$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: Nl1yIA1D8rbcvfZTcQPLpUtCqL1+y+/KG4+BBpYF/Hg= Subject key identifier: B1:2B:13:E5:FB:FD:1F:47:09:8F:54:15:2E:CD:F8:44:DB:BD:A8:6E Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0391D20992059BB25EB46F6AB44D1F48B91D0759 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa Signing time: Mon 12 Oct 2026 02:24:55 +0000 ROA not before: Mon 12 Oct 2026 02:19:55 +0000 ROA not after: Mon 11 Oct 2027 02:24:55 +0000 asID: 7029 IP address blocks: 79.176.176.0/22 maxlen: 24 79.180.12.0/22 maxlen: 24 79.180.20.0/22 maxlen: 24 79.180.28.0/22 maxlen: 24 79.180.36.0/22 maxlen: 24 79.182.140.0/22 maxlen: 24 79.182.232.0/22 maxlen: 24 79.183.20.0/22 maxlen: 24 79.183.172.0/22 maxlen: 24 79.183.188.0/22 maxlen: 24 79.183.236.0/22 maxlen: 24 109.64.12.0/22 maxlen: 24 109.64.104.0/22 maxlen: 24 109.65.24.0/22 maxlen: 24 109.65.40.0/22 maxlen: 24 109.65.76.0/22 maxlen: 24 109.65.108.0/22 maxlen: 24 109.65.168.0/22 maxlen: 24 109.65.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 13:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:91:d2:09:92:05:9b:b2:5e:b4:6f:6a:b4:4d:1f:48:b9:1d:07:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 12 02:19:55 2026 GMT Not After : Oct 11 02:24:55 2027 GMT Subject: CN=B12B13E5FBFD1F47098F54152ECDF844DBBDA86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:47:ab:c7:65:98:59:d8:72:89:38:41:cc: 31:ee:91:3d:ec:62:a5:85:b0:4c:80:d8:dd:77:45: a5:6d:7b:f4:bb:82:b3:6b:5e:c7:9a:9c:47:fd:31: c6:22:fe:45:08:b5:20:e4:8b:33:30:bb:60:43:55: 7c:0e:7c:0a:21:ff:7a:29:f3:ed:10:1a:5d:fa:7f: 60:9b:13:81:2f:4b:54:aa:fc:8b:cf:5f:94:ed:35: 2e:4f:53:70:68:1e:78:9c:f4:ec:ff:e8:ad:79:be: 0d:cf:ee:86:9f:5b:cb:d0:ae:1c:aa:a1:d2:d1:bc: 26:c3:48:ec:04:05:27:5b:4d:19:fc:6e:0c:d0:bc: 49:b6:06:ff:c4:dd:f5:d7:07:3e:63:de:0e:3d:f6: 56:cf:50:de:67:9a:36:f1:8e:e9:82:21:ec:6b:d1: 6c:1e:3c:ba:1a:9d:fe:37:56:12:96:93:c8:16:fc: 6b:a4:86:0c:6a:4d:f0:9a:d1:fc:5a:43:ce:c3:73: 1b:5f:08:34:25:ba:23:bc:90:68:03:30:8b:5c:03: b1:f6:26:1b:24:fe:6b:d7:c8:8e:11:48:63:6b:ee: 51:08:b8:89:3d:b9:c2:93:1d:d1:e0:14:74:1c:50: 0e:95:54:ab:9f:06:03:83:7d:1f:f7:67:03:b9:c4: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2B:13:E5:FB:FD:1F:47:09:8F:54:15:2E:CD:F8:44:DB:BD:A8:6E X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.176.0/22 79.180.12.0/22 79.180.20.0/22 79.180.28.0/22 79.180.36.0/22 79.182.140.0/22 79.182.232.0/22 79.183.20.0/22 79.183.172.0/22 79.183.188.0/22 79.183.236.0/22 109.64.12.0/22 109.64.104.0/22 109.65.24.0/22 109.65.40.0/22 109.65.76.0/22 109.65.108.0/22 109.65.168.0/21 Signature Algorithm: sha256WithRSAEncryption c5:70:78:42:e1:0e:77:f4:d1:c1:9e:54:37:30:cd:e3:47:06: e3:ac:32:bb:cb:34:18:79:d4:fd:59:3a:72:00:03:5b:dc:2b: d4:0e:c7:22:fe:f6:19:08:b5:11:f6:fc:45:fa:93:55:c8:08: 1e:04:32:cb:d2:f9:76:8b:d1:3b:d1:24:c1:1a:41:a2:60:cb: 5b:5a:37:ca:09:d8:88:60:7c:23:05:c2:f4:16:38:1f:6f:4d: 80:b0:9f:97:d6:3c:ad:ae:c8:91:c7:b3:6f:dc:52:4b:d7:38: 7c:c0:f9:a7:6e:a2:cd:5e:b5:20:02:5b:75:c2:26:6b:9b:b4: 6d:9e:76:15:89:b2:79:14:b2:01:af:52:cd:44:79:e1:5c:77: 79:6e:f5:c8:b3:ab:18:75:15:dc:5b:0b:fc:c9:0d:41:47:cd: e2:6d:ce:38:1c:1b:37:44:50:15:25:bd:e0:38:85:6c:2b:8c: e5:61:16:43:8d:ec:e2:51:f1:a4:94:da:b1:ae:10:29:0a:8b: 70:fc:48:7a:9c:89:d3:1c:09:b8:78:dc:99:9f:b8:e7:da:e9: c4:83:09:0f:36:5f:5d:ac:ec:dd:3a:5e:28:0f:45:a2:92:a7: c3:ad:ed:3c:76:52:6a:7a:ab:88:2f:23:ec:e9:17:84:72:ae: f0:52:70:0f -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUA5HSCZIFm7JetG9qtE0fSLkdB1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTIwMjE5NTVaFw0yNzEwMTEwMjI0NTVaMDMxMTAvBgNV BAMTKEIxMkIxM0U1RkJGRDFGNDcwOThGNTQxNTJFQ0RGODQ0REJCREE4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gkerx2WYWdhyiThBzDHukT3s YqWFsEyA2N13RaVte/S7grNrXseanEf9McYi/kUItSDkizMwu2BDVXwOfAoh/3op 8+0QGl36f2CbE4EvS1Sq/IvPX5TtNS5PU3BoHnic9Oz/6K15vg3P7oafW8vQrhyq odLRvCbDSOwEBSdbTRn8bgzQvEm2Bv/E3fXXBz5j3g499lbPUN5nmjbxjumCIexr 0WwePLoanf43VhKWk8gW/GukhgxqTfCa0fxaQ87DcxtfCDQluiO8kGgDMItcA7H2 Jhsk/mvXyI4RSGNr7lEIuIk9ucKTHdHgFHQcUA6VVKufBgODfR/3ZwO5xIVhAgMB AAGjggKqMIICpjAdBgNVHQ4EFgQUsSsT5fv9H0cJj1QVLs34RNu9qG4wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM3MDI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQC AAEwbAMEAk+wsAMEAk+0DAMEAk+0FAMEAk+0HAMEAk+0JAMEAk+2jAMEAk+26AME Ak+3FAMEAk+3rAMEAk+3vAMEAk+37AMEAm1ADAMEAm1AaAMEAm1BGAMEAm1BKAME Am1BTAMEAm1BbAMEA21BqDANBgkqhkiG9w0BAQsFAAOCAQEAxXB4QuEOd/TRwZ5U NzDN40cG46wyu8s0GHnU/Vk6cgADW9wr1A7HIv72GQi1Efb8RfqTVcgIHgQyy9L5 dovRO9EkwRpBomDLW1o3ygnYiGB8IwXC9BY4H29NgLCfl9Y8ra7Ikcezb9xSS9c4 fMD5p26izV61IAJbdcIma5u0bZ52FYmyeRSyAa9SzUR54Vx3eW71yLOrGHUV3FsL /MkNQUfN4m3OOBwbN0RQFSW94DiFbCuM5WEWQ43s4lHxpJTasa4QKQqLcPxIepyJ 0xwJuHjcmZ+459rpxIMJDzZfXazs3TpeKA9FopKnw63tPHZSanqriC8j7OkXhHKu 8FJwDw== -----END CERTIFICATE-----Generated at Tue Oct 13 19:44:50 2026 by rpki-client