$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS205960.roa File: AS205960.roa (raw, json) Hash identifier: laRmQdzNAvgLvAnVYamjvpMOK05ev19LG1+FHtvcOdE= Subject key identifier: AC:DF:FF:C9:00:71:8F:AC:E0:48:AC:6F:78:C1:F6:F6:87:9B:60:4C Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6583F26B41374601ED1BF079B1E9316B609A1D2D Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS205960.roa Signing time: Tue 27 Oct 2026 00:03:01 +0000 ROA not before: Mon 26 Oct 2026 23:58:01 +0000 ROA not after: Tue 26 Oct 2027 00:03:01 +0000 asID: 205960 IP address blocks: 79.183.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:83:f2:6b:41:37:46:01:ed:1b:f0:79:b1:e9:31:6b:60:9a:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 26 23:58:01 2026 GMT Not After : Oct 26 00:03:01 2027 GMT Subject: CN=ACDFFFC900718FACE048AC6F78C1F6F6879B604C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:d7:90:b1:28:1e:96:f6:cd:a4:09:52:6f: 36:a2:81:3c:f5:ca:3d:86:56:74:82:0a:5b:79:b3: f4:d4:95:1b:58:cb:5f:81:13:79:d6:d9:04:d7:2d: 1e:3f:bc:31:12:74:36:3a:8f:05:54:e8:57:ff:37: 21:53:71:12:24:b1:74:90:97:e6:f6:57:07:98:1e: 3e:21:6c:79:21:75:59:7b:30:d3:53:b1:12:2c:ea: 60:40:19:d1:46:4e:e1:ef:d9:c3:7e:06:23:5c:97: 83:25:f3:88:05:c8:26:c9:ba:7f:44:42:a5:7e:97: dd:dc:a9:e4:cc:d9:dc:60:85:0d:85:a7:3b:57:97: 79:3b:6d:31:48:9c:ce:ae:6a:92:27:b1:09:31:be: 51:50:74:35:15:ec:3d:8b:24:62:f6:1d:5c:f9:f1: 8d:2e:5f:ed:d3:82:a9:69:95:f1:bd:a9:2e:cb:8f: f9:a7:9c:f5:ac:4c:b4:75:38:4c:53:2c:ad:bf:1e: c7:0a:60:ca:46:47:fd:b9:9f:4c:84:e7:19:dc:98: 4e:6f:55:6a:57:37:92:2e:16:95:ea:76:48:7e:ef: 97:2f:13:48:4f:78:b4:bd:e5:06:96:99:29:04:71: ff:ad:96:a6:bc:87:af:01:7d:16:6d:49:23:8b:4a: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DF:FF:C9:00:71:8F:AC:E0:48:AC:6F:78:C1:F6:F6:87:9B:60:4C X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS205960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.183.58.0/24 Signature Algorithm: sha256WithRSAEncryption 46:87:b9:d7:4f:ee:90:2c:6f:f6:19:03:91:9b:7c:df:9c:cf: 29:32:e2:d2:34:e1:14:70:93:f5:19:43:f9:f4:e3:2c:06:ff: bf:e1:ca:85:c8:04:56:4d:20:31:ff:9c:a0:24:82:a3:aa:82: 8a:5d:55:00:55:4b:a4:1c:32:e3:28:bd:18:4c:43:0f:20:98: 3b:cd:aa:9d:15:94:e2:9d:71:a3:84:b0:44:cb:a0:b4:61:e2: 4c:76:e6:2b:66:12:d8:15:b5:88:6b:3c:bb:e8:af:d2:81:64: dc:48:14:d5:d6:c4:d4:4e:b6:70:21:d4:c2:57:c6:5b:bd:0b: b8:ce:2f:42:ac:66:f7:5a:d0:e8:19:b0:eb:77:31:35:b7:2b: e3:1b:05:52:7b:4f:20:f4:44:84:4b:fd:96:30:61:8f:fb:71: 23:db:18:35:b5:0e:4c:95:3f:24:b9:d4:66:b1:8e:e0:4f:f9: 08:31:a9:33:7d:01:1c:d6:b0:b0:ac:52:38:be:23:d0:a6:f2: 56:c9:83:83:55:3c:35:88:2f:b9:5e:92:bb:89:54:32:98:3a: 2c:e3:6f:7d:1e:f4:96:90:ff:2b:d1:93:ea:21:af:4f:83:f8: 01:19:60:fd:3c:2f:5c:06:76:3f:c5:f7:52:77:c1:99:33:9c: 97:91:0a:04 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUZYPya0E3RgHtG/B5sekxa2CaHS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjYyMzU4MDFaFw0yNzEwMjYwMDAzMDFaMDMxMTAvBgNV BAMTKEFDREZGRkM5MDA3MThGQUNFMDQ4QUM2Rjc4QzFGNkY2ODc5QjYwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUdeQsSgelvbNpAlSbzaigTz1 yj2GVnSCClt5s/TUlRtYy1+BE3nW2QTXLR4/vDESdDY6jwVU6Ff/NyFTcRIksXSQ l+b2VweYHj4hbHkhdVl7MNNTsRIs6mBAGdFGTuHv2cN+BiNcl4Ml84gFyCbJun9E QqV+l93cqeTM2dxghQ2FpztXl3k7bTFInM6uapInsQkxvlFQdDUV7D2LJGL2HVz5 8Y0uX+3TgqlplfG9qS7Lj/mnnPWsTLR1OExTLK2/HscKYMpGR/25n0yE5xncmE5v VWpXN5IuFpXqdkh+75cvE0hPeLS95QaWmSkEcf+tlqa8h68BfRZtSSOLSjsjAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUrN//yQBxj6zgSKxveMH29oebYEwwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMDU5NjAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtzowDQYJKoZIhvcNAQELBQADggEBAEaHuddP7pAsb/YZA5GbfN+c zyky4tI04RRwk/UZQ/n04ywG/7/hyoXIBFZNIDH/nKAkgqOqgopdVQBVS6QcMuMo vRhMQw8gmDvNqp0VlOKdcaOEsETLoLRh4kx25itmEtgVtYhrPLvor9KBZNxIFNXW xNROtnAh1MJXxlu9C7jOL0KsZvda0OgZsOt3MTW3K+MbBVJ7TyD0RIRL/ZYwYY/7 cSPbGDW1DkyVPyS51GaxjuBP+QgxqTN9ARzWsLCsUji+I9Cm8lbJg4NVPDWIL7le kruJVDKYOizjb30e9JaQ/yvRk+ohr0+D+AEZYP08L1wGdj/F91J3wZkznJeRCgQ= -----END CERTIFICATE-----Generated at Sun Nov 15 18:16:10 2026 by rpki-client