$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399275.roa File: AS399275.roa (raw, json) Hash identifier: +dcByHfLod9gYZTwpaTJBr2OYDhEAZC/6z4x1X0Pdic= Subject key identifier: 08:B1:5A:66:94:F7:F0:0C:BA:08:B9:33:34:96:84:EF:CD:25:DD:6B Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 76B068E7E718A5EABBFA5256361B38258CFF3AC9 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399275.roa Signing time: Sat 10 Oct 2026 10:45:42 +0000 ROA not before: Sat 10 Oct 2026 10:40:42 +0000 ROA not after: Sat 09 Oct 2027 10:45:42 +0000 asID: 399275 IP address blocks: 79.182.17.0/24 maxlen: 24 109.66.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 15:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b0:68:e7:e7:18:a5:ea:bb:fa:52:56:36:1b:38:25:8c:ff:3a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 10 10:40:42 2026 GMT Not After : Oct 9 10:45:42 2027 GMT Subject: CN=08B15A6694F7F00CBA08B933349684EFCD25DD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ac:c9:0c:3f:de:bf:91:04:b9:af:c9:a5:9e: 85:d7:1a:16:35:d6:ce:9c:41:11:97:f3:6b:ee:75: 26:0f:37:7b:02:dc:43:86:ac:9c:81:6d:f0:a9:31: b8:f1:de:a5:a1:92:54:15:a4:5b:d9:7c:3b:82:84: 7d:dc:c9:1c:a6:dc:39:88:9d:87:e0:45:ab:b3:ef: 1d:7f:61:4c:5b:4a:a6:77:04:5e:c9:39:7a:4e:5f: 4a:49:23:55:93:a1:7b:ca:e0:18:90:a5:ec:61:fa: 6a:d0:7a:f0:1f:03:f4:30:28:42:ee:70:e5:aa:2b: 1d:03:ac:1e:e8:b6:00:29:30:9c:a7:ad:db:ce:69: 53:b3:68:a9:cd:a8:d2:8e:3e:d2:16:78:20:1a:06: 64:fb:71:e4:93:fc:a4:c4:da:d5:a8:d3:a0:14:6f: 55:86:8a:ad:30:3e:eb:55:8a:c8:ff:40:a6:b2:e3: 94:3d:09:2e:31:38:a7:c4:33:50:a8:3c:20:4a:dd: 6f:46:ca:62:cc:7b:6b:99:de:ef:94:ff:ed:99:6b: 89:eb:20:b5:94:e8:b0:7d:b8:92:27:90:07:c8:86: 68:43:89:5a:39:39:f9:a8:dd:0a:0d:ba:50:ad:f7: 88:02:d9:cb:49:50:07:99:87:ce:83:cb:96:18:2a: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B1:5A:66:94:F7:F0:0C:BA:08:B9:33:34:96:84:EF:CD:25:DD:6B X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS399275.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.17.0/24 109.66.129.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f9:1f:66:bf:82:8c:52:f3:a1:b6:04:d0:c4:69:c4:b9:fd: 60:ec:22:58:2e:3e:1b:49:4a:2f:6e:9b:14:cc:fe:a6:b9:d6: 81:07:8c:7d:df:d6:26:33:e9:7d:76:2a:ac:2a:48:de:e0:e3: 17:6a:87:12:fb:94:20:78:ea:f8:f1:30:78:08:98:f1:df:f9: 2e:a6:0f:0b:32:36:b3:84:d7:85:b8:74:fc:d6:52:7e:3c:6e: 10:26:86:b7:9f:22:7d:df:c7:e4:c3:e7:65:71:78:00:73:b1: 42:05:a2:38:2c:fb:16:43:b2:93:04:95:b2:c2:96:5d:f5:50: b9:a9:1d:14:3b:ab:c0:36:35:f6:7d:92:21:05:98:4d:23:ad: 9c:6b:5d:7e:df:aa:7d:8f:b5:19:b7:c0:8b:2d:f0:c6:ad:62: 48:0a:44:3f:fd:33:f1:a3:08:e3:69:02:d1:22:3e:be:3b:78: d3:c0:58:2a:a6:05:be:dc:eb:3a:a8:e7:da:c5:5f:0e:4d:e5: f8:d6:e4:e6:ba:f2:a3:c3:dd:ee:dd:90:42:2b:34:6a:2b:b2: f7:2c:04:8d:1d:e9:ac:4d:5b:4a:97:3d:9f:f3:57:41:97:02: a8:a4:ae:0d:ed:e0:58:90:45:dd:4f:1a:e3:54:83:9e:c8:21: 39:a7:b5:46 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUdrBo5+cYpeq7+lJWNhs4JYz/OskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTAxMDQwNDJaFw0yNzEwMDkxMDQ1NDJaMDMxMTAvBgNV BAMTKDA4QjE1QTY2OTRGN0YwMENCQTA4QjkzMzM0OTY4NEVGQ0QyNURENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzrMkMP96/kQS5r8mlnoXXGhY1 1s6cQRGX82vudSYPN3sC3EOGrJyBbfCpMbjx3qWhklQVpFvZfDuChH3cyRym3DmI nYfgRauz7x1/YUxbSqZ3BF7JOXpOX0pJI1WToXvK4BiQpexh+mrQevAfA/QwKELu cOWqKx0DrB7otgApMJynrdvOaVOzaKnNqNKOPtIWeCAaBmT7ceST/KTE2tWo06AU b1WGiq0wPutVisj/QKay45Q9CS4xOKfEM1CoPCBK3W9GymLMe2uZ3u+U/+2Za4nr ILWU6LB9uJInkAfIhmhDiVo5Ofmo3QoNulCt94gC2ctJUAeZh86Dy5YYKvJ5AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUCLFaZpT38Ay6CLkzNJaE780l3WswHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzOTkyNzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABPthEDBABtQoEwDQYJKoZIhvcNAQELBQADggEBACT5H2a/goxS86G2 BNDEacS5/WDsIlguPhtJSi9umxTM/qa51oEHjH3f1iYz6X12KqwqSN7g4xdqhxL7 lCB46vjxMHgImPHf+S6mDwsyNrOE14W4dPzWUn48bhAmhrefIn3fx+TD52VxeABz sUIFojgs+xZDspMElbLCll31ULmpHRQ7q8A2NfZ9kiEFmE0jrZxrXX7fqn2PtRm3 wIst8MatYkgKRD/9M/GjCONpAtEiPr47eNPAWCqmBb7c6zqo59rFXw5N5fjW5Oa6 8qPD3e7dkEIrNGorsvcsBI0d6axNW0qXPZ/zV0GXAqikrg3t4FiQRd1PGuNUg57I ITmntUY= -----END CERTIFICATE-----Generated at Wed Oct 14 08:47:10 2026 by rpki-client