
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: ZWtAcNUcSaTOgUM4sthVNUR80UDqCWNlh87diZb+jWQ=
Subject key identifier: C2:37:FD:13:A4:EE:37:E7:37:07:75:4C:90:FB:87:4A:29:FC:D8:BB
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 559D92778A8485C85567447C92CD9A90C3B99DCE
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208690.roa
Signing time: Wed 28 Oct 2026 08:15:34 +0000
ROA not before: Wed 28 Oct 2026 08:10:34 +0000
ROA not after: Wed 27 Oct 2027 08:15:34 +0000
asID: 208690
IP address blocks: 79.182.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9d:92:77:8a:84:85:c8:55:67:44:7c:92:cd:9a:90:c3:b9:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 28 08:10:34 2026 GMT
Not After : Oct 27 08:15:34 2027 GMT
Subject: CN=C237FD13A4EE37E73707754C90FB874A29FCD8BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:a1:f8:d4:46:70:42:ba:fe:d5:f1:bf:9c:
4d:e9:c1:5b:95:d3:10:7c:bf:a9:2a:31:5f:9f:16:
fc:06:61:1d:b3:06:a4:2d:3c:10:6c:21:df:e3:99:
3e:86:0a:3f:35:2a:a6:2e:7d:f7:48:a1:d1:d9:80:
9f:d7:04:ec:e4:e8:8e:7c:22:89:44:54:d3:c7:9d:
ef:ac:e3:9a:4a:fc:8d:17:cb:b9:4d:fe:f2:29:4e:
db:fb:c8:f2:62:f2:c9:e0:bb:72:af:9a:10:bd:3d:
55:84:e9:0b:1c:b0:a6:37:bf:d9:df:85:d1:6f:7a:
aa:ed:a7:a9:f8:dc:47:bf:cb:65:88:22:8b:2e:30:
3b:5e:b2:92:ba:c2:5c:26:70:9d:a8:14:67:58:c8:
a4:ef:15:0b:0f:fa:cc:10:fb:f3:04:5d:93:97:e1:
41:76:2a:a0:e0:6f:61:30:12:9d:fc:86:11:4b:2b:
1a:e5:6d:fa:74:d6:28:85:be:f1:fa:d3:a9:d8:c0:
0f:59:08:15:cb:81:ee:8f:6c:45:7c:4b:f6:8d:27:
29:ac:69:22:90:46:a5:79:74:95:60:12:1d:94:b0:
1b:41:3c:7f:37:10:92:40:bf:45:19:99:8e:52:7b:
f2:30:a6:b6:dd:dd:33:d8:da:59:22:87:31:d6:ad:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:37:FD:13:A4:EE:37:E7:37:07:75:4C:90:FB:87:4A:29:FC:D8:BB
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:57:14:c1:98:43:c4:e1:c9:c1:84:e6:0d:e9:04:78:68:e3:
4f:fd:2f:6b:a5:f4:28:e1:f4:cc:93:03:95:6a:98:9a:85:d7:
a0:fb:ae:51:9e:c8:fd:fb:54:76:96:76:fe:76:d6:83:92:ff:
2f:d3:ac:ca:7d:9c:52:ea:9c:9c:8c:a3:83:26:e3:d7:1b:93:
af:de:da:27:40:3f:9c:13:ac:8b:97:d7:02:88:63:82:a0:92:
0d:4a:10:00:d1:de:e4:26:9e:12:5f:99:cd:18:ad:18:b9:1d:
a0:e9:80:d5:4b:ac:a4:b9:1f:53:ce:a2:17:05:eb:44:e8:68:
25:96:97:d4:c5:49:67:87:1b:32:7f:07:3b:ce:9b:ac:06:3b:
42:0f:b9:c4:59:6b:7e:0a:74:02:83:e6:95:09:55:47:b2:87:
60:df:28:af:db:e9:a2:6f:82:1d:ef:65:d9:5a:99:54:cb:fe:
28:2e:fd:cf:b0:a9:25:80:ea:4e:7e:aa:5e:12:35:a2:fa:7f:
6b:f6:05:e0:9f:53:b7:eb:83:d8:55:19:25:53:87:69:57:c1:
1f:da:1c:4f:14:0a:8b:58:92:14:a7:6d:50:94:94:7d:36:5d:
0b:2e:a4:c2:4d:32:52:d2:82:e2:3d:d1:2a:16:e3:c5:b0:0b:
d6:d3:0e:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:18:43 2026 by rpki-client