$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS136038.roa File: AS136038.roa (raw, json) Hash identifier: /sQmo9D9mrClhio5fu3YHNj/zd6pVH6g1vrG8jX+cYU= Subject key identifier: 7D:C9:DB:EC:D5:65:D8:5F:12:E8:3E:65:CA:90:23:25:91:9E:CE:B1 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 27357EFB42D0B2BA69242EE7A78B37DD174D2BA2 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS136038.roa Signing time: Sun 08 Nov 2026 15:00:50 +0000 ROA not before: Sun 08 Nov 2026 14:55:50 +0000 ROA not after: Sun 07 Nov 2027 15:00:50 +0000 asID: 136038 IP address blocks: 109.66.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:35:7e:fb:42:d0:b2:ba:69:24:2e:e7:a7:8b:37:dd:17:4d:2b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 8 14:55:50 2026 GMT Not After : Nov 7 15:00:50 2027 GMT Subject: CN=7DC9DBECD565D85F12E83E65CA902325919ECEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:85:90:16:d0:e1:9c:52:5c:78:40:d2:a1: f0:7c:2e:55:cc:fd:dc:0b:16:2a:83:6c:27:2d:d3: 17:73:25:be:89:39:1c:57:e4:65:70:25:64:4f:1b: 4c:fc:87:5f:83:4a:01:24:31:02:64:75:2a:cf:e6: 95:a3:07:3d:0a:d5:b6:4b:5a:ae:c6:14:81:13:64: 3a:28:75:9c:6a:f1:43:18:d5:93:05:35:65:7c:ee: df:cc:04:67:67:26:7f:fd:2a:75:f7:b7:ab:84:5e: bb:29:b5:52:ff:a9:a8:c8:85:2b:61:89:5c:32:b9: 1d:19:e5:18:77:35:6c:08:6e:27:ca:21:e5:36:6b: a3:de:ad:1c:97:b0:31:d3:24:c9:37:5a:70:f3:c7: da:da:38:4c:e4:c6:44:3f:04:a5:cb:49:ce:0e:a3: 39:6b:c7:ac:90:4d:bd:ad:6e:61:1b:ef:47:0f:6d: e2:9e:53:de:d9:41:29:51:b1:7d:30:53:35:14:c0: 3b:bb:a4:17:39:65:61:79:cf:14:0c:94:92:84:b7: 37:d0:1c:d8:d3:49:e3:34:09:04:11:80:6f:ea:fe: 55:3e:99:73:83:31:e2:ab:2e:a7:57:fd:a3:e7:dc: d5:46:60:f1:07:90:a2:c9:f3:59:70:d6:20:81:e4: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C9:DB:EC:D5:65:D8:5F:12:E8:3E:65:CA:90:23:25:91:9E:CE:B1 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS136038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.88.0/23 Signature Algorithm: sha256WithRSAEncryption 65:e1:30:bc:06:84:82:72:1a:1e:50:24:fa:b6:5d:25:33:01: e5:dd:40:b6:9a:33:32:0b:06:6b:17:2b:91:af:08:db:d1:fa: 0b:06:be:a2:35:72:1b:93:b7:ad:54:db:5f:31:a8:93:2f:38: 09:88:4c:97:54:ad:a3:6e:a6:50:4b:9c:5f:da:81:d1:c5:34: d6:58:4d:3d:70:9f:6a:aa:77:2e:fc:3e:d0:1a:12:da:fb:01: e2:b2:c9:be:f5:d4:4d:76:f1:d9:ca:ac:74:7f:b2:b0:25:b5: 22:e6:36:03:22:f6:4f:2c:48:c3:0b:c6:30:d1:54:73:f9:93: d3:94:6b:62:7a:6d:c4:6b:63:f5:30:72:79:d9:d9:9f:c7:dd: a1:a4:d8:20:a7:3b:d1:22:95:c1:fa:2f:17:d8:44:ef:86:4d: 83:c7:19:31:7f:80:1d:9c:e6:bd:47:50:30:cd:fe:fc:de:72: 65:9f:17:0b:a8:a5:86:67:b5:da:3a:f3:08:75:f7:82:16:4b: 85:e1:42:5a:f2:52:18:2f:ce:40:fe:98:e0:5d:34:f7:9b:79: 74:2c:9c:75:0d:0c:8f:04:6e:24:48:21:0d:f5:fb:17:bc:56: 9e:41:d8:b8:65:14:33:74:f0:35:ab:00:75:94:c0:44:40:aa: 55:e9:d8:d4 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUJzV++0LQsrppJC7np4s33RdNK6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDgxNDU1NTBaFw0yNzExMDcxNTAwNTBaMDMxMTAvBgNV BAMTKDdEQzlEQkVDRDU2NUQ4NUYxMkU4M0U2NUNBOTAyMzI1OTE5RUNFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6YWQFtDhnFJceEDSofB8LlXM /dwLFiqDbCct0xdzJb6JORxX5GVwJWRPG0z8h1+DSgEkMQJkdSrP5pWjBz0K1bZL Wq7GFIETZDoodZxq8UMY1ZMFNWV87t/MBGdnJn/9KnX3t6uEXrsptVL/qajIhSth iVwyuR0Z5Rh3NWwIbifKIeU2a6PerRyXsDHTJMk3WnDzx9raOEzkxkQ/BKXLSc4O ozlrx6yQTb2tbmEb70cPbeKeU97ZQSlRsX0wUzUUwDu7pBc5ZWF5zxQMlJKEtzfQ HNjTSeM0CQQRgG/q/lU+mXODMeKrLqdX/aPn3NVGYPEHkKLJ81lw1iCB5JkTAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUfcnb7NVl2F8S6D5lypAjJZGezrEwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzYwMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFtQlgwDQYJKoZIhvcNAQELBQADggEBAGXhMLwGhIJyGh5QJPq2XSUz AeXdQLaaMzILBmsXK5GvCNvR+gsGvqI1chuTt61U218xqJMvOAmITJdUraNuplBL nF/agdHFNNZYTT1wn2qqdy78PtAaEtr7AeKyyb711E128dnKrHR/srAltSLmNgMi 9k8sSMMLxjDRVHP5k9OUa2J6bcRrY/UwcnnZ2Z/H3aGk2CCnO9EilcH6LxfYRO+G TYPHGTF/gB2c5r1HUDDN/vzecmWfFwuopYZntdo68wh194IWS4XhQlryUhgvzkD+ mOBdNPebeXQsnHUNDI8EbiRIIQ31+xe8Vp5B2LhlFDN08DWrAHWUwERAqlXp2NQ= -----END CERTIFICATE-----Generated at Sun Nov 15 19:02:25 2026 by rpki-client