$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218661.roa File: AS218661.roa (raw, json) Hash identifier: sByVPUesE8VpbIFNHXHvVCKx4M7QuG3noEdQrn0gj0A= Subject key identifier: 36:62:10:AE:63:24:0D:1F:1F:F3:5E:FF:45:C6:9F:54:48:59:D5:FB Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3B92D5D668A967834DD054F92002DE32C7DA7102 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218661.roa Signing time: Tue 13 Oct 2026 04:47:34 +0000 ROA not before: Tue 13 Oct 2026 04:42:34 +0000 ROA not after: Tue 12 Oct 2027 04:47:34 +0000 asID: 218661 IP address blocks: 79.180.117.0/24 maxlen: 24 79.182.40.0/24 maxlen: 24 109.65.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:92:d5:d6:68:a9:67:83:4d:d0:54:f9:20:02:de:32:c7:da:71:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 13 04:42:34 2026 GMT Not After : Oct 12 04:47:34 2027 GMT Subject: CN=366210AE63240D1F1FF35EFF45C69F544859D5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:91:ad:8d:0a:3e:67:03:0c:77:0b:63:5b: 3e:a1:c5:dc:6d:0b:3f:2c:17:48:85:1b:b6:bc:aa: df:aa:2f:ce:e8:6d:90:df:4e:38:6b:1b:bb:08:27: 89:94:60:84:ce:ae:f9:15:39:77:da:9b:57:a7:ca: f8:86:6c:aa:59:34:f0:f0:73:58:1d:fb:6f:14:64: da:f8:8b:ca:56:c6:99:29:9c:75:6e:c7:76:4c:92: fa:eb:f1:1a:56:13:4c:af:c1:82:ea:e6:96:b2:61: 09:d1:57:72:c9:02:3a:0a:48:31:d3:8d:22:69:93: 3d:df:b2:50:f6:ce:28:b1:18:a9:16:71:7e:ba:4e: 9d:90:5e:ac:c4:32:36:6f:c3:77:69:f2:8b:f9:5d: 7c:84:9b:79:03:46:8a:46:a4:84:4e:af:d9:f9:66: b8:ee:bf:0c:3c:0b:47:76:fb:c8:95:cd:45:3f:1a: b6:41:10:b5:f9:56:bd:38:a8:35:62:ad:76:d8:5d: 8c:b4:03:42:f8:3c:fc:96:72:c3:ba:7f:1c:56:54: 3f:c1:e9:0d:a3:db:4d:98:01:a0:59:df:40:3f:55: 32:45:35:fd:bd:f3:45:84:c9:da:6e:27:0f:68:bb: e4:67:53:40:a4:65:4a:2b:ab:bb:6e:ff:ae:32:24: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:10:AE:63:24:0D:1F:1F:F3:5E:FF:45:C6:9F:54:48:59:D5:FB X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS218661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.117.0/24 79.182.40.0/24 109.65.225.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:61:ad:ed:d2:c3:3a:55:e5:18:cb:3b:8f:b1:0e:71:13:64: 5c:c2:1f:a7:84:43:44:bb:7e:7c:33:fa:22:39:48:16:ea:00: c5:8b:ef:73:10:21:12:82:2c:34:90:48:df:be:fe:f9:85:18: 3b:07:4e:e1:76:b5:1e:7e:ce:9f:b0:ec:76:c9:ef:15:13:bf: 6d:6e:75:48:a4:64:19:8e:c8:25:d7:4b:91:89:1a:28:f7:f3: b9:71:a5:4f:83:4c:d2:24:47:09:55:63:7d:25:4f:0b:6b:63: a0:a4:1f:b9:91:c6:40:bc:81:92:59:b4:48:41:ab:6c:a3:f7: 7c:4e:5f:9b:8b:26:80:5e:d8:68:38:f9:28:25:f8:08:b6:43: b5:d3:dd:c7:81:cf:6f:7c:d0:ba:00:37:99:1b:67:89:ae:29: 38:f8:35:e6:aa:c6:f4:be:04:ae:04:78:d2:a9:1d:6e:8c:d5: 52:c3:90:0c:3a:71:aa:f4:62:6a:d3:ed:e0:cb:c7:78:52:35: e6:56:be:81:78:4d:0f:67:b6:74:3d:d8:2f:cb:a8:84:5a:b8: 9e:39:72:76:3d:6e:58:c2:65:77:db:d3:d0:60:85:fc:77:11: 67:61:63:33:ed:0c:63:ba:15:6e:13:52:c6:4a:b7:c6:56:b9: 20:c9:9b:48 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUO5LV1mipZ4NN0FT5IALeMsfacQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMTMwNDQyMzRaFw0yNzEwMTIwNDQ3MzRaMDMxMTAvBgNV BAMTKDM2NjIxMEFFNjMyNDBEMUYxRkYzNUVGRjQ1QzY5RjU0NDg1OUQ1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfZGtjQo+ZwMMdwtjWz6hxdxt Cz8sF0iFG7a8qt+qL87obZDfTjhrG7sIJ4mUYITOrvkVOXfam1enyviGbKpZNPDw c1gd+28UZNr4i8pWxpkpnHVux3ZMkvrr8RpWE0yvwYLq5payYQnRV3LJAjoKSDHT jSJpkz3fslD2ziixGKkWcX66Tp2QXqzEMjZvw3dp8ov5XXyEm3kDRopGpIROr9n5 Zrjuvww8C0d2+8iVzUU/GrZBELX5Vr04qDVirXbYXYy0A0L4PPyWcsO6fxxWVD/B 6Q2j202YAaBZ30A/VTJFNf2980WEydpuJw9ou+RnU0CkZUorq7tu/64yJLnLAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUNmIQrmMkDR8f817/RcafVEhZ1fswHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTg2NjEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBABPtHUDBABPtigDBABtQeEwDQYJKoZIhvcNAQELBQADggEBAA1hre3S wzpV5RjLO4+xDnETZFzCH6eEQ0S7fnwz+iI5SBbqAMWL73MQIRKCLDSQSN++/vmF GDsHTuF2tR5+zp+w7HbJ7xUTv21udUikZBmOyCXXS5GJGij387lxpU+DTNIkRwlV Y30lTwtrY6CkH7mRxkC8gZJZtEhBq2yj93xOX5uLJoBe2Gg4+Sgl+Ai2Q7XT3ceB z2980LoAN5kbZ4muKTj4NeaqxvS+BK4EeNKpHW6M1VLDkAw6car0YmrT7eDLx3hS NeZWvoF4TQ9ntnQ92C/LqIRauJ45cnY9bljCZXfb09Bghfx3EWdhYzPtDGO6FW4T UsZKt8ZWuSDJm0g= -----END CERTIFICATE-----Generated at Sat Nov 14 23:22:55 2026 by rpki-client