$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152606.roa File: AS152606.roa (raw, json) Hash identifier: V5KB2u19fPxRPVAwUSYMVXoOE1rNG6rPQokJVs+o7DI= Subject key identifier: 34:20:DA:9B:5C:17:22:2F:38:E4:95:95:8F:97:B2:97:A7:3E:79:AC Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 14EC41EC014DFC4AFB6DE5236AC1F347C4C2CA9E Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152606.roa Signing time: Fri 30 Oct 2026 10:57:23 +0000 ROA not before: Fri 30 Oct 2026 10:52:23 +0000 ROA not after: Fri 29 Oct 2027 10:57:23 +0000 asID: 152606 IP address blocks: 79.182.119.0/24 maxlen: 24 79.183.15.0/24 maxlen: 24 109.65.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ec:41:ec:01:4d:fc:4a:fb:6d:e5:23:6a:c1:f3:47:c4:c2:ca:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 30 10:52:23 2026 GMT Not After : Oct 29 10:57:23 2027 GMT Subject: CN=3420DA9B5C17222F38E495958F97B297A73E79AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:31:62:82:b6:2c:ba:e1:d9:81:0c:ae:29: cb:54:94:a4:a9:51:1f:22:f4:67:eb:b5:ed:da:64: 09:5e:6c:5f:b5:bc:5e:f9:e0:34:cf:11:78:27:cc: 6e:f9:d8:fc:1f:ec:03:aa:a3:65:b2:d2:67:19:00: 36:34:7e:f1:6e:bc:2a:48:af:b3:5a:08:5f:5c:11: 87:c0:f5:74:4b:28:3e:0e:e1:7d:66:d9:13:25:d8: 8d:fd:f5:04:22:52:50:1e:eb:1e:07:e1:0e:5a:cf: 0b:75:44:77:0d:08:45:aa:99:07:26:a6:f2:ea:ad: ad:f1:12:1a:af:3e:12:78:ae:73:d4:46:eb:f8:35: 92:9b:9e:ef:03:68:5c:fc:8d:3d:04:9b:b3:67:b5: 19:bc:96:3b:0f:dc:22:cb:f7:ad:f5:c2:14:52:11: bd:ea:5e:f9:9e:ee:d0:37:4d:5c:cd:e9:03:75:df: 78:1b:8e:c8:2a:7c:9c:43:06:0a:fd:7d:ca:dc:a4: 05:11:3c:04:16:05:cb:3d:38:b6:37:5e:7c:85:d8: de:68:73:e9:a6:70:ea:1f:8d:11:7a:b9:23:8c:52: 84:ab:af:43:3a:3a:ed:5d:93:4b:7a:a0:18:73:87: 8f:b7:24:65:d7:c6:90:30:82:c3:a8:af:8f:82:b2: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:20:DA:9B:5C:17:22:2F:38:E4:95:95:8F:97:B2:97:A7:3E:79:AC X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152606.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.119.0/24 79.183.15.0/24 109.65.18.0/24 Signature Algorithm: sha256WithRSAEncryption c0:af:5a:aa:d2:1f:7b:3e:b4:27:43:b1:4a:02:9f:af:74:54: 49:a6:a6:10:87:dd:13:8a:50:a7:c0:be:32:a7:ff:e6:67:f7: 53:cc:9f:39:56:67:04:98:a8:2b:c8:32:bb:a4:f0:79:c5:f4: cf:89:27:a2:1d:3d:f8:33:8d:25:1f:e2:13:e8:38:6c:d7:a4: e1:31:b9:cb:7e:78:a5:7a:d5:e3:cd:cc:aa:8c:f8:c2:38:c7: 05:6e:43:f7:40:d5:0b:82:4a:ad:d0:e7:54:bd:28:c1:67:84: 05:f8:88:62:ef:cf:27:e5:6c:99:8f:ee:38:09:a2:8e:8c:a7: 3e:fd:7f:4a:6e:36:ce:2e:86:99:2f:db:65:d1:ea:0a:95:14: cb:0b:53:5e:d8:2f:4c:37:af:1e:52:09:40:22:f5:7f:44:ca: a2:e3:30:81:bc:2a:75:69:0e:d6:20:8e:ea:c5:cf:41:7d:c1: e7:7a:06:cf:eb:b8:31:b2:06:f0:57:f1:44:53:8a:e3:42:e5: e4:46:76:2b:fc:9f:a4:db:e1:24:7a:c2:f0:c9:cb:97:6b:27: 3a:40:13:09:42:9e:13:f0:aa:ad:89:82:f7:71:70:3c:43:ca: 2b:85:9c:77:83:a3:61:71:d0:11:25:87:ea:92:f8:11:e7:da: d3:07:9c:03 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUFOxB7AFN/Er7beUjasHzR8TCyp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMzAxMDUyMjNaFw0yNzEwMjkxMDU3MjNaMDMxMTAvBgNV BAMTKDM0MjBEQTlCNUMxNzIyMkYzOEU0OTU5NThGOTdCMjk3QTczRTc5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzTFigrYsuuHZgQyuKctUlKSp UR8i9Gfrte3aZAlebF+1vF754DTPEXgnzG752Pwf7AOqo2Wy0mcZADY0fvFuvCpI r7NaCF9cEYfA9XRLKD4O4X1m2RMl2I399QQiUlAe6x4H4Q5azwt1RHcNCEWqmQcm pvLqra3xEhqvPhJ4rnPURuv4NZKbnu8DaFz8jT0Em7NntRm8ljsP3CLL9631whRS Eb3qXvme7tA3TVzN6QN133gbjsgqfJxDBgr9fcrcpAURPAQWBcs9OLY3XnyF2N5o c+mmcOofjRF6uSOMUoSrr0M6Ou1dk0t6oBhzh4+3JGXXxpAwgsOor4+CsvvJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUNCDam1wXIi845JWVj5eyl6c+eawwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTI2MDYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABPtncDBABPtw8DBABtQRIwDQYJKoZIhvcNAQELBQADggEBAMCvWqrS H3s+tCdDsUoCn690VEmmphCH3ROKUKfAvjKn/+Zn91PMnzlWZwSYqCvIMruk8HnF 9M+JJ6IdPfgzjSUf4hPoOGzXpOExuct+eKV61ePNzKqM+MI4xwVuQ/dA1QuCSq3Q 51S9KMFnhAX4iGLvzyflbJmP7jgJoo6Mpz79f0puNs4uhpkv22XR6gqVFMsLU17Y L0w3rx5SCUAi9X9EyqLjMIG8KnVpDtYgjurFz0F9wed6Bs/ruDGyBvBX8URTiuNC 5eRGdiv8n6Tb4SR6wvDJy5drJzpAEwlCnhPwqq2JgvdxcDxDyiuFnHeDo2Fx0BEl h+qS+BHn2tMHnAM= -----END CERTIFICATE-----Generated at Sat Nov 14 21:27:20 2026 by rpki-client