$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135542.roa File: AS135542.roa (raw, json) Hash identifier: RStLjDHfnIGcbfZoV+p8aDlQjSbhVd4tuBkWBE35rlQ= Subject key identifier: E2:DB:BD:80:D7:88:F3:72:C0:20:72:62:88:FE:08:DF:A6:16:9D:E3 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1CD5EAEA7DD84038147053C2EB2D8B9D3CA436F7 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135542.roa Signing time: Thu 29 Oct 2026 15:26:10 +0000 ROA not before: Thu 29 Oct 2026 15:21:10 +0000 ROA not after: Thu 28 Oct 2027 15:26:10 +0000 asID: 135542 IP address blocks: 109.66.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d5:ea:ea:7d:d8:40:38:14:70:53:c2:eb:2d:8b:9d:3c:a4:36:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 29 15:21:10 2026 GMT Not After : Oct 28 15:26:10 2027 GMT Subject: CN=E2DBBD80D788F372C020726288FE08DFA6169DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:b4:f6:6b:0c:bd:2f:d8:f3:a2:d3:a2:b7: 73:66:8e:6c:59:48:2c:a1:26:d4:0d:2b:67:a3:fc: d4:f4:1f:fc:3b:ea:21:50:97:1a:13:8a:fb:b5:cc: 39:d7:d7:78:49:19:ce:cf:a8:4a:77:7a:87:7b:b5: 06:c2:77:c5:78:d4:67:e0:a7:81:25:49:89:49:9f: 6e:96:63:e8:d7:a8:4a:22:b2:2b:a1:ba:de:e8:d3: d6:d4:d8:aa:6f:a8:16:92:07:a0:90:1f:5e:21:66: ba:5d:1d:4f:a4:92:d2:3d:8e:c7:1b:3a:34:ec:7a: 86:35:78:f8:22:c1:27:43:98:3b:e8:0f:1e:86:8f: 59:8b:3e:02:22:e7:5e:7f:b6:d6:80:b7:ae:63:04: db:e1:75:07:11:03:76:0d:4a:26:ec:05:f8:c4:8f: ec:e5:ab:4b:d9:2f:58:c9:8c:51:db:c5:fe:f3:8b: 20:7a:7e:48:63:6c:d0:2c:67:e2:a3:f2:20:2e:ae: 05:a2:6d:29:d2:9d:b7:0e:62:ea:a0:da:90:7a:8e: 7e:61:b5:ce:44:85:e5:da:2c:3b:07:4f:6b:d0:17: bc:a4:78:d4:c3:d1:20:7c:61:b0:13:63:26:5d:1b: 7c:7f:da:8c:8c:15:1a:2a:69:eb:26:15:5d:6b:35: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:BD:80:D7:88:F3:72:C0:20:72:62:88:FE:08:DF:A6:16:9D:E3 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS135542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.88.0/23 Signature Algorithm: sha256WithRSAEncryption 26:a0:ac:71:8c:91:7f:5b:ab:83:4c:8d:c9:27:7c:95:55:2d: b7:08:8d:d2:04:05:0d:3d:19:d5:fb:88:ed:24:ec:99:df:88: 67:63:e2:38:17:85:ff:8d:5a:cf:8d:11:94:25:d5:d7:c5:aa: d5:0b:66:99:3e:ce:e3:37:f2:a9:d9:13:f5:70:18:30:04:a1: 08:ca:80:26:b1:97:3b:08:8c:f4:dc:af:46:ee:d6:60:03:a3: 2e:3f:94:38:e8:08:88:71:d2:23:49:d7:be:13:2b:cd:80:b9: 16:f3:8e:30:ff:5e:a7:ae:b3:34:93:f6:55:b5:b4:81:5e:5f: 83:cd:d4:0a:37:6d:37:5e:94:fc:a1:e3:4f:b4:fd:1f:50:f3: 08:c2:ff:5f:01:7a:9a:74:8a:87:5f:a4:0a:63:c3:6b:2c:fe: c3:8f:fb:44:9f:1f:3e:4b:bd:91:ce:9c:22:0e:f4:bb:20:04: dd:86:3d:af:f6:19:e2:af:c4:9f:e1:ac:03:cd:53:71:43:94: 05:cc:43:a9:e8:c0:b0:9e:99:a1:76:ba:1a:85:56:8f:f9:d7: 2c:cf:c7:c6:ae:6d:dc:4c:d5:fc:4b:86:37:fa:e7:34:23:79: 9c:af:99:59:2c:4d:8c:ac:1e:e7:4d:27:66:77:97:86:89:2d: 15:fc:25:88 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUHNXq6n3YQDgUcFPC6y2LnTykNvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjkxNTIxMTBaFw0yNzEwMjgxNTI2MTBaMDMxMTAvBgNV BAMTKEUyREJCRDgwRDc4OEYzNzJDMDIwNzI2Mjg4RkUwOERGQTYxNjlERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5rT2awy9L9jzotOit3NmjmxZ SCyhJtQNK2ej/NT0H/w76iFQlxoTivu1zDnX13hJGc7PqEp3eod7tQbCd8V41Gfg p4ElSYlJn26WY+jXqEoisiuhut7o09bU2KpvqBaSB6CQH14hZrpdHU+kktI9jscb OjTseoY1ePgiwSdDmDvoDx6Gj1mLPgIi515/ttaAt65jBNvhdQcRA3YNSibsBfjE j+zlq0vZL1jJjFHbxf7ziyB6fkhjbNAsZ+Kj8iAurgWibSnSnbcOYuqg2pB6jn5h tc5EheXaLDsHT2vQF7ykeNTD0SB8YbATYyZdG3x/2oyMFRoqaesmFV1rNT6dAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU4tu9gNeI83LAIHJiiP4I36YWneMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzU1NDIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQlgwDQYJKoZIhvcNAQELBQADggEBACagrHGMkX9bq4NMjcknfJVV LbcIjdIEBQ09GdX7iO0k7JnfiGdj4jgXhf+NWs+NEZQl1dfFqtULZpk+zuM38qnZ E/VwGDAEoQjKgCaxlzsIjPTcr0bu1mADoy4/lDjoCIhx0iNJ174TK82AuRbzjjD/ XqeuszST9lW1tIFeX4PN1Ao3bTdelPyh40+0/R9Q8wjC/18Bepp0iodfpApjw2ss /sOP+0SfHz5LvZHOnCIO9LsgBN2GPa/2GeKvxJ/hrAPNU3FDlAXMQ6nowLCemaF2 uhqFVo/51yzPx8aubdxM1fxLhjf65zQjeZyvmVksTYysHudNJ2Z3l4aJLRX8JYg= -----END CERTIFICATE-----Generated at Sun Nov 15 16:13:54 2026 by rpki-client