$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS205489.roa File: AS205489.roa (raw, json) Hash identifier: K1KYIrHsBMGALeX4HWTDGRh8/gjz2mh79S5BJ5CcpnM= Subject key identifier: 3E:FF:0A:73:47:3C:19:27:B1:8A:59:9A:0E:16:E5:3C:EC:56:AC:6F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7093556279C112C7454F28BDB185371D250E841A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS205489.roa Signing time: Thu 12 Nov 2026 15:10:46 +0000 ROA not before: Thu 12 Nov 2026 15:05:46 +0000 ROA not after: Thu 11 Nov 2027 15:10:46 +0000 asID: 205489 IP address blocks: 79.176.100.0/24 maxlen: 24 79.176.101.0/24 maxlen: 24 79.176.102.0/24 maxlen: 24 79.176.103.0/24 maxlen: 24 79.176.105.0/24 maxlen: 24 79.182.122.0/24 maxlen: 24 79.182.165.0/24 maxlen: 24 79.182.170.0/24 maxlen: 24 79.182.171.0/24 maxlen: 24 79.182.177.0/24 maxlen: 24 79.182.181.0/24 maxlen: 24 79.182.184.0/24 maxlen: 24 79.182.185.0/24 maxlen: 24 79.182.192.0/24 maxlen: 24 79.182.240.0/24 maxlen: 24 109.64.10.0/24 maxlen: 24 109.64.100.0/24 maxlen: 24 109.64.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:93:55:62:79:c1:12:c7:45:4f:28:bd:b1:85:37:1d:25:0e:84:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 12 15:05:46 2026 GMT Not After : Nov 11 15:10:46 2027 GMT Subject: CN=3EFF0A73473C1927B18A599A0E16E53CEC56AC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:41:1c:8d:a3:0a:ce:c7:bc:87:7d:fe:ca: 67:d7:8f:af:28:7f:9e:c3:8b:17:55:0a:6f:72:6c: c0:0e:65:45:d3:ed:ad:6c:e2:ed:08:0f:1f:f7:3f: ca:c5:ff:a5:93:e7:75:4c:f5:b6:09:fe:d3:7a:fb: 8a:b1:3a:47:53:83:6b:14:bb:d8:81:2d:96:fc:26: 31:f7:b0:7d:2e:50:23:e0:8d:b8:ee:97:20:7d:43: aa:bb:07:ed:77:27:00:47:de:78:ef:eb:5f:eb:41: 0d:b3:9c:19:73:db:65:58:6c:b8:5d:91:4a:55:cf: 4d:8b:23:38:d1:2a:0b:77:6a:bc:c9:41:24:aa:1b: 59:b2:45:19:0f:37:04:a8:6d:44:47:40:32:3c:6d: ba:56:bf:a1:d3:c8:d1:34:a8:56:0b:25:62:ed:67: d8:35:0b:e1:f7:9b:67:a1:03:d7:07:a7:b1:23:5b: fb:4f:54:f0:40:18:ba:57:0c:22:89:93:7d:8a:f2: e2:bf:48:74:fd:2c:26:67:c2:fe:2f:48:fc:58:78: 74:e7:e4:26:af:6b:c6:56:0e:19:0c:1f:1a:af:05: 6b:b5:93:ce:b4:a7:93:3e:56:68:00:43:2a:87:5a: 7f:2b:2f:b0:28:26:e9:25:63:c1:43:41:89:65:89: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FF:0A:73:47:3C:19:27:B1:8A:59:9A:0E:16:E5:3C:EC:56:AC:6F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS205489.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.100.0/22 79.176.105.0/24 79.182.122.0/24 79.182.165.0/24 79.182.170.0/23 79.182.177.0/24 79.182.181.0/24 79.182.184.0/23 79.182.192.0/24 79.182.240.0/24 109.64.10.0/24 109.64.100.0/24 109.64.190.0/24 Signature Algorithm: sha256WithRSAEncryption cc:7d:c9:af:23:fb:bd:4e:92:85:b4:72:88:3a:1a:38:07:42: c7:9e:e2:69:c1:7e:3f:d0:dd:bc:88:92:61:a4:3e:da:2b:be: 9d:0a:95:49:fd:d4:6d:e3:38:79:78:68:98:9c:0f:1a:a2:f9: 52:97:58:5e:1d:a6:3b:72:6c:29:1c:33:7d:a9:e7:1e:3a:da: 7e:da:49:7d:d6:fe:cd:f6:1b:ec:07:69:a0:ff:73:00:f0:88: 9e:f5:b4:1f:d4:a0:96:ba:55:e0:3d:38:af:9f:07:9d:11:99: d2:ae:ca:1e:bc:08:e5:d7:d0:ab:f6:55:6e:d7:7b:05:54:4e: 40:e4:d5:2e:60:8a:df:77:87:0f:d0:9b:0b:7f:b6:32:f6:e4: d0:71:b7:3c:75:b9:64:b3:a8:f7:ba:72:35:ea:2b:b3:03:71: d0:f3:71:1a:8c:be:44:80:3b:32:8b:6a:59:ce:85:58:aa:d8: 0c:ad:4a:06:e8:63:04:cc:fb:6d:a1:0f:be:c8:33:6a:7c:33: 37:f4:97:c5:2e:e8:a1:e6:81:ed:0c:a4:c9:d0:ce:69:ed:af: c5:23:82:3a:48:68:c3:5a:d9:0c:c8:5b:08:d2:24:dd:84:0f: 34:d9:b4:8a:53:ad:9f:e5:f7:fe:db:fe:02:0f:54:74:fc:e5: 4b:cc:48:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUcJNVYnnBEsdFTyi9sYU3HSUOhBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMTIxNTA1NDZaFw0yNzExMTExNTEwNDZaMDMxMTAvBgNV BAMTKDNFRkYwQTczNDczQzE5MjdCMThBNTk5QTBFMTZFNTNDRUM1NkFDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhkEcjaMKzse8h33+ymfXj68o f57DixdVCm9ybMAOZUXT7a1s4u0IDx/3P8rF/6WT53VM9bYJ/tN6+4qxOkdTg2sU u9iBLZb8JjH3sH0uUCPgjbjulyB9Q6q7B+13JwBH3njv61/rQQ2znBlz22VYbLhd kUpVz02LIzjRKgt3arzJQSSqG1myRRkPNwSobURHQDI8bbpWv6HTyNE0qFYLJWLt Z9g1C+H3m2ehA9cHp7EjW/tPVPBAGLpXDCKJk32K8uK/SHT9LCZnwv4vSPxYeHTn 5Cava8ZWDhkMHxqvBWu1k860p5M+VmgAQyqHWn8rL7AoJuklY8FDQYlliYTbAgMB AAGjggKNMIICiTAdBgNVHQ4EFgQUPv8Kc0c8GSexilmaDhblPOxWrG8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDU0ODkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQE AgABME4DBAJPsGQDBABPsGkDBABPtnoDBABPtqUDBAFPtqoDBABPtrEDBABPtrUD BAFPtrgDBABPtsADBABPtvADBABtQAoDBABtQGQDBABtQL4wDQYJKoZIhvcNAQEL BQADggEBAMx9ya8j+71OkoW0cog6GjgHQsee4mnBfj/Q3byIkmGkPtorvp0KlUn9 1G3jOHl4aJicDxqi+VKXWF4dpjtybCkcM32p5x462n7aSX3W/s32G+wHaaD/cwDw iJ71tB/UoJa6VeA9OK+fB50RmdKuyh68COXX0Kv2VW7XewVUTkDk1S5git93hw/Q mwt/tjL25NBxtzx1uWSzqPe6cjXqK7MDcdDzcRqMvkSAOzKLalnOhViq2AytSgbo YwTM+22hD77IM2p8Mzf0l8Uu6KHmge0MpMnQzmntr8UjgjpIaMNa2QzIWwjSJN2E DzTZtIpTrZ/l9/7b/gIPVHT85UvMSE4= -----END CERTIFICATE-----Generated at Sun Nov 15 09:47:13 2026 by rpki-client