
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS210809.roa
File: AS210809.roa (raw, json)
Hash identifier: g6wNdUKspvvt1xBTexTAS8DOE4ECdSYN4J3BCdl0lHs=
Subject key identifier: 51:72:4A:5B:AB:11:54:C8:2D:36:B1:5F:F1:06:60:F0:69:16:7D:CB
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 57FAC9012358B5841D12B5623C3DD032F80757D0
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS210809.roa
Signing time: Thu 29 Oct 2026 23:26:52 +0000
ROA not before: Thu 29 Oct 2026 23:21:52 +0000
ROA not after: Thu 28 Oct 2027 23:26:52 +0000
asID: 210809
IP address blocks: 79.182.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fa:c9:01:23:58:b5:84:1d:12:b5:62:3c:3d:d0:32:f8:07:57:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 29 23:21:52 2026 GMT
Not After : Oct 28 23:26:52 2027 GMT
Subject: CN=51724A5BAB1154C82D36B15FF10660F069167DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:6f:39:a4:4d:16:82:bf:9d:ec:1f:08:c9:
4f:a7:ae:3c:6e:9d:32:46:90:de:e0:2a:b9:51:2c:
cd:50:58:c5:d9:7c:c6:84:4f:72:b2:bb:cf:9b:78:
ae:3d:06:51:29:bd:58:79:fd:f9:7f:f7:56:58:0c:
ef:8e:7e:da:6f:7c:95:f4:84:cb:2b:05:56:ca:2b:
50:b9:35:03:45:4b:ef:22:f3:3c:87:17:3c:80:9f:
27:9a:dd:f6:e9:bd:8f:35:ee:9b:3d:69:03:f8:db:
43:38:40:ac:65:db:1b:90:98:b5:42:d7:54:3e:e0:
c1:c8:a1:3e:d6:b3:40:55:cc:67:c7:2e:6e:55:97:
f0:18:59:31:d9:0e:ea:fe:3c:3c:9a:8d:a2:d2:12:
61:68:1b:ba:e3:d5:e2:bd:2a:66:52:a6:24:31:b1:
fa:49:4c:c0:91:fa:23:73:28:14:ad:3a:d0:d1:a7:
3a:56:13:6c:e7:cf:6d:2c:d4:02:42:66:a2:5b:61:
ec:36:c2:e7:4a:09:84:86:c2:86:9f:e4:4a:a3:8a:
6b:b0:1c:97:f5:52:47:e5:57:95:85:d5:1e:a0:ff:
69:a6:04:fe:9c:71:e9:2c:94:93:24:55:02:c6:69:
a8:eb:04:4b:a5:4c:04:17:8c:fb:99:fb:8d:a0:47:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:72:4A:5B:AB:11:54:C8:2D:36:B1:5F:F1:06:60:F0:69:16:7D:CB
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS210809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.113.0/24
Signature Algorithm: sha256WithRSAEncryption
72:17:a2:b9:da:10:d0:43:94:62:0f:d2:c1:16:a6:51:7d:37:
a5:08:e8:f8:f3:c5:f8:ab:d7:cb:d5:c7:62:7c:83:b6:70:f6:
ae:01:37:89:f0:be:02:8f:93:78:3d:7f:ee:89:eb:01:46:e3:
3c:92:23:fc:45:c3:82:fa:e4:3b:26:2e:e7:52:85:fa:ea:f3:
0b:48:08:6e:0b:89:51:b6:aa:9b:78:51:c7:ba:8b:59:30:c7:
01:a7:c5:b8:34:cb:a3:bd:e0:d6:1e:fd:af:76:a7:f4:59:58:
6b:80:a9:aa:6d:51:91:e1:dd:95:5e:c3:84:16:98:fb:88:18:
a3:cc:45:7b:7d:e1:57:77:60:96:ab:fe:1c:75:37:69:98:81:
53:15:eb:e6:cb:e2:ce:16:12:2b:0a:05:10:07:43:26:78:b6:
3f:27:fd:d5:cb:86:39:15:71:b9:15:06:67:78:03:46:e2:61:
89:08:b3:24:ae:df:ef:9a:ad:d6:bb:8c:89:79:f4:5b:76:2b:
73:92:98:1a:95:32:c4:0a:24:fc:f4:76:f7:2c:0b:c4:8c:d1:
e4:38:88:a2:b6:63:4b:eb:d3:12:d6:f6:80:bc:e2:a5:6a:17:
cf:95:e9:38:55:6d:7d:01:63:52:15:28:0c:a5:f0:34:25:9c:
58:05:f9:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:13:15 2026 by rpki-client