$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: GEyuZyo1kFzWQCn0ZFNdF/x7CVirZmFFUejcURr88Uk= Subject key identifier: 85:23:3C:48:2F:2C:AB:FC:86:84:45:93:16:53:EA:71:5B:88:3F:75 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 7E5C9F3D4E6CD5C9F198066F5C52743CF1975F62 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa Signing time: Wed 11 Nov 2026 09:05:01 +0000 ROA not before: Wed 11 Nov 2026 09:00:01 +0000 ROA not after: Wed 10 Nov 2027 09:05:01 +0000 asID: 212238 IP address blocks: 79.176.255.0/24 maxlen: 24 79.182.11.0/24 maxlen: 24 79.182.135.0/24 maxlen: 24 109.65.7.0/24 maxlen: 24 109.65.8.0/24 maxlen: 24 109.65.9.0/24 maxlen: 24 109.66.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 14:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5c:9f:3d:4e:6c:d5:c9:f1:98:06:6f:5c:52:74:3c:f1:97:5f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 11 09:00:01 2026 GMT Not After : Nov 10 09:05:01 2027 GMT Subject: CN=85233C482F2CABFC868445931653EA715B883F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:44:97:79:8e:5c:28:fb:84:42:83:eb:16: 3b:9a:4a:17:32:0c:32:7f:5b:ef:f0:d8:d4:bf:a1: 97:62:ba:ed:f6:96:cd:3d:43:72:9c:10:75:a1:9e: 1a:ff:9a:66:c8:c5:02:a7:66:e1:fa:d9:a1:f6:a6: 76:4e:f3:1e:35:c0:cb:a4:04:bf:bd:58:ef:e9:a8: d8:be:a6:25:f0:74:60:ad:86:3d:3f:75:5d:62:eb: 5e:98:ad:cb:95:dc:f5:00:90:46:ed:7e:07:39:84: f3:90:fc:a5:83:e9:a8:10:45:fa:76:8e:0b:20:02: c9:51:c3:b3:87:02:dd:a7:86:7a:09:b6:8b:da:38: 30:17:72:74:0e:40:ee:4d:14:70:32:65:81:08:9d: 10:6a:36:66:19:43:91:a2:f8:85:63:9a:ee:be:ee: 2d:be:fb:3d:a8:e8:fe:59:a7:8b:e6:c2:cd:15:aa: c1:65:1c:fa:3a:84:d1:2e:a8:93:49:6e:fa:45:62: ef:08:8f:59:f8:dd:49:ec:19:bb:dc:f7:c0:79:1d: be:0c:d1:1f:8d:c4:9e:b5:af:62:64:f4:aa:b8:92: e1:aa:20:70:f1:7f:0a:81:db:2a:7d:89:47:2c:e8: 3b:16:7f:ac:1e:f7:8e:f5:ae:69:cf:07:47:69:f6: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:3C:48:2F:2C:AB:FC:86:84:45:93:16:53:EA:71:5B:88:3F:75 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.255.0/24 79.182.11.0/24 79.182.135.0/24 109.65.7.0-109.65.9.255 109.66.255.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e5:4b:3b:6b:1b:dc:05:8e:bf:18:f0:04:81:64:42:41:65: d5:d9:e1:c4:32:20:e5:88:6a:6e:eb:93:50:46:07:05:96:58: 96:5e:b4:88:56:a1:40:13:56:c6:09:ac:af:4c:5d:f3:e7:7c: 39:ea:cb:a7:8c:74:ae:df:09:aa:7d:8f:28:d1:aa:50:c0:a9: d3:16:9d:42:9d:4e:23:21:ae:a5:ec:48:b6:90:e7:bd:c9:c1: 91:51:0b:df:e0:95:99:bb:05:66:09:8a:11:99:f0:03:83:2f: 9d:eb:a5:7e:80:c3:58:66:f4:39:f0:6b:8e:94:43:66:3d:ea: 5f:ec:35:26:34:48:5d:16:86:27:8d:40:d3:64:a0:b4:fd:32: e8:32:8e:d0:32:5d:7e:af:f5:45:4c:1d:b3:cd:5d:03:92:b9: 96:9c:e8:61:da:a0:51:e4:e9:fc:4c:57:3f:a2:25:dd:be:52: 19:7b:b0:7e:9b:01:24:1d:1a:bb:5f:76:57:1e:a9:25:34:8e: b0:ab:44:e5:51:09:90:73:f4:f1:b8:79:a0:ff:bf:49:24:40: 42:dd:e9:94:dc:c9:81:3e:03:00:a1:57:6e:71:8f:7f:72:41: 9f:8e:f2:88:0b:ff:a0:0d:9f:ec:3b:c3:e4:95:ed:25:bc:e3: 81:47:6f:5f -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUflyfPU5s1cnxmAZvXFJ0PPGXX2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMTEwOTAwMDFaFw0yNzExMTAwOTA1MDFaMDMxMTAvBgNV BAMTKDg1MjMzQzQ4MkYyQ0FCRkM4Njg0NDU5MzE2NTNFQTcxNUI4ODNGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURESXeY5cKPuEQoPrFjuaShcy DDJ/W+/w2NS/oZdiuu32ls09Q3KcEHWhnhr/mmbIxQKnZuH62aH2pnZO8x41wMuk BL+9WO/pqNi+piXwdGCthj0/dV1i616YrcuV3PUAkEbtfgc5hPOQ/KWD6agQRfp2 jgsgAslRw7OHAt2nhnoJtovaODAXcnQOQO5NFHAyZYEInRBqNmYZQ5Gi+IVjmu6+ 7i2++z2o6P5Zp4vmws0VqsFlHPo6hNEuqJNJbvpFYu8Ij1n43UnsGbvc98B5Hb4M 0R+NxJ61r2Jk9Kq4kuGqIHDxfwqB2yp9iUcs6DsWf6we9471rmnPB0dp9n7HAgMB AAGjggJlMIICYTAdBgNVHQ4EFgQUhSM8SC8sq/yGhEWTFlPqcVuIP3UwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTIyMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMCwE AgABMCYDBABPsP8DBABPtgsDBABPtocwDAMEAG1BBwMEAW1BCAMEAG1C/zANBgkq hkiG9w0BAQsFAAOCAQEAleVLO2sb3AWOvxjwBIFkQkFl1dnhxDIg5YhqbuuTUEYH BZZYll60iFahQBNWxgmsr0xd8+d8OerLp4x0rt8Jqn2PKNGqUMCp0xadQp1OIyGu pexItpDnvcnBkVEL3+CVmbsFZgmKEZnwA4MvneulfoDDWGb0OfBrjpRDZj3qX+w1 JjRIXRaGJ41A02SgtP0y6DKO0DJdfq/1RUwds81dA5K5lpzoYdqgUeTp/ExXP6Il 3b5SGXuwfpsBJB0au192Vx6pJTSOsKtE5VEJkHP08bh5oP+/SSRAQt3plNzJgT4D AKFXbnGPf3JBn47yiAv/oA2f7DvD5JXtJbzjgUdvXw== -----END CERTIFICATE-----Generated at Wed Nov 11 23:12:08 2026 by rpki-client