$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS211750.roa File: AS211750.roa (raw, json) Hash identifier: C+KDePcCvLBYQHSMta5U59+2e9yv6vJRbjumudc8Ohk= Subject key identifier: A2:3F:B3:45:E9:C7:B2:B4:5B:7A:D7:6F:1D:BA:91:C7:08:11:A2:C8 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3D7469AA70444C460CBF37D47A465E5EC92472CD Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS211750.roa Signing time: Mon 02 Nov 2026 09:45:32 +0000 ROA not before: Mon 02 Nov 2026 09:40:32 +0000 ROA not after: Mon 01 Nov 2027 09:45:32 +0000 asID: 211750 IP address blocks: 109.64.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:74:69:aa:70:44:4c:46:0c:bf:37:d4:7a:46:5e:5e:c9:24:72:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 2 09:40:32 2026 GMT Not After : Nov 1 09:45:32 2027 GMT Subject: CN=A23FB345E9C7B2B45B7AD76F1DBA91C70811A2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:f6:58:24:19:97:1e:06:a6:f3:5d:7d:94: 91:dd:e4:c6:8d:f1:bf:f9:55:d3:09:86:e0:7c:06: cf:5e:2a:fe:8a:fe:71:18:de:47:fe:ab:66:74:4d: 6c:e6:2c:25:15:d2:d7:2c:8e:17:c3:0d:cc:89:83: 1f:d4:c4:e5:43:36:cd:26:6a:aa:b7:3e:d1:86:23: 74:5b:20:38:be:60:49:7b:5c:66:3f:3d:e9:47:05: 75:df:9c:16:c8:47:ca:a4:f8:b8:38:b4:28:3a:9f: d6:8e:22:e9:e3:7e:8c:bb:27:4b:00:33:1b:79:1a: 37:39:e3:64:79:6a:a8:88:4a:38:2c:97:83:69:27: 7f:f5:86:c1:0b:3e:06:6a:15:55:0a:06:62:59:0d: e8:40:49:4b:a9:f4:41:0e:0c:9f:c2:8d:66:aa:b9: 35:81:2a:ee:bf:66:ce:fa:52:12:3d:1c:61:b4:3a: a1:b0:ac:8c:ae:e9:1f:1a:c2:34:e5:a1:9f:9d:56: 94:fb:25:b4:5f:7b:8c:06:d6:6f:ac:b2:8c:8c:83: a9:8a:5b:dd:b5:c7:ec:92:63:f5:11:a4:45:0c:ad: 6f:6f:96:85:71:45:38:d5:98:47:6a:ce:ca:4e:1a: 36:25:55:a6:d1:9b:77:7f:b9:0b:03:db:51:df:02: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3F:B3:45:E9:C7:B2:B4:5B:7A:D7:6F:1D:BA:91:C7:08:11:A2:C8 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS211750.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.18.0/24 Signature Algorithm: sha256WithRSAEncryption e4:d9:0f:3e:8d:cf:14:49:77:d5:44:67:9d:80:1f:cf:7f:ec: b4:60:43:2a:0e:85:4c:31:36:49:74:99:10:f3:e5:5c:ca:30: cc:d7:ad:f8:24:ad:55:0d:93:17:d0:8d:07:23:f4:06:70:4f: 1b:e2:a2:70:f1:cb:90:74:19:97:52:fe:7d:97:2b:14:ad:21: 0d:66:30:2f:1d:b2:2f:fc:27:b4:1a:0f:b2:04:91:82:f4:6d: 8f:15:80:9e:4a:68:92:7d:2b:95:9a:e2:56:23:8d:8c:0a:23: d4:c8:5c:69:93:1e:92:74:17:e9:a9:85:ef:02:7b:e1:f7:e6: 35:93:5c:1d:87:9e:8a:d4:ec:16:78:b0:06:02:ba:5b:ba:e3: 0b:b8:b1:1b:48:35:dc:ae:fb:14:b2:31:e8:b5:43:93:ee:2f: b7:dd:3b:24:dd:db:cf:97:3d:00:fa:17:84:d0:69:99:aa:85: 30:58:d8:08:98:be:5b:40:a3:39:6e:89:c3:c9:88:95:dd:e9: 2f:65:24:6b:61:58:79:65:55:ab:44:77:e5:71:26:69:0a:7b: 03:c2:2b:97:37:0b:0d:3b:cc:a8:2e:38:5e:c8:ef:8f:dc:9d: 25:57:e4:48:a2:c5:ea:75:ad:47:b8:d7:f3:aa:c9:a3:c4:22: 4c:ae:a4:75 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUPXRpqnBETEYMvzfUekZeXskkcs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDIwOTQwMzJaFw0yNzExMDEwOTQ1MzJaMDMxMTAvBgNV BAMTKEEyM0ZCMzQ1RTlDN0IyQjQ1QjdBRDc2RjFEQkE5MUM3MDgxMUEyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChw/ZYJBmXHgam8119lJHd5MaN 8b/5VdMJhuB8Bs9eKv6K/nEY3kf+q2Z0TWzmLCUV0tcsjhfDDcyJgx/UxOVDNs0m aqq3PtGGI3RbIDi+YEl7XGY/PelHBXXfnBbIR8qk+Lg4tCg6n9aOIunjfoy7J0sA Mxt5Gjc542R5aqiISjgsl4NpJ3/1hsELPgZqFVUKBmJZDehASUup9EEODJ/CjWaq uTWBKu6/Zs76UhI9HGG0OqGwrIyu6R8awjTloZ+dVpT7JbRfe4wG1m+ssoyMg6mK W921x+ySY/URpEUMrW9vloVxRTjVmEdqzspOGjYlVabRm3d/uQsD21HfAvlPAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUoj+zRenHsrRbetdvHbqRxwgRosgwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTE3NTAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQBIwDQYJKoZIhvcNAQELBQADggEBAOTZDz6NzxRJd9VEZ52AH89/ 7LRgQyoOhUwxNkl0mRDz5VzKMMzXrfgkrVUNkxfQjQcj9AZwTxvionDxy5B0GZdS /n2XKxStIQ1mMC8dsi/8J7QaD7IEkYL0bY8VgJ5KaJJ9K5Wa4lYjjYwKI9TIXGmT HpJ0F+mphe8Ce+H35jWTXB2HnorU7BZ4sAYCulu64wu4sRtINdyu+xSyMei1Q5Pu L7fdOyTd28+XPQD6F4TQaZmqhTBY2AiYvltAozluicPJiJXd6S9lJGthWHllVatE d+VxJmkKewPCK5c3Cw07zKguOF7I74/cnSVX5Eiixep1rUe41/OqyaPEIkyupHU= -----END CERTIFICATE-----Generated at Sat Nov 14 22:19:04 2026 by rpki-client