$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218878.roa File: AS218878.roa (raw, json) Hash identifier: NYEvm2lhqD19/fXEqyda9F0ynL5bA3bHVMk930EvB2M= Subject key identifier: 78:89:12:9E:88:FE:BB:A1:9C:27:B6:0F:20:D7:F0:D8:4E:60:B4:FF Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7A77ED289BD35DCB22E853BCD57760210E08435F Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218878.roa Signing time: Fri 09 Oct 2026 18:41:36 +0000 ROA not before: Fri 09 Oct 2026 18:36:36 +0000 ROA not after: Fri 08 Oct 2027 18:41:36 +0000 asID: 218878 IP address blocks: 79.180.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 13:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:77:ed:28:9b:d3:5d:cb:22:e8:53:bc:d5:77:60:21:0e:08:43:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 9 18:36:36 2026 GMT Not After : Oct 8 18:41:36 2027 GMT Subject: CN=7889129E88FEBBA19C27B60F20D7F0D84E60B4FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:bc:01:70:a3:e1:4f:14:52:f3:06:bb:13: 88:da:76:13:ec:a4:76:e6:7b:95:e4:37:9a:27:e4: d2:96:38:96:a4:75:9b:84:33:c9:49:9d:9d:2f:2e: 83:79:24:7c:48:07:8e:84:80:7b:18:ef:c4:6b:06: fe:65:8f:32:70:a9:b3:21:b3:45:ee:3d:f6:b8:fc: 75:dd:5c:a2:07:11:b5:b8:7d:12:f2:53:07:19:df: 86:76:99:85:f1:08:68:d5:56:f7:13:da:f5:fa:2f: 84:2f:d7:be:b2:4f:70:36:15:4e:5a:b3:c1:76:5b: 86:fc:bd:59:9a:92:ba:15:7f:54:02:20:40:1d:c1: 48:e0:24:26:ba:86:ae:22:b2:27:07:07:d6:56:05: 04:dc:dd:78:69:36:89:f5:f3:21:6c:d9:dd:d2:f1: 26:6e:3f:f3:45:d3:20:cf:db:50:c4:5f:cd:74:12: e2:bc:24:61:a3:c9:15:77:44:1a:c0:ad:53:ea:54: 82:49:16:81:5d:1b:1c:aa:2a:c3:a1:c8:2f:4a:3c: 88:ca:0b:ad:b8:3e:ae:13:a4:f5:9b:68:3f:3a:85: 19:db:26:9b:66:35:d9:fa:2e:be:83:45:3d:8e:b3: d5:f5:ea:6f:3b:1f:ca:cc:9c:f7:79:66:74:4d:af: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:12:9E:88:FE:BB:A1:9C:27:B6:0F:20:D7:F0:D8:4E:60:B4:FF X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218878.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.112.0/23 Signature Algorithm: sha256WithRSAEncryption a1:67:ad:e3:06:bc:05:3d:a7:27:1c:13:67:61:b0:f8:dc:4b: 8a:fa:51:ce:0c:48:b2:2b:c0:c4:0d:71:8f:f3:a5:e8:28:ff: 0a:bd:fc:b5:04:c5:a1:ef:19:f3:00:bf:96:ad:10:1f:f5:71: 19:1c:38:bd:11:f1:fd:66:06:27:16:a3:49:f2:0c:96:92:f6: 4b:ad:1b:9c:d0:14:76:0c:5a:ea:9e:59:53:77:d9:20:f9:23: 57:36:8e:59:85:15:91:14:4b:f7:05:73:57:05:de:7d:cc:61: 48:31:95:77:33:99:07:fd:14:01:5e:d6:d1:03:02:46:41:78: 5f:d9:d1:f5:33:68:f4:53:9d:e5:ea:93:e6:d4:0c:93:5b:5e: fa:e5:44:1b:17:ea:dd:44:ba:a5:00:12:78:d0:ce:42:8a:17: b7:24:53:87:4a:5b:2a:6c:90:67:c6:40:65:0c:5a:f4:6e:39: f1:91:14:23:20:66:fe:91:f0:60:70:71:41:cd:c1:69:02:95: 0a:f7:b7:10:5e:46:27:6e:f4:16:1d:04:fd:d7:e7:37:3d:a1: 57:32:5b:38:c0:a2:8f:f3:96:f4:16:6d:ad:ac:45:9e:80:ab: f5:04:c1:ae:22:3e:76:74:77:09:bd:22:21:ab:ce:5e:cf:26: c3:f3:f9:2f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUenftKJvTXcsi6FO81XdgIQ4IQ18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMDkxODM2MzZaFw0yNzEwMDgxODQxMzZaMDMxMTAvBgNV BAMTKDc4ODkxMjlFODhGRUJCQTE5QzI3QjYwRjIwRDdGMEQ4NEU2MEI0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRTLwBcKPhTxRS8wa7E4jadhPs pHbme5XkN5on5NKWOJakdZuEM8lJnZ0vLoN5JHxIB46EgHsY78RrBv5ljzJwqbMh s0XuPfa4/HXdXKIHEbW4fRLyUwcZ34Z2mYXxCGjVVvcT2vX6L4Qv176yT3A2FU5a s8F2W4b8vVmakroVf1QCIEAdwUjgJCa6hq4isicHB9ZWBQTc3XhpNon18yFs2d3S 8SZuP/NF0yDP21DEX810EuK8JGGjyRV3RBrArVPqVIJJFoFdGxyqKsOhyC9KPIjK C624Pq4TpPWbaD86hRnbJptmNdn6Lr6DRT2Os9X16m87H8rMnPd5ZnRNr4SZAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUeIkSnoj+u6GcJ7YPINfw2E5gtP8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg4Nzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFPtHAwDQYJKoZIhvcNAQELBQADggEBAKFnreMGvAU9pyccE2dhsPjc S4r6Uc4MSLIrwMQNcY/zpego/wq9/LUExaHvGfMAv5atEB/1cRkcOL0R8f1mBicW o0nyDJaS9kutG5zQFHYMWuqeWVN32SD5I1c2jlmFFZEUS/cFc1cF3n3MYUgxlXcz mQf9FAFe1tEDAkZBeF/Z0fUzaPRTneXqk+bUDJNbXvrlRBsX6t1EuqUAEnjQzkKK F7ckU4dKWypskGfGQGUMWvRuOfGRFCMgZv6R8GBwcUHNwWkClQr3txBeRidu9BYd BP3X5zc9oVcyWzjAoo/zlvQWba2sRZ6Aq/UEwa4iPnZ0dwm9IiGrzl7PJsPz+S8= -----END CERTIFICATE-----Generated at Tue Oct 13 20:41:25 2026 by rpki-client