$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa File: AS214483.roa (raw, json) Hash identifier: O+KSQx0alEho2i63MWVmVweXHW7X31ql/L0qwsrPaFM= Subject key identifier: 5A:09:98:47:3E:16:9D:CF:16:F4:F5:83:5E:FF:BE:13:3D:39:E5:A5 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 276EE92FC14ED8E6F87E8B1698C23FDC54FBED06 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa Signing time: Mon 02 Nov 2026 00:22:27 +0000 ROA not before: Mon 02 Nov 2026 00:17:27 +0000 ROA not after: Mon 01 Nov 2027 00:22:27 +0000 asID: 214483 IP address blocks: 109.64.165.0/24 maxlen: 24 109.65.144.0/24 maxlen: 24 109.66.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6e:e9:2f:c1:4e:d8:e6:f8:7e:8b:16:98:c2:3f:dc:54:fb:ed:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 2 00:17:27 2026 GMT Not After : Nov 1 00:22:27 2027 GMT Subject: CN=5A0998473E169DCF16F4F5835EFFBE133D39E5A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:44:14:4b:f3:67:84:20:dd:66:ce:74:d0: eb:e1:8b:0e:c2:6e:5d:7c:ff:0b:5a:0b:21:d3:73: 67:a6:b1:aa:2f:3b:bd:0b:31:e5:cc:0b:b4:2b:2e: cf:d3:f8:bb:02:04:9a:db:d6:c9:21:3c:29:25:f9: 4b:c7:97:98:68:9f:1d:a6:2e:11:8e:97:66:61:5b: 8e:cf:eb:3d:40:b8:6f:32:7f:03:84:46:11:54:21: bc:e8:b6:71:50:ab:84:0f:43:1a:f6:92:37:bc:0f: d3:59:19:16:33:8d:63:62:22:a5:18:ea:93:1d:c1: b2:dd:38:45:f8:f4:15:49:c3:22:0e:d2:1d:2d:bf: 9f:8d:31:ab:a6:ca:f3:6a:66:10:95:57:51:0f:0f: b9:24:41:bc:34:5f:e7:cb:08:4e:c3:62:b5:ce:93: 88:fd:5f:04:a1:b6:a9:b4:3b:4c:74:cd:41:8d:6d: 6d:68:b0:62:ce:bb:26:bc:0c:b3:5c:b4:26:4f:f9: 6c:91:6a:ad:90:04:aa:c0:e9:6e:53:b0:9d:bd:3e: 24:a1:b6:6c:58:bb:69:db:cc:9d:15:eb:18:37:54: fa:fe:57:3a:a9:19:2f:26:b2:bb:6e:11:63:b8:6f: 44:fa:7e:eb:8c:62:04:a8:e2:0e:31:5a:b0:82:20: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:98:47:3E:16:9D:CF:16:F4:F5:83:5E:FF:BE:13:3D:39:E5:A5 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS214483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.64.165.0/24 109.65.144.0/24 109.66.111.0/24 Signature Algorithm: sha256WithRSAEncryption 48:93:c8:04:58:50:37:15:8d:ba:32:0f:18:be:3d:7a:4d:83: 0b:a1:df:fc:9d:3f:b8:12:60:ef:1d:8a:f6:cd:73:89:1a:3d: 6a:1a:3d:96:f9:95:30:be:7d:1a:c6:ce:1b:53:e3:cb:4f:62: 72:6b:10:a0:25:7e:95:60:91:11:58:33:69:c1:8f:a7:0a:cf: fc:83:e3:e5:50:fa:82:63:71:1a:e8:e7:f7:60:b1:49:eb:17: 77:63:57:d3:1e:22:e7:c9:28:21:5d:93:51:76:82:01:37:fb: c1:f5:52:12:be:e6:e3:cb:65:da:d7:d5:ad:48:80:58:2e:4a: 87:00:42:21:b3:90:db:2f:a3:aa:fd:83:c1:86:b6:dc:23:92: 0f:bc:20:c9:77:24:c7:a9:1b:38:40:01:ee:31:31:2e:0c:7f: 6a:76:ab:cf:5d:69:4a:2f:70:8d:bb:19:98:81:f1:21:fb:67: 4f:d2:9b:b7:8b:7d:1b:fb:7a:26:ae:20:6c:eb:c9:5a:f5:92: e3:01:14:bc:9a:9e:ba:83:80:63:cf:04:74:f7:c3:23:37:4d: fa:94:15:65:81:1d:e9:13:d3:b8:0b:bb:9c:8f:e9:40:9b:4d: 71:b8:3c:a3:3b:bb:dd:55:31:af:8a:10:a5:27:58:2b:4c:8b: 94:57:00:12 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUJ27pL8FO2Ob4fosWmMI/3FT77QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDIwMDE3MjdaFw0yNzExMDEwMDIyMjdaMDMxMTAvBgNV BAMTKDVBMDk5ODQ3M0UxNjlEQ0YxNkY0RjU4MzVFRkZCRTEzM0QzOUU1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrokQUS/NnhCDdZs500Ovhiw7C bl18/wtaCyHTc2emsaovO70LMeXMC7QrLs/T+LsCBJrb1skhPCkl+UvHl5honx2m LhGOl2ZhW47P6z1AuG8yfwOERhFUIbzotnFQq4QPQxr2kje8D9NZGRYzjWNiIqUY 6pMdwbLdOEX49BVJwyIO0h0tv5+NMaumyvNqZhCVV1EPD7kkQbw0X+fLCE7DYrXO k4j9XwShtqm0O0x0zUGNbW1osGLOuya8DLNctCZP+WyRaq2QBKrA6W5TsJ29PiSh tmxYu2nbzJ0V6xg3VPr+VzqpGS8msrtuEWO4b0T6fuuMYgSo4g4xWrCCIFSJAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUWgmYRz4Wnc8W9PWDXv++Ez055aUwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTQ0ODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABtQKUDBABtQZADBABtQm8wDQYJKoZIhvcNAQELBQADggEBAEiTyARY UDcVjboyDxi+PXpNgwuh3/ydP7gSYO8divbNc4kaPWoaPZb5lTC+fRrGzhtT48tP YnJrEKAlfpVgkRFYM2nBj6cKz/yD4+VQ+oJjcRro5/dgsUnrF3djV9MeIufJKCFd k1F2ggE3+8H1UhK+5uPLZdrX1a1IgFguSocAQiGzkNsvo6r9g8GGttwjkg+8IMl3 JMepGzhAAe4xMS4Mf2p2q89daUovcI27GZiB8SH7Z0/Sm7eLfRv7eiauIGzryVr1 kuMBFLyanrqDgGPPBHT3wyM3TfqUFWWBHekT07gLu5yP6UCbTXG4PKM7u91VMa+K EKUnWCtMi5RXABI= -----END CERTIFICATE-----Generated at Sun Nov 15 01:49:46 2026 by rpki-client