$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa File: 326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa (raw, json) Hash identifier: qQlstETzls89/hXo5myM2bkOC7VSlCrPNYMmfyxC3IU= Subject key identifier: 59:B7:F5:16:83:3D:7E:D8:A1:60:CF:BA:DF:57:BD:DC:DC:9A:10:05 Certificate issuer: /CN=A609E97AC39E3F53678C0C9422F89947B6146002 Certificate serial: 523B641AD1A72076E612A1CE3AEC6C7FDC61D4CB Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer Subject info access: rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa Signing time: Fri 17 Oct 2025 11:02:57 +0000 ROA not before: Fri 17 Oct 2025 10:57:57 +0000 ROA not after: Fri 16 Oct 2026 11:02:57 +0000 asID: 210464 IP address blocks: 2a14:7583:200::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 05:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3b:64:1a:d1:a7:20:76:e6:12:a1:ce:3a:ec:6c:7f:dc:61:d4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002 Validity Not Before: Oct 17 10:57:57 2025 GMT Not After : Oct 16 11:02:57 2026 GMT Subject: CN=59B7F516833D7ED8A160CFBADF57BDDCDC9A1005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:9a:60:bc:c9:99:b6:b3:64:a7:2f:e0:f7: a0:95:d3:08:3c:f9:d3:6c:41:67:bc:9c:d8:2a:b9: 57:20:e0:e6:6a:92:58:9d:fe:3a:cf:53:9c:a4:50: e6:10:ee:62:fa:e7:08:ef:68:e2:b8:b3:f0:68:01: 0f:f6:fe:6b:e8:89:f1:51:fb:f2:4f:5c:dc:11:40: 38:b4:b0:84:86:19:b8:99:98:09:b7:8b:1e:6d:8a: 14:65:b8:62:8e:2b:fb:eb:9a:43:82:05:05:8f:62: 28:5e:6b:df:13:7b:82:b2:8c:27:2e:55:db:74:5d: d2:72:6a:94:88:96:17:06:c1:98:35:e9:15:76:75: 5a:7a:c1:03:31:b0:f0:91:f5:5c:1c:9e:31:16:a8: d6:d6:bb:e4:2b:8a:42:e7:60:c5:af:86:22:a0:a9: 29:42:50:c8:5e:a4:05:70:3b:7e:fc:7f:29:e6:00: f9:d8:97:97:d5:22:21:64:f2:0c:a4:69:07:95:11: 80:b3:77:e9:2e:6e:c9:e8:75:19:fe:ad:7f:e0:04: 91:d9:a0:32:e2:09:0d:73:09:25:26:d0:dc:c4:d9: 05:4d:1c:ce:4e:d0:ba:7c:ce:f7:16:4d:58:35:3f: 81:4e:60:91:bf:89:03:a6:7c:89:22:52:5f:b8:dc: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B7:F5:16:83:3D:7E:D8:A1:60:CF:BA:DF:57:BD:DC:DC:9A:10:05 X509v3 Authority Key Identifier: keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer Subject Information Access: Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3230303a3a2f33392d3339203d3e20323130343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:200::/39 Signature Algorithm: sha256WithRSAEncryption 24:6b:b4:fa:b7:85:d2:6e:65:aa:0d:6b:38:c6:2e:47:6c:e8: 28:3a:bc:61:cc:52:16:cf:28:bb:57:58:ed:61:7d:b9:98:31: 78:6b:b6:bc:c3:26:11:31:bd:ac:cc:bc:68:79:3c:87:27:a8: ad:42:e1:62:51:0f:7e:cb:7a:f3:4b:c1:8d:ff:84:18:a6:3f: 5e:18:12:82:12:4e:00:27:d3:a1:a1:0c:bc:9f:ab:f0:01:0e: d8:2f:af:c6:f4:70:3c:68:e1:5e:e8:e4:85:e2:95:b3:b2:67: 59:38:80:22:32:a6:65:da:95:bb:6a:21:b1:cc:3c:a8:3f:38: 0f:2e:33:81:95:71:05:4a:ef:98:f8:89:90:1d:e7:38:97:c1: 3d:37:0b:10:e3:fd:56:c8:30:0f:9f:3b:c8:fc:77:23:38:1d: 29:19:9f:93:8d:4d:2e:80:a1:80:23:1d:a6:8c:0c:59:0e:49: 81:3d:90:71:20:0c:65:f9:9d:89:78:bb:c7:bb:25:da:1a:0a: 04:d1:48:4c:cf:b9:03:fe:b4:23:1e:a7:a7:dc:63:9e:e4:cc: d9:18:3a:de:48:4d:cd:12:89:f3:dd:97:58:b5:a3:0e:95:3d: d9:bd:06:6b:3e:9c:18:37:09:20:dd:97:a6:b3:2e:ce:b5:02: 83:b7:6c:ad -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUUjtkGtGnIHbmEqHOOuxsf9xh1MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC NjE0NjAwMjAeFw0yNTEwMTcxMDU3NTdaFw0yNjEwMTYxMTAyNTdaMDMxMTAvBgNV BAMTKDU5QjdGNTE2ODMzRDdFRDhBMTYwQ0ZCQURGNTdCRERDREM5QTEwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrppgvMmZtrNkpy/g96CV0wg8 +dNsQWe8nNgquVcg4OZqklid/jrPU5ykUOYQ7mL65wjvaOK4s/BoAQ/2/mvoifFR +/JPXNwRQDi0sISGGbiZmAm3ix5tihRluGKOK/vrmkOCBQWPYihea98Te4KyjCcu Vdt0XdJyapSIlhcGwZg16RV2dVp6wQMxsPCR9VwcnjEWqNbWu+QrikLnYMWvhiKg qSlCUMhepAVwO378fynmAPnYl5fVIiFk8gykaQeVEYCzd+kubsnodRn+rX/gBJHZ oDLiCQ1zCSUm0NzE2QVNHM5O0Lp8zvcWTVg1P4FOYJG/iQOmfIkiUl+43GCxAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUWbf1FoM9ftihYM+631e93NyaEAUwHwYDVR0j BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4 OTk0N0I2MTQ2MDAyLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy c3luYzovL3Jwa2kuYXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8wLzMyNjEzMTM0M2Ez NzM1MzgzMzNhMzIzMDMwM2EzYTJmMzMzOTJkMzMzOTIwM2QzZTIwMzIzMTMwMzQz NjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYBKhR1gwIwDQYJKoZIhvcNAQELBQADggEBACRrtPq3hdJu ZaoNazjGLkds6Cg6vGHMUhbPKLtXWO1hfbmYMXhrtrzDJhExvazMvGh5PIcnqK1C 4WJRD37LevNLwY3/hBimP14YEoISTgAn06GhDLyfq/ABDtgvr8b0cDxo4V7o5IXi lbOyZ1k4gCIypmXalbtqIbHMPKg/OA8uM4GVcQVK75j4iZAd5ziXwT03CxDj/VbI MA+fO8j8dyM4HSkZn5ONTS6AoYAjHaaMDFkOSYE9kHEgDGX5nYl4u8e7JdoaCgTR SEzPuQP+tCMep6fcY57kzNkYOt5ITc0SifPdl1i1ow6VPdm9Bms+nBg3CSDdl6az Ls61AoO3bK0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:30 2025 by rpki-client