$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS3320.roa File: AS3320.roa (raw, json) Hash identifier: vk3egIT/YCfjShjUkST8ouWpG2GEXzTD571TazUzU8M= Subject key identifier: E1:C8:CD:85:48:FA:94:CF:62:29:61:86:B5:68:2C:CB:17:10:DB:37 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4CFF852CD423521CB805E3AADB4457A360CC69FA Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS3320.roa Signing time: Mon 26 Oct 2026 14:56:31 +0000 ROA not before: Mon 26 Oct 2026 14:51:31 +0000 ROA not after: Mon 25 Oct 2027 14:56:31 +0000 asID: 3320 IP address blocks: 79.180.47.0/24 maxlen: 24 79.180.158.0/24 maxlen: 24 79.183.1.0/24 maxlen: 24 109.65.208.0/24 maxlen: 24 109.65.210.0/24 maxlen: 24 109.65.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ff:85:2c:d4:23:52:1c:b8:05:e3:aa:db:44:57:a3:60:cc:69:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 26 14:51:31 2026 GMT Not After : Oct 25 14:56:31 2027 GMT Subject: CN=E1C8CD8548FA94CF62296186B5682CCB1710DB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:76:7f:ad:6d:6e:ff:4a:9a:a0:bd:40:c7: ad:45:b8:83:de:d5:b6:43:6e:0a:26:80:3a:0a:cc: ed:bc:cd:cc:a9:2d:15:e5:97:a4:76:21:c6:fa:c4: ac:ba:4a:f1:f2:54:43:3b:8f:2c:b2:1e:95:72:cb: 42:3a:b5:36:a8:0a:1d:9e:94:23:c2:61:b6:a3:5c: d8:fe:18:b4:dc:bf:26:10:84:75:53:57:8d:db:66: be:d4:bf:6a:35:18:fe:48:07:67:7a:4c:38:1b:39: 9e:1d:19:86:20:36:b1:68:77:40:76:49:2d:f5:b7: 8d:c7:ee:97:cf:0d:94:1a:dd:19:a2:78:d1:5f:67: 26:28:26:e6:b0:4a:db:3c:13:cb:07:60:d0:04:cd: 42:ac:dd:1c:b5:0f:30:5e:08:ce:a9:2c:eb:01:54: 45:15:cd:9c:26:b2:da:88:14:f5:f6:e1:44:ec:53: f4:52:cd:bf:a5:d4:61:38:d1:2b:76:c3:c3:80:21: 92:74:59:21:13:d5:0e:52:ac:c1:cc:80:32:81:03: 2b:3e:9f:a0:8f:49:33:6a:ff:09:fa:46:51:0f:e6: d6:db:6a:bb:67:3b:81:46:cb:a7:82:51:3e:e6:53: eb:99:dd:c7:a3:7e:d9:e4:76:aa:46:77:19:61:56: 88:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C8:CD:85:48:FA:94:CF:62:29:61:86:B5:68:2C:CB:17:10:DB:37 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS3320.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.47.0/24 79.180.158.0/24 79.183.1.0/24 109.65.208.0/24 109.65.210.0/24 109.65.226.0/24 Signature Algorithm: sha256WithRSAEncryption c4:2d:ec:90:ac:a1:04:d2:b4:2c:ad:a3:fe:77:c7:37:a4:48: 0d:07:3f:7d:48:5e:66:8c:2e:ed:eb:4a:c6:2a:f5:af:cd:76: 19:ca:73:d0:b3:e7:94:e5:69:15:b6:b8:a5:59:f8:c5:7c:b7: 21:d3:d7:71:d3:73:f4:33:41:e5:c3:7a:de:a7:aa:f7:52:41: a8:35:94:42:fd:f4:26:ac:0a:59:53:70:de:23:2c:4c:9d:11: d7:71:7a:a1:cb:f8:5b:d5:8b:47:11:5d:7b:e2:d4:d0:29:bb: d4:94:a7:a7:3b:7d:ef:df:63:df:0f:a6:ac:71:40:12:52:ba: 44:fb:65:af:82:11:8e:b5:0f:79:63:cc:3c:0c:05:69:93:49: 42:5d:ac:a8:eb:a8:23:24:56:f7:a4:21:ee:92:76:a7:24:54: 39:2f:ee:dd:86:06:0d:1f:7e:b3:50:5a:28:27:e1:18:d1:7d: f2:ad:a6:31:15:01:70:f2:0e:3e:7e:31:43:bc:5c:22:43:7e: 2a:05:22:09:fe:9e:ef:f0:3e:68:9f:ff:8b:c9:c3:3d:c5:8e: b5:24:cc:35:40:2f:61:c0:87:f5:ea:0f:01:c3:33:62:b8:18: 31:86:ef:ed:39:2b:09:43:6f:4b:b4:53:18:7c:5b:1e:69:7c: b5:4b:c4:33 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUTP+FLNQjUhy4BeOq20RXo2DMafowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjYxNDUxMzFaFw0yNzEwMjUxNDU2MzFaMDMxMTAvBgNV BAMTKEUxQzhDRDg1NDhGQTk0Q0Y2MjI5NjE4NkI1NjgyQ0NCMTcxMERCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHnZ/rW1u/0qaoL1Ax61FuIPe 1bZDbgomgDoKzO28zcypLRXll6R2Icb6xKy6SvHyVEM7jyyyHpVyy0I6tTaoCh2e lCPCYbajXNj+GLTcvyYQhHVTV43bZr7Uv2o1GP5IB2d6TDgbOZ4dGYYgNrFod0B2 SS31t43H7pfPDZQa3RmieNFfZyYoJuawSts8E8sHYNAEzUKs3Ry1DzBeCM6pLOsB VEUVzZwmstqIFPX24UTsU/RSzb+l1GE40St2w8OAIZJ0WSET1Q5SrMHMgDKBAys+ n6CPSTNq/wn6RlEP5tbbartnO4FGy6eCUT7mU+uZ3cejftnkdqpGdxlhVohFAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQU4cjNhUj6lM9iKWGGtWgsyxcQ2zcwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzMzIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA ATAkAwQAT7QvAwQAT7SeAwQAT7cBAwQAbUHQAwQAbUHSAwQAbUHiMA0GCSqGSIb3 DQEBCwUAA4IBAQDELeyQrKEE0rQsraP+d8c3pEgNBz99SF5mjC7t60rGKvWvzXYZ ynPQs+eU5WkVtrilWfjFfLch09dx03P0M0Hlw3rep6r3UkGoNZRC/fQmrApZU3De IyxMnRHXcXqhy/hb1YtHEV174tTQKbvUlKenO33v32PfD6ascUASUrpE+2WvghGO tQ95Y8w8DAVpk0lCXayo66gjJFb3pCHuknanJFQ5L+7dhgYNH36zUFooJ+EY0X3y raYxFQFw8g4+fjFDvFwiQ34qBSIJ/p7v8D5on/+LycM9xY61JMw1QC9hwIf16g8B wzNiuBgxhu/tOSsJQ29LtFMYfFseaXy1S8Qz -----END CERTIFICATE-----Generated at Thu Nov 5 19:06:52 2026 by rpki-client