$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: eu+nxCHOmf3YKkXp/dSzvBozrQxjoQ3f/cGi0L3beRY= Subject key identifier: DC:B1:B7:AA:44:A9:ED:1A:13:7A:A7:5C:60:91:51:C2:BC:E0:C9:0F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1D2C751107FFE9120BF1EF408A404DA9F654A3FD Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152868.roa Signing time: Mon 09 Nov 2026 00:07:39 +0000 ROA not before: Mon 09 Nov 2026 00:02:39 +0000 ROA not after: Mon 08 Nov 2027 00:07:39 +0000 asID: 152868 IP address blocks: 79.176.244.0/24 maxlen: 24 79.180.100.0/24 maxlen: 24 109.66.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2c:75:11:07:ff:e9:12:0b:f1:ef:40:8a:40:4d:a9:f6:54:a3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 9 00:02:39 2026 GMT Not After : Nov 8 00:07:39 2027 GMT Subject: CN=DCB1B7AA44A9ED1A137AA75C609151C2BCE0C90F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:c0:99:95:9e:b6:0b:0a:4f:1e:19:91:bd: 0b:5e:0a:5b:61:2e:5a:51:ce:e8:b8:cc:9a:36:64: 86:54:54:d0:98:29:12:7c:63:d3:19:68:52:f3:7f: 0a:28:07:fa:3b:de:0c:25:cc:3a:ad:fc:45:11:b1: 9f:dd:32:cf:95:e9:14:20:49:9f:c4:06:10:0f:8c: 4e:07:f7:28:cb:f6:85:e4:c8:9c:3e:50:99:c0:d6: d8:cd:5d:3a:56:40:5b:7f:5e:96:0d:1a:33:33:80: ab:1d:41:d1:fa:b9:5f:66:87:67:0f:b7:66:2d:2b: 29:01:f9:bb:a3:15:17:90:9c:39:89:40:27:87:4c: 51:97:36:65:57:ed:94:d5:41:c4:85:63:ed:37:a6: 7f:63:cf:32:c1:34:a7:a1:3f:86:f4:5c:a0:de:85: 4f:2d:0a:0a:06:ab:3a:4e:46:21:d2:e6:d0:ef:2d: 80:6f:dc:5b:3c:e7:01:53:34:b6:d7:52:18:61:e4: 3e:de:31:35:63:49:64:72:87:2a:22:ac:1e:f4:c4: 5b:41:60:5a:b5:f9:08:21:fd:08:e0:2a:76:1c:e5: a7:4c:30:2c:e7:3a:1a:b6:8c:46:33:e1:2e:8b:92: 74:c6:d5:ad:e5:d9:70:1a:8d:48:5d:5e:0e:9d:36: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B1:B7:AA:44:A9:ED:1A:13:7A:A7:5C:60:91:51:C2:BC:E0:C9:0F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.244.0/24 79.180.100.0/24 109.66.69.0/24 Signature Algorithm: sha256WithRSAEncryption 44:94:81:10:df:c7:7c:e5:68:75:f5:47:7c:f0:e3:3e:4b:74: cb:4a:8c:75:01:46:a0:39:86:7c:11:78:b9:e9:b4:20:a8:7c: a2:7d:75:3e:82:f6:ca:20:39:1a:d8:55:85:ea:13:fe:55:dd: f7:f1:ae:c6:92:b7:41:5b:c2:47:18:77:b4:88:4b:d2:50:71: 67:b3:18:d8:29:b5:72:0c:4a:e8:b9:e3:35:c2:db:e6:2a:92: d0:28:1a:4f:c8:61:24:e4:86:87:3c:36:38:65:df:f7:7c:39: b3:ae:75:73:dd:84:2a:44:a6:9c:09:5d:31:02:cb:c5:94:4d: 95:6c:f6:74:b3:fe:6a:df:46:1e:a0:d3:94:10:3b:b4:4a:6b: 07:5a:64:86:63:de:46:98:02:5f:f1:ed:6c:0b:7f:67:d1:f3: 84:ea:a9:99:aa:5e:95:67:c4:a0:7a:20:9a:53:21:77:07:38: 4e:24:d0:79:60:93:05:06:94:77:75:c0:1f:4e:f8:83:db:3a: ad:76:3e:ac:02:0f:80:38:eb:e9:41:aa:44:f0:75:32:53:67: fe:e5:7e:51:1a:c5:8e:f0:3b:36:fe:54:80:5a:41:be:74:a7: 03:ee:da:af:cf:cc:7d:c2:8b:19:51:06:48:46:44:38:9d:fe: 56:44:ae:7e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUHSx1EQf/6RIL8e9AikBNqfZUo/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDkwMDAyMzlaFw0yNzExMDgwMDA3MzlaMDMxMTAvBgNV BAMTKERDQjFCN0FBNDRBOUVEMUExMzdBQTc1QzYwOTE1MUMyQkNFMEM5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BcCZlZ62CwpPHhmRvQteClth LlpRzui4zJo2ZIZUVNCYKRJ8Y9MZaFLzfwooB/o73gwlzDqt/EURsZ/dMs+V6RQg SZ/EBhAPjE4H9yjL9oXkyJw+UJnA1tjNXTpWQFt/XpYNGjMzgKsdQdH6uV9mh2cP t2YtKykB+bujFReQnDmJQCeHTFGXNmVX7ZTVQcSFY+03pn9jzzLBNKehP4b0XKDe hU8tCgoGqzpORiHS5tDvLYBv3Fs85wFTNLbXUhhh5D7eMTVjSWRyhyoirB70xFtB YFq1+Qgh/QjgKnYc5adMMCznOhq2jEYz4S6LknTG1a3l2XAajUhdXg6dNp1JAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU3LG3qkSp7RoTeqdcYJFRwrzgyQ8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNTI4Njgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABPsPQDBABPtGQDBABtQkUwDQYJKoZIhvcNAQELBQADggEBAESUgRDf x3zlaHX1R3zw4z5LdMtKjHUBRqA5hnwReLnptCCofKJ9dT6C9sogORrYVYXqE/5V 3ffxrsaSt0FbwkcYd7SIS9JQcWezGNgptXIMSui54zXC2+YqktAoGk/IYSTkhoc8 Njhl3/d8ObOudXPdhCpEppwJXTECy8WUTZVs9nSz/mrfRh6g05QQO7RKawdaZIZj 3kaYAl/x7WwLf2fR84TqqZmqXpVnxKB6IJpTIXcHOE4k0HlgkwUGlHd1wB9O+IPb Oq12PqwCD4A46+lBqkTwdTJTZ/7lflEaxY7wOzb+VIBaQb50pwPu2q/PzH3CixlR BkhGRDid/lZErn4= -----END CERTIFICATE-----Generated at Sat Nov 14 21:27:24 2026 by rpki-client