$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS139331.roa File: AS139331.roa (raw, json) Hash identifier: /EJhnR64w5RwORd0j+T9u7Q06YkwYEKTvpv4DFIdOWQ= Subject key identifier: 1D:5E:DC:FD:30:50:E0:EE:7B:D0:72:CF:8D:75:13:53:AC:AF:24:D0 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 2E267A115B65753C6E3AAF29CD97996315034838 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS139331.roa Signing time: Mon 26 Oct 2026 13:41:20 +0000 ROA not before: Mon 26 Oct 2026 13:36:20 +0000 ROA not after: Mon 25 Oct 2027 13:41:20 +0000 asID: 139331 IP address blocks: 109.64.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:26:7a:11:5b:65:75:3c:6e:3a:af:29:cd:97:99:63:15:03:48:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 26 13:36:20 2026 GMT Not After : Oct 25 13:41:20 2027 GMT Subject: CN=1D5EDCFD3050E0EE7BD072CF8D751353ACAF24D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:99:59:fb:e1:d4:a2:bb:6a:6a:67:bd:8b: b0:16:28:a4:7b:43:ba:8e:ee:a5:c1:a5:9a:a8:a5: e6:0b:f6:b9:2f:d9:46:31:7e:5c:0e:5e:54:f2:f2: fd:50:52:63:6d:e7:fe:55:ff:f9:ba:ce:e5:eb:5e: 03:04:0c:9a:33:ae:17:c2:b4:f6:0e:6a:1b:24:0d: 79:fb:58:55:9b:c7:00:1d:d7:3b:9b:5c:12:2f:3b: b2:7f:d7:74:5f:b8:fa:e3:6c:04:f0:fb:08:41:88: b9:0a:7f:06:ef:fa:d6:fe:8d:cc:41:3c:97:66:f0: 37:ba:a9:b1:43:b7:ff:5f:2b:c4:d5:59:87:c9:0f: 3d:98:a1:54:90:4d:6e:9b:a4:43:69:7f:71:15:62: b8:85:66:77:93:c7:2d:75:ca:aa:47:c1:b1:7b:d9: 3c:1e:fc:d2:6d:ad:28:b1:a8:93:c6:d9:3f:8a:a7: 4b:73:02:df:bb:8c:bd:02:15:24:b0:25:c7:00:44: 32:15:40:14:98:28:3d:ce:b6:36:a4:d2:c3:1c:dd: 9c:f8:90:4e:6c:6d:3c:66:8c:ab:8c:fd:52:db:f1: 32:e9:24:9c:12:80:83:0e:c2:d0:ce:7d:39:b2:00: 71:d7:6e:df:93:d1:54:69:4b:a4:af:36:93:cc:b0: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5E:DC:FD:30:50:E0:EE:7B:D0:72:CF:8D:75:13:53:AC:AF:24:D0 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS139331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.64.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f4:07:13:3a:c5:85:5e:18:f9:98:ea:52:55:a8:48:7c:af: dd:3b:9f:5e:99:d6:d7:79:95:72:af:da:2a:7d:0d:5f:fd:88: cd:df:6c:98:c6:de:19:5f:9f:52:b8:8c:e9:b3:d0:25:d6:0e: 83:55:1d:0b:de:2b:aa:07:e5:a7:ed:75:b8:ff:18:e3:9b:d3: b4:b0:b2:90:6c:b9:c4:31:ef:30:68:95:c5:4d:cb:c9:24:a3: f0:48:fb:c7:ac:3b:25:f8:94:d0:e5:84:5b:c4:ef:fa:45:94: 2d:dd:75:ce:10:ee:9f:59:dc:07:34:bc:f2:eb:48:02:5d:39: ee:52:77:c2:fc:26:d8:b5:aa:0b:62:1a:8b:f4:18:01:86:74: 81:0a:be:c3:cc:62:3c:a5:a1:05:e2:7c:bc:67:e8:48:53:0b: 4a:a2:6b:1b:67:f8:57:ac:62:c9:34:4b:60:52:3b:06:08:f7: 91:35:a3:38:76:f8:45:bb:4f:64:95:d6:7e:35:db:98:31:3a: b7:05:c0:d5:9f:cf:4e:6a:d4:e3:cb:4d:71:3a:84:77:33:66: 0b:97:84:f4:8c:12:1b:6a:43:eb:7e:22:5f:0a:4b:0b:c0:ef: 34:6b:0b:56:6b:4f:f3:f3:78:5d:47:1f:c8:36:33:a5:61:03: 69:0a:e2:24 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIULiZ6EVtldTxuOq8pzZeZYxUDSDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjYxMzM2MjBaFw0yNzEwMjUxMzQxMjBaMDMxMTAvBgNV BAMTKDFENUVEQ0ZEMzA1MEUwRUU3QkQwNzJDRjhENzUxMzUzQUNBRjI0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVY5lZ++HUortqame9i7AWKKR7 Q7qO7qXBpZqopeYL9rkv2UYxflwOXlTy8v1QUmNt5/5V//m6zuXrXgMEDJozrhfC tPYOahskDXn7WFWbxwAd1zubXBIvO7J/13RfuPrjbATw+whBiLkKfwbv+tb+jcxB PJdm8De6qbFDt/9fK8TVWYfJDz2YoVSQTW6bpENpf3EVYriFZneTxy11yqpHwbF7 2Twe/NJtrSixqJPG2T+Kp0tzAt+7jL0CFSSwJccARDIVQBSYKD3Otjak0sMc3Zz4 kE5sbTxmjKuM/VLb8TLpJJwSgIMOwtDOfTmyAHHXbt+T0VRpS6SvNpPMsL/ZAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUHV7c/TBQ4O570HLPjXUTU6yvJNAwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxMzkzMzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQEAwDQYJKoZIhvcNAQELBQADggEBAAD0BxM6xYVeGPmY6lJVqEh8 r907n16Z1td5lXKv2ip9DV/9iM3fbJjG3hlfn1K4jOmz0CXWDoNVHQveK6oH5aft dbj/GOOb07SwspBsucQx7zBolcVNy8kko/BI+8esOyX4lNDlhFvE7/pFlC3ddc4Q 7p9Z3Ac0vPLrSAJdOe5Sd8L8Jti1qgtiGov0GAGGdIEKvsPMYjyloQXifLxn6EhT C0qiaxtn+FesYsk0S2BSOwYI95E1ozh2+EW7T2SV1n4125gxOrcFwNWfz05q1OPL TXE6hHczZguXhPSMEhtqQ+t+Il8KSwvA7zRrC1ZrT/PzeF1HH8g2M6VhA2kK4iQ= -----END CERTIFICATE-----Generated at Sun Nov 15 12:29:39 2026 by rpki-client