$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142561.roa File: AS142561.roa (raw, json) Hash identifier: PYOdqeTh5PncDY/RoCtiBgeWvyr7d5FnRPNY1Lb4ZLc= Subject key identifier: CF:BC:01:C8:88:47:FE:57:47:02:BA:50:A4:22:07:31:15:2B:A5:58 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3108F41B3E8064F376F496BB9AD1BDC13D8F70D1 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142561.roa Signing time: Mon 02 Nov 2026 08:26:12 +0000 ROA not before: Mon 02 Nov 2026 08:21:12 +0000 ROA not after: Mon 01 Nov 2027 08:26:12 +0000 asID: 142561 IP address blocks: 79.182.121.0/24 maxlen: 24 79.183.64.0/24 maxlen: 24 109.66.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:08:f4:1b:3e:80:64:f3:76:f4:96:bb:9a:d1:bd:c1:3d:8f:70:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 2 08:21:12 2026 GMT Not After : Nov 1 08:26:12 2027 GMT Subject: CN=CFBC01C88847FE574702BA50A4220731152BA558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:69:cc:21:34:44:da:00:1d:ac:b9:97:54: f8:c0:77:fc:48:71:83:ca:0e:36:05:47:c7:24:8b: 1a:02:61:12:3b:c2:ba:30:4b:ea:48:5d:dd:c6:9d: ef:eb:7a:ab:69:f2:dc:a2:d7:d0:8e:94:4b:29:8a: dc:2c:3c:19:e9:9e:6c:35:88:d7:c5:71:16:ab:36: 39:da:a0:72:82:19:14:e8:c5:f4:8a:44:82:1c:f7: c0:2d:4a:40:87:25:14:c9:80:05:2a:76:bc:05:5e: bf:3c:ad:8b:d9:98:e0:b8:d2:9c:cd:c2:b4:fb:78: ab:4c:0f:f2:3a:54:ed:35:07:3b:e1:2e:1b:65:bd: 15:c8:32:4f:ce:ac:1a:cb:5c:3b:51:3e:6d:51:bd: 00:e6:0d:3e:dc:35:13:43:2d:ea:d5:c9:fb:9f:12: 58:5f:ae:09:07:1b:97:ef:75:88:5f:60:d6:02:82: c1:d1:18:c2:71:09:15:f9:2e:ea:bd:62:87:d9:76: 66:87:08:12:53:0a:ac:9a:83:d1:e9:96:66:48:60: 94:fd:dc:5d:03:c2:95:94:2e:00:02:db:16:3e:c5: b0:9f:0d:2a:8d:ba:d2:0f:f3:57:a6:17:6e:f7:29: 24:3e:e7:ea:b7:1b:93:cf:8f:ba:fd:d8:f7:26:b0: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:01:C8:88:47:FE:57:47:02:BA:50:A4:22:07:31:15:2B:A5:58 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS142561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.121.0/24 79.183.64.0/24 109.66.71.0/24 Signature Algorithm: sha256WithRSAEncryption 21:dd:da:4b:6a:08:e1:5b:fd:d8:1e:d3:cf:92:cb:8b:be:d9: 1d:ca:0e:ad:2c:f3:a2:d3:cd:ae:a0:16:b5:c5:1a:e8:f0:55: 58:3e:ad:60:e1:19:aa:ab:9f:3d:d7:a5:1f:86:74:67:a7:6d: 8d:1b:fc:9f:40:e2:0a:26:b8:e7:9e:48:43:a4:85:13:39:9f: e7:b4:04:a3:db:0b:4c:c2:9c:fd:94:40:ee:72:46:24:6f:14: 91:24:88:17:b9:b8:bc:a3:dd:c4:82:c8:ca:26:3f:b1:63:c2: d5:b3:85:66:57:fb:7d:93:7e:ff:24:c5:37:0c:7d:10:43:2d: 97:75:a4:61:7d:51:77:3a:31:cd:21:9e:1a:15:34:d3:b2:ff: df:b6:3f:8d:77:54:2a:8e:31:ad:a3:f6:8a:5f:fb:f9:fe:10: 88:6d:96:33:82:42:29:9e:7e:3b:b5:f1:94:01:42:1a:d4:82: bb:7a:93:97:e3:97:92:12:46:e4:b5:fc:f3:5c:30:4d:7b:d1: fd:76:d3:31:19:04:83:87:09:6e:a1:af:05:02:f7:01:5a:c0: 06:72:b8:fc:dc:bb:85:39:41:f9:a2:ac:d2:66:06:34:74:1b: a3:e9:e2:52:49:f6:b2:bc:2a:7a:9e:9e:13:0f:4b:0b:0f:1e: e4:6d:67:1a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUMQj0Gz6AZPN29Ja7mtG9wT2PcNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDIwODIxMTJaFw0yNzExMDEwODI2MTJaMDMxMTAvBgNV BAMTKENGQkMwMUM4ODg0N0ZFNTc0NzAyQkE1MEE0MjIwNzMxMTUyQkE1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEGnMITRE2gAdrLmXVPjAd/xI cYPKDjYFR8ckixoCYRI7wrowS+pIXd3Gne/reqtp8tyi19COlEspitwsPBnpnmw1 iNfFcRarNjnaoHKCGRToxfSKRIIc98AtSkCHJRTJgAUqdrwFXr88rYvZmOC40pzN wrT7eKtMD/I6VO01BzvhLhtlvRXIMk/OrBrLXDtRPm1RvQDmDT7cNRNDLerVyfuf ElhfrgkHG5fvdYhfYNYCgsHRGMJxCRX5Luq9YofZdmaHCBJTCqyag9HplmZIYJT9 3F0DwpWULgAC2xY+xbCfDSqNutIP81emF273KSQ+5+q3G5PPj7r92PcmsA5hAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUz7wByIhH/ldHArpQpCIHMRUrpVgwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDI1NjEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABPtnkDBABPt0ADBABtQkcwDQYJKoZIhvcNAQELBQADggEBACHd2ktq COFb/dge08+Sy4u+2R3KDq0s86LTza6gFrXFGujwVVg+rWDhGaqrnz3XpR+GdGen bY0b/J9A4gomuOeeSEOkhRM5n+e0BKPbC0zCnP2UQO5yRiRvFJEkiBe5uLyj3cSC yMomP7FjwtWzhWZX+32Tfv8kxTcMfRBDLZd1pGF9UXc6Mc0hnhoVNNOy/9+2P413 VCqOMa2j9opf+/n+EIhtljOCQimefju18ZQBQhrUgrt6k5fjl5ISRuS1/PNcME17 0f120zEZBIOHCW6hrwUC9wFawAZyuPzcu4U5QfmirNJmBjR0G6Pp4lJJ9rK8Knqe nhMPSwsPHuRtZxo= -----END CERTIFICATE-----Generated at Sat Nov 14 22:10:36 2026 by rpki-client