$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: RbfKVJG/hYz3FqZFHrYBpX+PGNkXnvIz9+sUe4ynFFA= Subject key identifier: 5B:88:10:2C:23:A1:87:A8:E7:1B:55:22:5E:A4:27:3B:59:6F:0F:9B Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3B87609706A7441717F66711DF1E83496E9266FE Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25198.roa Signing time: Sat 31 Oct 2026 10:55:46 +0000 ROA not before: Sat 31 Oct 2026 10:50:46 +0000 ROA not after: Sat 30 Oct 2027 10:55:46 +0000 asID: 25198 IP address blocks: 79.176.70.0/24 maxlen: 24 109.65.15.0/24 maxlen: 24 109.65.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Nov 2026 12:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:87:60:97:06:a7:44:17:17:f6:67:11:df:1e:83:49:6e:92:66:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 31 10:50:46 2026 GMT Not After : Oct 30 10:55:46 2027 GMT Subject: CN=5B88102C23A187A8E71B55225EA4273B596F0F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:b6:7f:57:89:ec:97:56:bf:2b:0f:a5:03: ce:50:0c:d6:4b:46:54:33:8d:ad:87:51:f4:27:46: fc:2b:b3:24:fb:94:a9:b0:ec:a1:59:12:18:35:c9: 97:82:95:cc:6d:60:b3:a3:be:0a:18:27:8d:bf:be: 03:9c:a6:3c:63:24:0d:7e:f8:c0:f6:00:b0:39:ef: 3b:8f:3e:ee:d4:24:53:f0:0a:17:61:ed:fd:be:b5: d3:70:77:a2:4c:8f:a6:2b:17:d9:3e:d8:aa:f3:3a: 8e:7a:22:b2:7e:ca:0b:ec:25:59:30:6b:27:4b:dc: b1:93:c8:08:38:5a:6a:e2:57:4f:e6:fb:81:77:2c: 45:a4:6d:6e:28:2b:2c:c5:75:da:ce:e2:99:bb:dc: be:7f:6c:99:e8:ec:ee:15:4b:0a:0c:b5:5d:36:b8: ee:9a:6c:2a:11:02:d1:ca:62:a0:6e:ff:65:4d:6f: 27:12:a1:87:fb:d6:60:36:13:95:97:87:37:57:93: ef:60:31:6d:b3:f0:90:74:61:90:1d:57:2d:54:ce: 94:6c:63:5a:5c:97:fb:29:ee:9c:f7:ed:69:a1:61: 67:1f:5b:dc:5e:df:e1:1a:07:23:c1:d4:bd:4a:c5: d0:76:ec:a4:1f:99:dd:fe:c2:3d:32:59:96:0e:58: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:10:2C:23:A1:87:A8:E7:1B:55:22:5E:A4:27:3B:59:6F:0F:9B X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.70.0/24 109.65.15.0/24 109.65.47.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f5:49:32:85:c8:50:94:04:5d:90:00:04:62:6e:aa:c8:e2: 30:9d:15:31:99:6c:f7:37:33:ea:30:4b:34:90:b4:de:dd:4b: e2:a3:9a:27:d1:b5:e4:a9:23:04:7a:11:9e:f6:7a:2c:b9:7a: 61:c3:40:8a:a7:e0:97:28:ad:3e:e4:9e:03:d3:0b:4f:86:c1: 0c:b9:77:6c:fa:15:6f:3e:0e:30:b3:9f:d9:2a:de:a4:d7:ca: df:8e:30:2f:64:36:fa:b6:3a:a1:a5:fc:fb:0e:49:f2:2b:60: 61:47:d4:04:eb:7d:02:18:79:1f:10:51:06:3a:33:7e:67:f2: 3d:04:72:05:46:8a:d8:80:e9:fb:79:9e:d6:88:7f:d2:32:84: ab:ff:ee:16:c7:61:7f:fc:28:cb:af:89:78:f8:4b:7b:a6:b1: 88:c4:de:76:15:8f:78:59:6e:88:ea:1c:1c:e5:a9:ca:83:fc: 58:fb:1b:13:64:7b:36:dd:7f:54:e0:91:18:6f:cb:e6:8c:91: 0d:39:4f:2f:d9:80:73:b1:9a:03:4c:c7:00:fb:9f:7d:e2:2a: d7:56:3d:53:3a:ee:e0:66:6d:40:0d:fb:12:0c:7b:ef:3c:f1: 50:c4:b8:39:de:43:e3:73:80:56:9b:3a:43:65:20:a9:fe:9a: be:2e:29:6f -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUO4dglwanRBcX9mcR3x6DSW6SZv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMzExMDUwNDZaFw0yNzEwMzAxMDU1NDZaMDMxMTAvBgNV BAMTKDVCODgxMDJDMjNBMTg3QThFNzFCNTUyMjVFQTQyNzNCNTk2RjBGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZRrZ/V4nsl1a/Kw+lA85QDNZL RlQzja2HUfQnRvwrsyT7lKmw7KFZEhg1yZeClcxtYLOjvgoYJ42/vgOcpjxjJA1+ +MD2ALA57zuPPu7UJFPwChdh7f2+tdNwd6JMj6YrF9k+2KrzOo56IrJ+ygvsJVkw aydL3LGTyAg4WmriV0/m+4F3LEWkbW4oKyzFddrO4pm73L5/bJno7O4VSwoMtV02 uO6abCoRAtHKYqBu/2VNbycSoYf71mA2E5WXhzdXk+9gMW2z8JB0YZAdVy1UzpRs Y1pcl/sp7pz37WmhYWcfW9xe3+EaByPB1L1KxdB27KQfmd3+wj0yWZYOWLLjAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUW4gQLCOhh6jnG1UiXqQnO1lvD5swHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyNTE5OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAE+wRgMEAG1BDwMEAG1BLzANBgkqhkiG9w0BAQsFAAOCAQEACfVJMoXI UJQEXZAABGJuqsjiMJ0VMZls9zcz6jBLNJC03t1L4qOaJ9G15KkjBHoRnvZ6LLl6 YcNAiqfglyitPuSeA9MLT4bBDLl3bPoVbz4OMLOf2SrepNfK344wL2Q2+rY6oaX8 +w5J8itgYUfUBOt9Ahh5HxBRBjozfmfyPQRyBUaK2IDp+3me1oh/0jKEq//uFsdh f/woy6+JePhLe6axiMTedhWPeFluiOocHOWpyoP8WPsbE2R7Nt1/VOCRGG/L5oyR DTlPL9mAc7GaA0zHAPuffeIq11Y9Uzru4GZtQA37Egx77zzxUMS4Od5D43OAVps6 Q2Ugqf6avi4pbw== -----END CERTIFICATE-----Generated at Fri Nov 13 01:00:23 2026 by rpki-client