$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS58325.roa File: AS58325.roa (raw, json) Hash identifier: cMbdHdBQjhZBpBc+hbZmh0sxly35JGw/TnyltpgMu2Y= Subject key identifier: 1A:98:E4:83:17:8C:AF:A4:A2:18:48:CA:44:A3:8D:31:FA:99:59:98 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 4F22ABBE125A85C52333534B4C093D8B30F09339 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS58325.roa Signing time: Thu 22 Oct 2026 20:50:22 +0000 ROA not before: Thu 22 Oct 2026 20:45:22 +0000 ROA not after: Thu 21 Oct 2027 20:50:22 +0000 asID: 58325 IP address blocks: 109.64.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:22:ab:be:12:5a:85:c5:23:33:53:4b:4c:09:3d:8b:30:f0:93:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 22 20:45:22 2026 GMT Not After : Oct 21 20:50:22 2027 GMT Subject: CN=1A98E483178CAFA4A21848CA44A38D31FA995998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:85:bd:59:f6:2e:d4:b6:98:36:5c:3a:63: 35:92:64:07:16:f8:16:9b:d8:5f:a3:a8:23:e0:10: 02:12:db:f0:94:ab:8c:6b:0b:3e:29:67:70:75:dc: f0:43:5f:78:bf:25:16:4b:e1:61:d5:55:22:3f:1f: b1:2b:b2:64:3d:e3:6e:1a:21:63:e9:37:e1:a7:65: 09:35:b3:ac:7a:16:58:ab:a5:7b:1a:7a:c8:bb:15: 7f:d8:09:d0:44:2f:1c:c6:8d:a5:4b:44:87:22:a3: 49:03:81:8f:11:f5:94:f0:71:17:1d:9a:7f:98:f0: 38:8a:ee:01:1b:09:d9:37:cb:5c:eb:a2:0a:35:6b: f8:30:c0:e5:5f:73:99:00:fa:12:07:2c:31:c5:1a: c4:64:fb:01:da:a2:d9:a3:8c:32:23:64:1e:73:98: de:8f:69:44:09:fe:97:2e:be:08:b1:f1:59:be:e7: a3:1e:65:da:b7:51:9d:c0:e9:d3:f1:d6:e4:82:b2: 48:e4:b8:2e:4a:f8:5f:76:f7:e1:7f:43:38:ff:04: e0:c7:da:55:91:4a:a6:03:9c:5e:1b:50:84:82:d8: 42:08:9d:66:de:ce:80:11:87:0c:fb:30:f8:f8:06: 82:52:b8:e8:c2:48:d8:2f:76:e7:da:e4:5c:60:34: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:98:E4:83:17:8C:AF:A4:A2:18:48:CA:44:A3:8D:31:FA:99:59:98 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS58325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.200.0/24 Signature Algorithm: sha256WithRSAEncryption 78:31:8b:1a:20:56:67:ec:e2:6f:fe:b0:01:f8:ad:41:75:be: d1:54:6c:b6:3b:24:76:ec:e2:6d:c6:d6:07:0a:1a:1f:00:95: 7d:79:9e:2b:5d:9d:7c:19:ec:79:56:4c:ca:a3:97:17:ee:e5: d7:58:b2:28:e1:7f:ae:70:33:8c:3f:41:d4:81:c9:a7:46:9b: 0c:e7:a2:31:f8:7c:d8:65:e2:4e:c4:2c:d1:92:62:e4:28:6e: 82:00:12:11:c6:0d:95:4a:0c:1e:01:af:f9:d9:4d:c0:82:fc: 22:a0:47:7e:63:ac:cd:77:d5:06:b7:42:bb:75:6e:25:be:9c: aa:83:3b:b1:90:9f:d9:47:3a:f5:41:b8:e6:61:78:a6:d6:fb: fa:db:7a:67:35:81:51:5f:89:7f:1e:5a:81:f0:9b:25:c4:d8: cf:0d:37:29:7d:46:b5:9c:d2:ae:cc:77:13:7f:8a:30:c6:8c: f4:62:a0:e7:93:6d:c5:71:3b:ad:59:36:84:62:63:f3:e3:af: c2:0a:81:76:60:50:46:a9:cd:8c:f4:7e:f6:d3:0c:e5:21:32: 8a:e0:da:8e:69:c6:02:1c:90:2a:fb:5e:d9:19:0f:a8:56:bb: 11:1c:b9:72:90:46:74:31:3b:69:da:c5:56:d4:bf:28:2b:ff: ab:03:52:d5 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUTyKrvhJahcUjM1NLTAk9izDwkzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjIyMDQ1MjJaFw0yNzEwMjEyMDUwMjJaMDMxMTAvBgNV BAMTKDFBOThFNDgzMTc4Q0FGQTRBMjE4NDhDQTQ0QTM4RDMxRkE5OTU5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/IW9WfYu1LaYNlw6YzWSZAcW +Bab2F+jqCPgEAIS2/CUq4xrCz4pZ3B13PBDX3i/JRZL4WHVVSI/H7ErsmQ9424a IWPpN+GnZQk1s6x6FlirpXsaesi7FX/YCdBELxzGjaVLRIcio0kDgY8R9ZTwcRcd mn+Y8DiK7gEbCdk3y1zrogo1a/gwwOVfc5kA+hIHLDHFGsRk+wHaotmjjDIjZB5z mN6PaUQJ/pcuvgix8Vm+56MeZdq3UZ3A6dPx1uSCskjkuC5K+F929+F/Qzj/BODH 2lWRSqYDnF4bUISC2EIInWbezoARhwz7MPj4BoJSuOjCSNgvdufa5FxgNKP9AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUGpjkgxeMr6SiGEjKRKONMfqZWZgwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM1ODMyNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAG1AyDANBgkqhkiG9w0BAQsFAAOCAQEAeDGLGiBWZ+zib/6wAfitQXW+ 0VRstjskduzibcbWBwoaHwCVfXmeK12dfBnseVZMyqOXF+7l11iyKOF/rnAzjD9B 1IHJp0abDOeiMfh82GXiTsQs0ZJi5ChuggASEcYNlUoMHgGv+dlNwIL8IqBHfmOs zXfVBrdCu3VuJb6cqoM7sZCf2Uc69UG45mF4ptb7+tt6ZzWBUV+Jfx5agfCbJcTY zw03KX1GtZzSrsx3E3+KMMaM9GKg55NtxXE7rVk2hGJj8+OvwgqBdmBQRqnNjPR+ 9tMM5SEyiuDajmnGAhyQKvte2RkPqFa7ERy5cpBGdDE7adrFVtS/KCv/qwNS1Q== -----END CERTIFICATE-----Generated at Sun Nov 8 06:05:27 2026 by rpki-client