$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: dij8EmEkYjVA0BYD/EaJDWdNGLM22NJgPRyhRSspSHY= Subject key identifier: 97:EC:E1:D5:3E:9C:7F:CE:4B:56:68:1A:9B:DD:87:5D:4D:43:6F:DB Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0A84DCB5D620C10A2128CF28D039AF71D0765A6A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16276.roa Signing time: Fri 06 Nov 2026 13:14:55 +0000 ROA not before: Fri 06 Nov 2026 13:09:55 +0000 ROA not after: Fri 05 Nov 2027 13:14:55 +0000 asID: 16276 IP address blocks: 79.176.152.0/24 maxlen: 24 79.182.115.0/24 maxlen: 24 79.182.137.0/24 maxlen: 24 79.182.139.0/24 maxlen: 24 109.65.19.0/24 maxlen: 24 109.66.49.0/24 maxlen: 24 109.66.59.0/24 maxlen: 24 109.66.76.0/24 maxlen: 24 109.66.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 02:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:84:dc:b5:d6:20:c1:0a:21:28:cf:28:d0:39:af:71:d0:76:5a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 6 13:09:55 2026 GMT Not After : Nov 5 13:14:55 2027 GMT Subject: CN=97ECE1D53E9C7FCE4B56681A9BDD875D4D436FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:e7:7c:71:1c:46:ae:ac:d5:76:6d:b3:d7: 6a:cc:68:df:c9:d4:2b:0f:84:f0:80:93:76:db:dc: 86:24:13:69:f3:d9:6e:5c:73:a4:ba:17:7b:8c:55: 5b:12:6f:5d:7e:d8:51:c4:19:1e:ab:09:36:ce:79: 2f:d3:f2:3c:f6:b7:e4:3b:ba:bb:42:88:4f:d5:15: a1:b8:ff:b6:5f:be:95:ba:e5:55:f3:04:4a:28:07: cb:6e:9b:40:a6:66:0a:d5:67:bb:01:35:0d:75:31: 42:b6:90:2a:24:ab:e9:11:91:b6:88:87:55:36:9e: 5e:78:cf:09:45:d7:9c:58:85:7b:d9:e0:ed:39:ff: 9d:35:22:44:6a:42:28:b0:05:f2:ee:33:4d:84:4a: 60:71:3a:37:06:91:dd:84:1e:85:8b:77:17:c7:3c: ab:26:45:53:1f:ff:e3:16:fa:25:3a:2e:28:22:33: 18:e6:36:13:d4:69:ea:d8:38:2a:3a:7a:8a:76:47: e0:0f:91:61:66:5b:b9:e3:fe:71:29:b7:99:ca:3a: 49:ac:76:86:34:9f:f3:9f:6e:a3:db:d8:5f:fd:fe: 04:d5:63:36:e4:95:d6:ff:b5:16:6f:ab:c8:16:40: e0:fc:88:b7:6d:27:b6:fc:2f:c1:c1:aa:2f:36:ab: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:E1:D5:3E:9C:7F:CE:4B:56:68:1A:9B:DD:87:5D:4D:43:6F:DB X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.152.0/24 79.182.115.0/24 79.182.137.0/24 79.182.139.0/24 109.65.19.0/24 109.66.49.0/24 109.66.59.0/24 109.66.76.0/24 109.66.242.0/24 Signature Algorithm: sha256WithRSAEncryption 02:b4:3d:f4:38:66:d1:95:92:f8:b3:0e:a7:89:1a:02:e9:d1: 8a:74:01:92:99:45:82:c3:5c:a2:5c:6a:0c:3e:ed:bf:af:9e: 6f:15:87:75:48:f4:a0:b1:42:79:c7:8d:aa:eb:d5:62:69:cb: 79:ed:22:cc:69:61:c9:13:80:05:dd:72:77:5e:7d:17:a8:d1: 3e:92:3b:82:81:bf:70:0c:1e:95:7d:3b:fc:df:c8:d9:c2:f3: a4:ed:f2:5c:64:8e:82:51:27:c4:58:c4:5f:95:93:93:2d:5a: c7:2a:40:66:8b:9f:dd:b4:83:16:ec:06:4d:2e:22:5f:68:92: 81:88:e0:2d:cf:e8:b8:92:0b:b7:9e:9a:40:00:33:60:4a:3a: d4:0a:c3:83:4d:4e:e2:12:7c:0c:96:b7:cf:84:b8:88:1a:85: 7c:ff:27:68:a6:05:83:4c:b1:4b:bc:50:53:5f:5b:9e:c4:52: 9a:32:06:68:3a:57:ed:68:d1:d7:ca:44:f7:58:47:ac:98:e4: 45:4c:fd:94:13:1e:23:94:1e:39:b3:c4:f9:52:8f:78:f9:81: f7:1a:b9:aa:9c:89:8b:13:06:cf:5b:04:7f:b3:a2:b9:f7:a2: 61:34:dd:3d:89:53:6d:f8:f5:e7:17:14:5b:a8:b9:18:18:a6: 59:ad:53:bc -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUCoTctdYgwQohKM8o0DmvcdB2WmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDYxMzA5NTVaFw0yNzExMDUxMzE0NTVaMDMxMTAvBgNV BAMTKDk3RUNFMUQ1M0U5QzdGQ0U0QjU2NjgxQTlCREQ4NzVENEQ0MzZGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBOd8cRxGrqzVdm2z12rMaN/J 1CsPhPCAk3bb3IYkE2nz2W5cc6S6F3uMVVsSb11+2FHEGR6rCTbOeS/T8jz2t+Q7 urtCiE/VFaG4/7ZfvpW65VXzBEooB8tum0CmZgrVZ7sBNQ11MUK2kCokq+kRkbaI h1U2nl54zwlF15xYhXvZ4O05/501IkRqQiiwBfLuM02ESmBxOjcGkd2EHoWLdxfH PKsmRVMf/+MW+iU6LigiMxjmNhPUaerYOCo6eop2R+APkWFmW7nj/nEpt5nKOkms doY0n/OfbqPb2F/9/gTVYzbkldb/tRZvq8gWQOD8iLdtJ7b8L8HBqi82q0DLAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUl+zh1T6cf85LVmgam92HXU1Db9swHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMxNjI3Ni5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQC AAEwNgMEAE+wmAMEAE+2cwMEAE+2iQMEAE+2iwMEAG1BEwMEAG1CMQMEAG1COwME AG1CTAMEAG1C8jANBgkqhkiG9w0BAQsFAAOCAQEAArQ99Dhm0ZWS+LMOp4kaAunR inQBkplFgsNcolxqDD7tv6+ebxWHdUj0oLFCeceNquvVYmnLee0izGlhyROABd1y d159F6jRPpI7goG/cAwelX07/N/I2cLzpO3yXGSOglEnxFjEX5WTky1axypAZouf 3bSDFuwGTS4iX2iSgYjgLc/ouJILt56aQAAzYEo61ArDg01O4hJ8DJa3z4S4iBqF fP8naKYFg0yxS7xQU19bnsRSmjIGaDpX7WjR18pE91hHrJjkRUz9lBMeI5QeObPE +VKPePmB9xq5qpyJixMGz1sEf7OiufeiYTTdPYlTbfj15xcUW6i5GBimWa1TvA== -----END CERTIFICATE-----Generated at Wed Nov 11 20:30:34 2026 by rpki-client