:45:ff:9b:
98:2e:7a:ee:33:b0:e9:f5:fe:a1:94:bc:8d:28:c7:
92:95:27:25:63:44:15:a1:9e:e6:3b:52:1d:6d:ab:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:08:D0:80:21:EF:5D:61:06:12:69:63:44:B8:CF:2E:84:AC:22
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.106.0/24
109.64.247.0/24
Signature Algorithm: sha256WithRSAEncryption
db:7a:41:f1:a8:bc:c6:98:8c:9f:a1:e3:ff:ac:83:b2:3c:5f:
9b:8d:20:19:8e:42:15:e6:13:74:8a:0f:0d:44:9b:ea:44:0b:
b7:e4:e4:21:46:b0:da:6a:9e:e9:5e:a3:6d:fc:63:60:5e:d6:
9f:ba:45:8b:33:3a:5b:a0:b5:aa:96:6b:1e:3b:5e:0c:ac:1b:
62:b6:65:ee:a7:be:8e:6a:f4:48:d4:82:bb:ef:c6:9f:2a:94:
73:93:ae:f6:8f:bd:4f:4f:08:23:c3:7d:47:81:d6:42:1a:9b:
6a:df:a1:02:ff:39:f1:b2:4d:d8:69:09:56:91:08:0f:b8:c4:
ec:81:5d:34:9e:3a:11:a8:5b:31:22:46:f0:18:11:ad:ff:55:
43:a5:88:d1:75:dd:98:bb:31:dc:ca:d2:a0:8b:6e:52:d5:5e:
01:22:23:5a:24:48:fd:aa:3c:02:02:29:bd:7e:73:bd:31:5e:
97:aa:06:f7:b2:d0:be:64:3e:dd:03:de:ea:92:d7:1a:76:f5:
63:d8:12:42:e2:dc:63:bf:f7:72:01:21:7c:bb:8d:c9:dd:b8:
99:2d:cf:13:87:ee:81:b6:16:8a:8c:e3:05:53:87:3d:71:7a:
f2:31:ba:e4:1e:57:78:1b:5e:c3:d1:7c:57:78:a0:94:fd:f8:
3b:60:29:6c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUZNwAU9GcKmLUeO/ujYvgcf7oa8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC
Qzg0ODA0NzAeFw0yNjExMDUwODI0NDBaFw0yNzExMDQwODI5NDBaMDMxMTAvBgNV
BAMTKDM5NTYwOEQwODAyMUVGNUQ2MTA2MTI2OTYzNDRCOENGMkU4NEFDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJEnSi++PCFab/+A0CJbgWTU7
rfDB1pjPL5fBibgXrOfh6JTbzPro2XfQSglOQTtV6vgYq///5URUFbBz6cNG9CjH
eIqnVBr8FPpSfb4MxTuIt/kQ/Aq7b9XtARg4tFCmIWcwL64Bbkw7RSAuUptGDI50
XQYbfiBedFkk/CgJlo4/ZJ9OlxxWScfdWLiCV7e3mkACUL7agv4kk+JB18amFDD6
vwZ4qlDKSH3/+1+K19iKefW/U9SRo1bU7g4K76pg116NYW/FncJD2/hGqtWfVbMo
mwzKu7FZCl6uH0X/m5gueu4zsOn1/qGUvI0ox5KVJyVjRBWhnuY7Uh1tq5HpAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUOVYI0IAh711hBhJpY0S4zy6ErCIwHwYDVR0j
BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj
MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw
ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx
NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx
NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg3ODAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBABPsGoDBABtQPcwDQYJKoZIhvcNAQELBQADggEBANt6QfGovMaYjJ+h
4/+sg7I8X5uNIBmOQhXmE3SKDw1Em+pEC7fk5CFGsNpqnuleo238Y2Be1p+6RYsz
OlugtaqWax47XgysG2K2Ze6nvo5q9EjUgrvvxp8qlHOTrvaPvU9PCCPDfUeB1kIa
m2rfoQL/OfGyTdhpCVaRCA+4xOyBXTSeOhGoWzEiRvAYEa3/VUOliNF13Zi7MdzK
0qCLblLVXgEiI1okSP2qPAICKb1+c70xXpeqBvey0L5kPt0D3uqS1xp29WPYEkLi
3GO/93IBIXy7jcnduJktzxOH7oG2FoqM4wVThz1xevIxuuQeV3gbXsPRfFd4oJT9
+DtgKWw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:07:33 2026 by rpki-client