$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218958.roa File: AS218958.roa (raw, json) Hash identifier: 4LpQ/+9xHCT6RzUtb5lMxcLUATA3p+GvdkO2VdNGIAA= Subject key identifier: 6C:E9:D7:37:E1:E6:63:72:24:04:D9:4A:5A:EF:EA:0D:97:9A:BC:D9 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4741B741451D38560DE361DD52FD0F062794E970 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218958.roa Signing time: Tue 13 Oct 2026 08:09:05 +0000 ROA not before: Tue 13 Oct 2026 08:04:05 +0000 ROA not after: Tue 12 Oct 2027 08:09:05 +0000 asID: 218958 IP address blocks: 109.66.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 15:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:41:b7:41:45:1d:38:56:0d:e3:61:dd:52:fd:0f:06:27:94:e9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 13 08:04:05 2026 GMT Not After : Oct 12 08:09:05 2027 GMT Subject: CN=6CE9D737E1E663722404D94A5AEFEA0D979ABCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:71:1b:0e:ae:a5:5e:45:d4:dd:d7:c2:ec: 61:d6:22:c9:0e:3f:53:ed:2c:6a:64:95:59:13:7e: e2:c4:14:51:eb:cc:92:b1:42:ca:67:47:86:42:ca: 82:a4:20:42:6e:7a:2e:cc:5e:7d:ef:38:a7:14:98: 4d:78:88:4e:2c:98:5e:e8:78:ab:82:36:ff:0d:15: 1b:9d:ab:b9:e7:9b:26:50:c7:ff:fc:9d:2b:92:91: 0a:67:c2:c2:5d:76:48:5c:59:f7:f8:dc:d4:7d:79: 38:61:d8:70:b9:06:6e:47:ea:f3:19:e0:f7:29:36: 41:d0:53:f6:aa:82:46:c8:20:14:f5:ce:ff:ed:82: 66:18:a2:68:e1:55:27:b9:44:eb:42:79:63:4c:b0: 9d:b5:33:58:4a:3c:2a:4b:d3:50:8d:ce:27:1c:07: b4:93:4b:3b:7e:c0:1c:62:0a:47:95:46:9d:8e:df: 31:37:d8:f1:77:12:2b:82:9c:2a:56:39:3b:48:4d: 43:82:37:22:4f:cf:53:f3:e8:ef:52:87:53:3c:dd: c3:9f:62:30:e1:81:85:7c:84:04:a4:e2:e6:f6:d0: 13:2e:27:66:44:55:ef:b9:09:d2:6c:47:ef:c2:8d: 96:24:ea:3a:03:75:dd:8f:d1:70:0e:c7:7a:5b:c8: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E9:D7:37:E1:E6:63:72:24:04:D9:4A:5A:EF:EA:0D:97:9A:BC:D9 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.100.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:a7:b7:10:ce:7c:a8:10:18:4f:f1:83:4d:3d:b5:b1:02:6a: 4d:d5:9d:a2:1b:8b:bf:1b:e3:bc:ac:f7:f6:08:54:4e:ff:93: fc:7a:3f:29:3f:82:fe:7a:4e:01:26:41:24:04:28:ee:77:39: e7:30:60:15:d9:b4:85:22:16:b8:3c:e3:f2:e5:6b:41:44:5a: 6a:93:8e:9a:6a:03:68:a5:c6:d4:01:ce:88:b9:51:4f:28:85: 82:75:ba:a3:bd:db:a7:58:20:9e:82:9a:56:cf:ca:7c:12:72: c4:35:b8:df:c8:39:5b:7c:22:68:ce:b0:46:47:12:9c:d1:97: 1c:c7:81:65:c4:15:23:d5:20:cc:6f:83:ca:d8:c9:91:de:81: 76:af:39:7a:a3:2e:34:3d:3a:4d:07:0b:3f:7f:0c:09:cd:2d: b5:92:4d:37:26:9c:92:c4:26:fa:9b:f8:6f:a4:46:37:c4:bc: 6a:93:d1:97:ea:9d:84:bd:bf:37:f1:09:e1:07:81:53:f4:3a: 05:b0:8c:49:6f:4a:e1:95:d5:06:e1:3f:36:37:47:8a:d6:8d: 0b:1c:56:64:31:29:06:5d:43:9c:8f:68:be:6c:42:97:76:eb: 6e:6b:7c:db:54:eb:81:12:3e:22:23:ca:31:be:d2:3e:70:a4: 36:9c:ab:eb -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUR0G3QUUdOFYN42HdUv0PBieU6XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTMwODA0MDVaFw0yNzEwMTIwODA5MDVaMDMxMTAvBgNV BAMTKDZDRTlENzM3RTFFNjYzNzIyNDA0RDk0QTVBRUZFQTBEOTc5QUJDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwnEbDq6lXkXU3dfC7GHWIskO P1PtLGpklVkTfuLEFFHrzJKxQspnR4ZCyoKkIEJuei7MXn3vOKcUmE14iE4smF7o eKuCNv8NFRudq7nnmyZQx//8nSuSkQpnwsJddkhcWff43NR9eThh2HC5Bm5H6vMZ 4PcpNkHQU/aqgkbIIBT1zv/tgmYYomjhVSe5ROtCeWNMsJ21M1hKPCpL01CNzicc B7STSzt+wBxiCkeVRp2O3zE32PF3EiuCnCpWOTtITUOCNyJPz1Pz6O9Sh1M83cOf YjDhgYV8hASk4ub20BMuJ2ZEVe+5CdJsR+/CjZYk6joDdd2P0XAOx3pbyKLzAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUbOnXN+HmY3IkBNlKWu/qDZeavNkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg5NTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQmQwDQYJKoZIhvcNAQELBQADggEBAD6ntxDOfKgQGE/xg009tbEC ak3VnaIbi78b47ys9/YIVE7/k/x6Pyk/gv56TgEmQSQEKO53OecwYBXZtIUiFrg8 4/Lla0FEWmqTjppqA2ilxtQBzoi5UU8ohYJ1uqO926dYIJ6CmlbPynwScsQ1uN/I OVt8ImjOsEZHEpzRlxzHgWXEFSPVIMxvg8rYyZHegXavOXqjLjQ9Ok0HCz9/DAnN LbWSTTcmnJLEJvqb+G+kRjfEvGqT0ZfqnYS9vzfxCeEHgVP0OgWwjElvSuGV1Qbh PzY3R4rWjQscVmQxKQZdQ5yPaL5sQpd2625rfNtU64ESPiIjyjG+0j5wpDacq+s= -----END CERTIFICATE-----Generated at Wed Oct 14 06:45:00 2026 by rpki-client