$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219343.roa File: AS219343.roa (raw, json) Hash identifier: mOEVeCG4Puav96G9hMQgVa8hB+5j/O33Ppdexl5vz4s= Subject key identifier: 4B:01:AB:AB:1D:C1:82:3A:75:B4:71:2F:48:C0:3E:4F:AA:71:9A:59 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 01CEB1CFD14A99AE3F61970BD590E0F973733F08 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219343.roa Signing time: Mon 02 Nov 2026 20:30:24 +0000 ROA not before: Mon 02 Nov 2026 20:25:24 +0000 ROA not after: Mon 01 Nov 2027 20:30:24 +0000 asID: 219343 IP address blocks: 79.182.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ce:b1:cf:d1:4a:99:ae:3f:61:97:0b:d5:90:e0:f9:73:73:3f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 2 20:25:24 2026 GMT Not After : Nov 1 20:30:24 2027 GMT Subject: CN=4B01ABAB1DC1823A75B4712F48C03E4FAA719A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:9b:b9:d0:60:d1:61:53:94:c1:e0:c1:fc: 3b:ff:6a:9e:c7:5b:29:c4:4e:72:67:cc:70:60:34: 4a:74:0c:c2:cd:b7:14:13:a9:cc:0e:58:10:f6:ea: 79:3c:c5:37:dc:b5:bd:98:66:54:dd:91:b3:57:87: 0a:f5:0a:b2:a6:34:ff:60:f0:8a:be:f6:c8:99:6c: 74:bc:82:0b:6f:5c:34:e6:fb:d3:c0:51:ab:6b:37: b1:3b:f8:98:c2:a8:65:e7:30:b1:20:c3:e6:b2:7a: 6e:c1:62:5f:66:26:b1:b3:46:c8:43:20:63:10:df: ce:39:f2:ea:75:53:42:70:bd:ac:ac:43:74:36:c4: bd:c6:f7:58:8c:ee:e3:ac:4e:04:bb:99:82:70:d3: 3c:7e:ba:63:46:0f:6d:7e:fd:65:93:b8:14:30:fa: 68:6c:23:59:e3:d7:8f:a0:af:17:3f:9e:ad:db:eb: b1:40:30:0b:94:4c:9b:19:c0:02:c2:08:6b:5a:91: e1:1d:ec:61:a3:12:be:1a:1c:c2:bc:99:11:71:74: 42:d3:21:ac:2a:02:df:8b:e9:d8:b6:a3:98:96:85: eb:bc:ea:54:ce:66:37:e6:42:1c:ae:a0:de:ae:e4: 34:9a:c6:8c:21:83:66:8e:91:da:db:ef:ea:d1:b7: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:AB:AB:1D:C1:82:3A:75:B4:71:2F:48:C0:3E:4F:AA:71:9A:59 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS219343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.136.0/24 Signature Algorithm: sha256WithRSAEncryption c4:d0:7e:f6:c9:25:5d:70:fc:9e:8b:ee:d4:58:f0:e1:96:c8: 9d:09:d8:55:24:51:2d:f9:56:b8:d8:99:a0:28:98:32:e5:c7: 05:08:e3:2a:4b:87:6e:c6:ca:fb:5f:3e:fb:5d:db:60:5d:98: 50:02:61:9b:17:40:ac:f2:69:e0:be:c7:da:27:56:b1:2e:e1: 76:35:65:e0:fe:ff:0b:4f:a8:a4:60:9c:09:4f:8f:bb:b4:f4: e5:57:f7:7b:b2:9a:26:91:b0:94:ea:98:40:b1:42:7e:f7:79: 66:46:0a:80:b5:5a:5c:d0:e6:dc:61:34:e6:64:3e:07:3f:73: de:11:96:fe:f3:9f:58:ca:d4:7a:92:d6:5e:77:44:7f:1a:1d: fc:c9:55:78:e2:71:df:20:5d:cf:9a:53:55:51:cf:61:6f:1b: 62:51:74:00:c3:33:f4:01:86:28:a1:4e:12:c0:a2:0d:5f:0e: 19:da:28:46:62:86:dd:c4:0a:05:fe:cf:95:a9:8b:1a:e7:ef: 22:84:af:38:60:77:24:4b:1b:47:e8:5f:7f:be:bb:bc:78:17: 47:ea:cc:46:2d:30:24:62:ea:ac:42:e1:42:dd:27:b2:75:7b: 8f:12:5d:92:d3:3d:e7:cd:c6:36:4d:35:3e:af:17:31:5f:ec: 2f:9b:8e:c5 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUAc6xz9FKma4/YZcL1ZDg+XNzPwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDIyMDI1MjRaFw0yNzExMDEyMDMwMjRaMDMxMTAvBgNV BAMTKDRCMDFBQkFCMURDMTgyM0E3NUI0NzEyRjQ4QzAzRTRGQUE3MTlBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviZu50GDRYVOUweDB/Dv/ap7H WynETnJnzHBgNEp0DMLNtxQTqcwOWBD26nk8xTfctb2YZlTdkbNXhwr1CrKmNP9g 8Iq+9siZbHS8ggtvXDTm+9PAUatrN7E7+JjCqGXnMLEgw+ayem7BYl9mJrGzRshD IGMQ38458up1U0JwvaysQ3Q2xL3G91iM7uOsTgS7mYJw0zx+umNGD21+/WWTuBQw +mhsI1nj14+grxc/nq3b67FAMAuUTJsZwALCCGtakeEd7GGjEr4aHMK8mRFxdELT IawqAt+L6di2o5iWheu86lTOZjfmQhyuoN6u5DSaxowhg2aOkdrb7+rRt6KPAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUSwGrqx3Bgjp1tHEvSMA+T6pxmlkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyMTkzNDMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtogwDQYJKoZIhvcNAQELBQADggEBAMTQfvbJJV1w/J6L7tRY8OGW yJ0J2FUkUS35VrjYmaAomDLlxwUI4ypLh27GyvtfPvtd22BdmFACYZsXQKzyaeC+ x9onVrEu4XY1ZeD+/wtPqKRgnAlPj7u09OVX93uymiaRsJTqmECxQn73eWZGCoC1 WlzQ5txhNOZkPgc/c94Rlv7zn1jK1HqS1l53RH8aHfzJVXjicd8gXc+aU1VRz2Fv G2JRdADDM/QBhiihThLAog1fDhnaKEZiht3ECgX+z5Wpixrn7yKErzhgdyRLG0fo X3++u7x4F0fqzEYtMCRi6qxC4ULdJ7J1e48SXZLTPefNxjZNNT6vFzFf7C+bjsU= -----END CERTIFICATE-----Generated at Sun Nov 15 11:58:44 2026 by rpki-client