$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: sbydQgWZjXJkshXCQ7cC4xlPj/tA6AOoGYllvXSyHIs= Subject key identifier: 60:B0:67:02:FA:FA:9B:10:1A:14:E9:4E:9E:74:FB:AF:E7:5E:8C:49 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 58E570988AE543A1FA590F25CAB5CF54D04595A4 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2914.roa Signing time: Tue 10 Nov 2026 12:54:29 +0000 ROA not before: Tue 10 Nov 2026 12:49:29 +0000 ROA not after: Tue 09 Nov 2027 12:54:29 +0000 asID: 2914 IP address blocks: 79.180.92.0/23 maxlen: 24 79.182.42.0/23 maxlen: 24 79.182.53.0/24 maxlen: 24 79.182.59.0/24 maxlen: 24 79.182.65.0/24 maxlen: 24 79.182.73.0/24 maxlen: 24 79.182.74.0/24 maxlen: 24 79.182.78.0/24 maxlen: 24 79.182.127.0/24 maxlen: 24 109.65.70.0/23 maxlen: 24 109.66.26.0/23 maxlen: 23 109.66.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e5:70:98:8a:e5:43:a1:fa:59:0f:25:ca:b5:cf:54:d0:45:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 10 12:49:29 2026 GMT Not After : Nov 9 12:54:29 2027 GMT Subject: CN=60B06702FAFA9B101A14E94E9E74FBAFE75E8C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:78:a8:02:91:58:10:c3:a4:25:6d:ee:c1: 89:c0:94:71:22:70:fb:24:ab:d3:91:58:bd:59:d6: dd:62:3b:5d:31:26:7e:0d:c7:57:14:69:75:6f:3c: be:44:63:df:59:f7:a6:07:58:33:6f:05:8e:00:42: 33:c1:3d:fb:fe:10:7b:54:c2:41:f4:34:50:6f:0a: 67:14:6d:85:e8:0b:1c:d4:6d:c5:35:d0:88:24:da: 45:ca:95:96:0d:7a:c8:f5:f1:1b:79:7d:b4:5a:11: ec:8e:15:8b:6e:79:dc:96:f0:15:28:60:4f:57:db: db:22:fb:8b:50:21:0c:90:aa:7c:8f:9e:00:c8:4d: f3:26:d6:5e:bd:0f:0a:4c:c8:2a:40:3b:6b:9e:12: ab:0f:5f:d8:a7:41:1f:db:da:bd:2f:41:6c:1c:ed: e0:67:3f:78:8c:a0:a5:a2:f4:74:81:3d:a4:57:ad: 02:ab:89:d2:97:73:55:3b:a7:5d:60:0d:bd:99:f1: 5b:ab:14:ce:53:56:97:9c:f6:55:21:a1:59:49:f8: cf:11:9a:96:98:1e:e4:91:31:b2:68:27:8a:45:df: 60:65:45:7a:93:58:21:d5:28:e6:4d:43:ba:c5:57: ee:c4:64:c4:ec:f1:94:92:12:30:d0:14:9f:d9:80: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:67:02:FA:FA:9B:10:1A:14:E9:4E:9E:74:FB:AF:E7:5E:8C:49 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.92.0/23 79.182.42.0/23 79.182.53.0/24 79.182.59.0/24 79.182.65.0/24 79.182.73.0-79.182.74.255 79.182.78.0/24 79.182.127.0/24 109.65.70.0/23 109.66.26.0/23 109.66.81.0/24 Signature Algorithm: sha256WithRSAEncryption ce:e4:5d:fc:35:28:21:68:37:43:55:60:72:bc:d6:99:f6:42: 6c:1a:f3:6f:f9:9a:6c:97:20:a3:ff:fa:89:5d:13:c2:a3:87: 6a:cb:ca:6a:ac:73:b0:30:aa:7b:24:26:09:a9:e6:69:36:77: f8:5e:5c:aa:f3:40:20:17:a0:ad:c6:a4:55:56:8a:65:62:38: 15:19:98:a1:5b:b0:d7:20:36:35:36:8f:8d:16:75:b6:79:57: b1:e6:f2:64:e4:ac:09:eb:01:08:82:79:ae:7f:ac:7f:12:59: 29:46:63:41:ab:e7:45:a7:be:4a:49:b0:66:4b:43:e0:35:6c: 86:39:89:6e:fc:36:26:cb:12:fe:b4:d2:f4:a5:2f:4e:43:64: c4:08:28:8b:17:75:3e:7e:36:37:7e:37:34:5c:05:01:22:df: f3:8f:5e:9d:b1:20:05:ef:0a:1a:cd:c7:4d:d8:95:19:1c:19: f8:9f:e7:65:b9:a9:45:53:d0:17:28:d8:2d:d3:ac:ea:d8:ca: aa:49:e2:76:69:a6:68:b6:48:c0:9f:58:4e:b2:b2:97:fc:47: 6c:66:28:05:c3:f3:26:3e:a5:d7:ad:cf:3b:38:1d:98:21:5f: 42:a5:83:01:43:21:6a:76:04:73:4c:e8:b6:4b:dd:78:0e:1d: 18:87:5d:22 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUWOVwmIrlQ6H6WQ8lyrXPVNBFlaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMTAxMjQ5MjlaFw0yNzExMDkxMjU0MjlaMDMxMTAvBgNV BAMTKDYwQjA2NzAyRkFGQTlCMTAxQTE0RTk0RTlFNzRGQkFGRTc1RThDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFHioApFYEMOkJW3uwYnAlHEi cPskq9ORWL1Z1t1iO10xJn4Nx1cUaXVvPL5EY99Z96YHWDNvBY4AQjPBPfv+EHtU wkH0NFBvCmcUbYXoCxzUbcU10Igk2kXKlZYNesj18Rt5fbRaEeyOFYtuedyW8BUo YE9X29si+4tQIQyQqnyPngDITfMm1l69DwpMyCpAO2ueEqsPX9inQR/b2r0vQWwc 7eBnP3iMoKWi9HSBPaRXrQKridKXc1U7p11gDb2Z8VurFM5TVpec9lUhoVlJ+M8R mpaYHuSRMbJoJ4pF32BlRXqTWCHVKOZNQ7rFV+7EZMTs8ZSSEjDQFJ/ZgEMjAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUYLBnAvr6mxAaFOlOnnT7r+dejEkwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMyOTE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIA ATBKAwQBT7RcAwQBT7YqAwQAT7Y1AwQAT7Y7AwQAT7ZBMAwDBABPtkkDBABPtkoD BABPtk4DBABPtn8DBAFtQUYDBAFtQhoDBABtQlEwDQYJKoZIhvcNAQELBQADggEB AM7kXfw1KCFoN0NVYHK81pn2Qmwa82/5mmyXIKP/+oldE8Kjh2rLymqsc7Awqnsk Jgmp5mk2d/heXKrzQCAXoK3GpFVWimViOBUZmKFbsNcgNjU2j40WdbZ5V7Hm8mTk rAnrAQiCea5/rH8SWSlGY0Gr50WnvkpJsGZLQ+A1bIY5iW78NibLEv600vSlL05D ZMQIKIsXdT5+Njd+NzRcBQEi3/OPXp2xIAXvChrNx03YlRkcGfif52W5qUVT0Bco 2C3TrOrYyqpJ4nZppmi2SMCfWE6yspf8R2xmKAXD8yY+pdetzzs4HZghX0KlgwFD IWp2BHNM6LZL3XgOHRiHXSI= -----END CERTIFICATE-----Generated at Sat Nov 14 21:06:24 2026 by rpki-client