$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25369.roa File: AS25369.roa (raw, json) Hash identifier: 1tWj7StrsVDQL3qA+CSNq6vxKQzJUP9kx+gTEm3AJ9c= Subject key identifier: 33:B9:4E:D7:3E:5E:87:4F:B4:99:62:C8:AF:D7:87:6D:20:DA:87:FD Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 1A706FCD4E06C1F89C5E68A2DA6DC055E99A7C5A Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25369.roa Signing time: Thu 22 Oct 2026 20:49:21 +0000 ROA not before: Thu 22 Oct 2026 20:44:21 +0000 ROA not after: Thu 21 Oct 2027 20:49:21 +0000 asID: 25369 IP address blocks: 79.176.200.0/24 maxlen: 24 79.182.120.0/24 maxlen: 24 79.182.200.0/24 maxlen: 24 79.183.207.0/24 maxlen: 24 109.64.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:70:6f:cd:4e:06:c1:f8:9c:5e:68:a2:da:6d:c0:55:e9:9a:7c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 22 20:44:21 2026 GMT Not After : Oct 21 20:49:21 2027 GMT Subject: CN=33B94ED73E5E874FB49962C8AFD7876D20DA87FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:4a:58:25:74:f1:ea:62:38:d6:32:bb:62: 12:af:97:b6:11:9c:e5:58:f3:23:23:d9:02:e9:da: 24:f4:17:9d:dd:eb:f8:96:aa:19:91:7a:41:fd:66: 10:4d:8c:4c:6d:3f:bc:16:e6:6d:29:30:bc:b5:01: 8c:81:9d:6a:e8:db:d5:58:1f:b5:89:5d:6c:5d:9c: d5:d7:54:df:fa:c1:b8:5a:42:2a:b6:0f:f9:53:99: f1:e2:8b:b0:35:44:2f:ef:18:79:55:28:88:c2:05: 9e:5a:6e:4f:55:a2:1d:0b:b5:0d:ef:56:c6:c8:aa: 8d:27:03:b3:93:f7:bc:ff:91:1d:95:2b:78:70:6f: 7c:be:c2:84:64:82:26:c0:98:36:cc:90:58:41:37: b7:d1:6e:85:a8:5e:3a:98:61:65:3d:03:95:67:8f: be:c5:51:80:a4:ce:9a:d0:22:d3:f4:5e:dc:d7:2d: 50:1b:e7:71:4e:81:76:a2:d1:da:77:d1:e2:b9:1a: 13:d9:3c:2d:90:85:f4:07:5b:12:58:df:05:81:34: 22:97:04:dc:ef:95:f7:4b:92:fa:97:48:4f:04:8e: 56:e4:b9:d9:af:5e:b0:cd:9e:f4:eb:dd:2d:1f:a8: ee:44:51:77:13:11:e7:d8:0a:45:ad:06:87:f3:50: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B9:4E:D7:3E:5E:87:4F:B4:99:62:C8:AF:D7:87:6D:20:DA:87:FD X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS25369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.200.0/24 79.182.120.0/24 79.182.200.0/24 79.183.207.0/24 109.64.255.0/24 Signature Algorithm: sha256WithRSAEncryption 48:91:5e:37:06:cc:99:ec:3e:c6:a1:55:85:3f:37:d7:d6:27: 3f:a7:d8:5c:bb:57:1b:86:45:ba:c0:47:91:6a:e5:d1:ec:c3: 36:80:df:d6:16:5d:4e:7c:fe:d6:87:f1:92:40:32:29:ad:14: 7e:4e:da:41:b2:a9:11:dc:d7:77:33:32:cb:f8:36:5e:e5:6f: 3e:91:23:c7:ba:ca:2d:2f:fb:f3:50:35:2d:20:ad:f2:07:47: 3c:e1:3b:9f:1b:ce:81:12:9d:32:98:60:a7:42:3b:de:55:c9: 51:70:6f:98:3a:5a:a5:f5:dc:63:06:66:41:89:77:29:8d:08: af:f4:89:b4:8e:51:7e:2a:35:fd:94:90:f9:b8:4d:5b:b9:ad: 4c:31:e8:23:d9:63:44:d9:c4:65:aa:6e:d5:d5:eb:b8:13:c5: ac:75:15:f5:f8:f1:ea:88:4a:aa:6c:07:5f:d0:97:36:1e:5b: 73:27:6f:b5:6a:7b:78:ce:dc:c2:f1:7a:87:bb:19:d7:c0:86: f3:c7:8a:be:7c:f5:c9:4d:db:fb:1f:2b:c0:b1:c6:57:44:b7: 78:64:52:c0:9e:65:78:67:7e:e9:99:9e:65:b8:2f:b0:36:74: 27:35:a8:8e:a6:6f:84:75:c0:19:93:38:37:e3:d4:4d:27:d9: ac:a9:f6:f9 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUGnBvzU4GwficXmii2m3AVemafFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMjIyMDQ0MjFaFw0yNzEwMjEyMDQ5MjFaMDMxMTAvBgNV BAMTKDMzQjk0RUQ3M0U1RTg3NEZCNDk5NjJDOEFGRDc4NzZEMjBEQTg3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxEpYJXTx6mI41jK7YhKvl7YR nOVY8yMj2QLp2iT0F53d6/iWqhmRekH9ZhBNjExtP7wW5m0pMLy1AYyBnWro29VY H7WJXWxdnNXXVN/6wbhaQiq2D/lTmfHii7A1RC/vGHlVKIjCBZ5abk9Voh0LtQ3v VsbIqo0nA7OT97z/kR2VK3hwb3y+woRkgibAmDbMkFhBN7fRboWoXjqYYWU9A5Vn j77FUYCkzprQItP0XtzXLVAb53FOgXai0dp30eK5GhPZPC2QhfQHWxJY3wWBNCKX BNzvlfdLkvqXSE8EjlbkudmvXrDNnvTr3S0fqO5EUXcTEefYCkWtBofzUE+zAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUM7lO1z5eh0+0mWLIr9eHbSDah/0wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyNTM2OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQC AAEwHgMEAE+wyAMEAE+2eAMEAE+2yAMEAE+3zwMEAG1A/zANBgkqhkiG9w0BAQsF AAOCAQEASJFeNwbMmew+xqFVhT8319YnP6fYXLtXG4ZFusBHkWrl0ezDNoDf1hZd Tnz+1ofxkkAyKa0Ufk7aQbKpEdzXdzMyy/g2XuVvPpEjx7rKLS/781A1LSCt8gdH POE7nxvOgRKdMphgp0I73lXJUXBvmDpapfXcYwZmQYl3KY0Ir/SJtI5Rfio1/ZSQ +bhNW7mtTDHoI9ljRNnEZapu1dXruBPFrHUV9fjx6ohKqmwHX9CXNh5bcydvtWp7 eM7cwvF6h7sZ18CG88eKvnz1yU3b+x8rwLHGV0S3eGRSwJ5leGd+6ZmeZbgvsDZ0 JzWojqZvhHXAGZM4N+PUTSfZrKn2+Q== -----END CERTIFICATE-----Generated at Sat Nov 14 23:16:50 2026 by rpki-client