$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402904.roa File: AS402904.roa (raw, json) Hash identifier: K7xqVLIifYDEiC3EtdOsMDrk/oiJQVjMa00mR3lBgsE= Subject key identifier: 2B:F1:DC:A2:53:82:D7:11:16:02:09:CA:91:B2:1A:03:64:BB:F8:05 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 357F9D2BFA03FECFDA79CD0A01ADF18CBB7ED346 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402904.roa Signing time: Tue 03 Nov 2026 14:13:22 +0000 ROA not before: Tue 03 Nov 2026 14:08:22 +0000 ROA not after: Tue 02 Nov 2027 14:13:22 +0000 asID: 402904 IP address blocks: 79.182.129.0/24 maxlen: 24 109.65.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7f:9d:2b:fa:03:fe:cf:da:79:cd:0a:01:ad:f1:8c:bb:7e:d3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 3 14:08:22 2026 GMT Not After : Nov 2 14:13:22 2027 GMT Subject: CN=2BF1DCA25382D711160209CA91B21A0364BBF805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:bb:65:ee:73:8c:70:9a:b3:90:c3:c8:6c: 80:92:cd:3e:2a:45:66:e3:74:c9:73:05:ea:42:d6: d7:8f:b7:e3:58:d0:7d:c7:bf:61:f1:19:a1:32:ee: e2:25:54:c2:ca:5f:1f:52:e6:09:4d:2b:53:45:68: 44:79:b1:94:28:21:9c:f6:94:f0:fb:2a:48:6c:b3: 07:61:90:c1:40:4a:87:7a:26:6a:f1:bf:4f:42:73: c6:ae:4c:27:a4:eb:2c:a1:c2:25:d4:41:2a:77:61: 78:83:f3:4a:4b:5e:31:02:1b:31:be:fc:bd:9f:ad: 81:03:6f:ac:ac:2c:b9:18:6a:9c:46:19:40:e5:6e: 2a:94:e1:65:12:94:2a:4f:25:84:1f:ba:67:e1:8b: fc:b8:76:11:5c:79:ed:f1:be:98:e3:1d:64:bb:7a: d6:ed:ec:db:17:9f:cc:e7:dc:73:73:1e:36:11:97: 07:ab:a9:d0:bd:fd:6f:e3:ff:98:b9:31:f5:35:42: 6c:09:70:c9:14:e5:94:2f:c1:4b:f8:71:63:fb:98: b7:60:d2:30:48:4e:90:b8:01:b7:35:f3:65:c0:22: f0:54:32:bf:b8:cf:4d:cc:46:da:4b:f3:9a:fe:4a: 5e:cb:49:e9:24:53:df:77:e8:8d:e8:e6:0f:86:f4: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F1:DC:A2:53:82:D7:11:16:02:09:CA:91:B2:1A:03:64:BB:F8:05 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402904.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.129.0/24 109.65.28.0/24 Signature Algorithm: sha256WithRSAEncryption 00:87:82:35:41:e5:fd:ea:64:81:4d:02:a3:1b:e7:c9:13:57: 92:0a:cb:79:11:51:e9:b6:c6:3f:9d:68:ad:80:5f:b9:36:4f: c8:7b:33:fc:5f:92:62:45:38:7a:7b:2a:cf:56:83:11:d8:60: 70:d6:21:92:64:0e:a9:83:f8:a6:85:6d:3a:ec:c0:ff:a8:89: fd:7c:bb:11:82:1c:cd:cc:b9:94:8d:0a:bd:eb:11:df:1a:88: 30:bf:92:59:56:24:d5:fc:c8:c0:b9:95:63:fc:78:46:e0:12: 70:ca:7f:eb:e8:b9:3f:64:b4:01:68:be:5e:af:55:6f:cf:6d: c7:ed:cb:0a:1d:81:a8:69:95:a3:28:fc:68:92:90:3b:2b:b2: 70:06:46:f7:ed:16:9c:3b:bd:36:3a:08:5e:39:15:c8:13:a0: de:49:23:54:19:58:1f:5b:a5:20:76:e6:f7:58:12:c5:29:e9: 1a:15:91:ec:0a:45:42:f9:ac:07:50:25:19:15:54:2a:6e:4d: 31:b0:a4:f1:c0:34:00:ed:ee:70:57:c8:85:d8:2e:4a:87:f6: 5f:fd:4c:5c:e6:21:8b:3b:e0:2f:ad:5a:b8:b3:da:a4:70:39: ec:e4:a5:1c:16:80:1b:b2:0d:47:29:ae:0a:0e:13:9e:a4:80: 0c:72:da:ea -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUNX+dK/oD/s/aec0KAa3xjLt+00YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDMxNDA4MjJaFw0yNzExMDIxNDEzMjJaMDMxMTAvBgNV BAMTKDJCRjFEQ0EyNTM4MkQ3MTExNjAyMDlDQTkxQjIxQTAzNjRCQkY4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv07tl7nOMcJqzkMPIbICSzT4q RWbjdMlzBepC1tePt+NY0H3Hv2HxGaEy7uIlVMLKXx9S5glNK1NFaER5sZQoIZz2 lPD7KkhsswdhkMFASod6Jmrxv09Cc8auTCek6yyhwiXUQSp3YXiD80pLXjECGzG+ /L2frYEDb6ysLLkYapxGGUDlbiqU4WUSlCpPJYQfumfhi/y4dhFcee3xvpjjHWS7 etbt7NsXn8zn3HNzHjYRlwerqdC9/W/j/5i5MfU1QmwJcMkU5ZQvwUv4cWP7mLdg 0jBITpC4Abc182XAIvBUMr+4z03MRtpL85r+Sl7LSekkU9936I3o5g+G9JWHAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUK/HcolOC1xEWAgnKkbIaA2S7+AUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDI5MDQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABPtoEDBABtQRwwDQYJKoZIhvcNAQELBQADggEBAACHgjVB5f3qZIFN AqMb58kTV5IKy3kRUem2xj+daK2AX7k2T8h7M/xfkmJFOHp7Ks9WgxHYYHDWIZJk DqmD+KaFbTrswP+oif18uxGCHM3MuZSNCr3rEd8aiDC/kllWJNX8yMC5lWP8eEbg EnDKf+vouT9ktAFovl6vVW/PbcftywodgahplaMo/GiSkDsrsnAGRvftFpw7vTY6 CF45FcgToN5JI1QZWB9bpSB25vdYEsUp6RoVkewKRUL5rAdQJRkVVCpuTTGwpPHA NADt7nBXyIXYLkqH9l/9TFzmIYs74C+tWriz2qRwOezkpRwWgBuyDUcprgoOE56k gAxy2uo= -----END CERTIFICATE-----Generated at Thu Nov 5 19:54:57 2026 by rpki-client