$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: dGnr6YJyPlIjTwePxHX2Lf/s6/Oo4OCfsVGJAS9FbyQ= Subject key identifier: EC:6F:4A:05:30:EA:FD:CB:8B:BF:E0:BD:D6:5C:E0:7F:39:67:AE:4A Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 39BFA99BF18E8712DA5DFC58ADB2A463BA8EC757 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa Signing time: Tue 10 Nov 2026 02:29:17 +0000 ROA not before: Tue 10 Nov 2026 02:24:17 +0000 ROA not after: Tue 09 Nov 2027 02:29:17 +0000 asID: 147281 IP address blocks: 79.176.13.0/24 maxlen: 24 79.182.12.0/24 maxlen: 24 79.182.64.0/24 maxlen: 24 79.183.14.0/24 maxlen: 24 79.183.17.0/24 maxlen: 24 109.64.6.0/24 maxlen: 24 109.65.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bf:a9:9b:f1:8e:87:12:da:5d:fc:58:ad:b2:a4:63:ba:8e:c7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 10 02:24:17 2026 GMT Not After : Nov 9 02:29:17 2027 GMT Subject: CN=EC6F4A0530EAFDCB8BBFE0BDD65CE07F3967AE4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:22:33:db:a6:22:7b:36:cc:d3:5c:b5:d6: 24:ac:70:b4:54:60:10:43:32:36:0a:80:ff:39:a6: 7c:97:a6:c1:ab:fa:93:8f:59:29:52:56:90:3d:30: aa:14:8f:d6:79:85:be:4c:a9:03:aa:d5:c6:f5:11: ff:2a:3d:e4:38:b4:8b:f8:da:12:52:9e:0c:db:12: 8b:59:8d:b8:4e:7b:72:35:45:5c:0b:3a:91:62:37: 8c:91:b3:1f:60:4c:59:5e:e6:96:d6:fa:02:8b:81: 43:1f:0e:0c:97:a2:4d:c7:77:ea:0d:b8:3a:4f:1f: fc:42:c3:13:2e:b7:66:6a:c5:b2:d7:36:1a:97:cf: d3:55:94:dd:f1:20:01:6a:dd:ed:0a:aa:cd:f7:87: b7:97:5c:33:83:5a:6d:e4:7e:ad:0b:f3:21:f2:ca: 67:54:ae:6d:60:55:ee:38:76:1e:1e:b7:87:ea:1e: 80:9f:33:7e:53:c8:59:b8:0e:ea:d1:48:29:00:90: 47:28:ce:7d:f6:38:18:49:ce:58:eb:d4:9c:c8:bb: b2:12:17:22:c1:3a:0a:cf:54:ee:b5:94:f0:16:d9: 77:cb:83:13:66:62:35:f9:d6:b0:20:10:71:e2:04: 11:a6:b0:ad:0d:2d:cf:d5:cd:59:5f:bd:e3:59:d4: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6F:4A:05:30:EA:FD:CB:8B:BF:E0:BD:D6:5C:E0:7F:39:67:AE:4A X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.13.0/24 79.182.12.0/24 79.182.64.0/24 79.183.14.0/24 79.183.17.0/24 109.64.6.0/24 109.65.14.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:e2:99:3a:cd:8c:5c:cd:00:7a:10:44:50:78:e4:42:aa:dd: 76:50:35:d6:ec:0e:11:b7:83:6c:c4:e3:07:18:d4:86:7a:74: 93:e9:83:97:e4:ac:48:be:83:7a:5b:9b:83:6f:c5:04:b2:28: c7:31:27:28:71:04:cf:99:7f:4f:e2:9b:e4:db:33:9f:1c:6b: 0b:4b:30:51:f4:6d:45:46:38:d0:12:e3:3b:75:68:93:f7:3c: d3:19:94:92:39:af:b3:8f:bb:d1:78:ab:dc:b4:1c:e6:e2:15: 97:cc:da:7a:c3:e9:0f:2c:6b:74:49:41:22:12:6c:be:cc:98: c1:f1:96:25:71:52:38:a4:7e:f0:11:8e:14:39:34:d5:47:ca: de:6e:fe:30:5a:98:68:f1:56:e2:03:e0:e1:8c:97:59:dc:1f: 31:68:53:5c:a0:d2:73:79:7a:fe:7f:bf:16:58:62:17:b1:a4: 5e:f1:ec:42:1f:a6:ed:7a:78:0e:7b:c7:5c:7f:3e:42:59:c8: 6c:76:28:86:c5:cd:b6:a5:a9:f0:da:66:38:e4:d9:8e:b3:10: 85:4b:aa:2e:da:88:36:22:40:ba:69:6b:7a:24:71:9c:28:fb: 78:bb:5c:c1:ed:f2:59:a3:1c:fc:3f:d0:06:9b:ab:c3:b5:78: eb:03:e2:37 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUOb+pm/GOhxLaXfxYrbKkY7qOx1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMTAwMjI0MTdaFw0yNzExMDkwMjI5MTdaMDMxMTAvBgNV BAMTKEVDNkY0QTA1MzBFQUZEQ0I4QkJGRTBCREQ2NUNFMDdGMzk2N0FFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfKCIz26YiezbM01y11iSscLRU YBBDMjYKgP85pnyXpsGr+pOPWSlSVpA9MKoUj9Z5hb5MqQOq1cb1Ef8qPeQ4tIv4 2hJSngzbEotZjbhOe3I1RVwLOpFiN4yRsx9gTFle5pbW+gKLgUMfDgyXok3Hd+oN uDpPH/xCwxMut2ZqxbLXNhqXz9NVlN3xIAFq3e0Kqs33h7eXXDODWm3kfq0L8yHy ymdUrm1gVe44dh4et4fqHoCfM35TyFm4DurRSCkAkEcozn32OBhJzljr1JzIu7IS FyLBOgrPVO61lPAW2XfLgxNmYjX51rAgEHHiBBGmsK0NLc/VzVlfveNZ1HNnAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQU7G9KBTDq/cuLv+C91lzgfzlnrkowHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAE AgABMCoDBABPsA0DBABPtgwDBABPtkADBABPtw4DBABPtxEDBABtQAYDBABtQQ4w DQYJKoZIhvcNAQELBQADggEBAIrimTrNjFzNAHoQRFB45EKq3XZQNdbsDhG3g2zE 4wcY1IZ6dJPpg5fkrEi+g3pbm4NvxQSyKMcxJyhxBM+Zf0/im+TbM58cawtLMFH0 bUVGONAS4zt1aJP3PNMZlJI5r7OPu9F4q9y0HObiFZfM2nrD6Q8sa3RJQSISbL7M mMHxliVxUjikfvARjhQ5NNVHyt5u/jBamGjxVuID4OGMl1ncHzFoU1yg0nN5ev5/ vxZYYhexpF7x7EIfpu16eA57x1x/PkJZyGx2KIbFzbalqfDaZjjk2Y6zEIVLqi7a iDYiQLppa3okcZwo+3i7XMHt8lmjHPw/0Aabq8O1eOsD4jc= -----END CERTIFICATE-----Generated at Sat Nov 14 21:27:20 2026 by rpki-client