$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS31898.roa File: AS31898.roa (raw, json) Hash identifier: No4nZk7Yqzp8mY8Vy3ww5UkS9rBHbj+1AHcLUDr50W4= Subject key identifier: E6:D5:AD:FE:6E:30:C2:75:41:A4:85:9E:22:B0:11:AD:08:15:7F:CE Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 630CA4D0C0AF13DD30385C26B4332F60D91DCB42 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS31898.roa Signing time: Thu 05 Nov 2026 07:04:29 +0000 ROA not before: Thu 05 Nov 2026 06:59:29 +0000 ROA not after: Thu 04 Nov 2027 07:04:29 +0000 asID: 31898 IP address blocks: 79.176.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0c:a4:d0:c0:af:13:dd:30:38:5c:26:b4:33:2f:60:d9:1d:cb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 5 06:59:29 2026 GMT Not After : Nov 4 07:04:29 2027 GMT Subject: CN=E6D5ADFE6E30C27541A4859E22B011AD08157FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:00:6c:58:27:12:1f:07:ca:dd:8c:5b:55: 3d:63:a0:e8:34:ea:67:1f:61:e6:69:51:ce:ba:b0: a8:f9:31:80:e6:81:54:0c:d2:8f:1d:d1:ab:d5:54: 8c:21:03:f1:b8:6b:23:e8:36:c1:da:4c:cc:6d:7c: 74:5b:93:e3:cc:d8:c8:19:a8:9a:f1:63:d9:40:0e: ad:f9:8b:12:0e:ae:c7:57:51:ba:c5:26:1e:f6:68: 0d:8a:03:94:52:3f:36:81:43:cc:51:c0:bb:9d:4e: d9:eb:09:aa:c4:60:5b:93:56:f6:5c:4c:e4:39:f5: 5c:e6:1d:1f:dc:64:8c:e3:96:39:8e:4b:fb:5a:c3: b9:34:06:97:4b:34:ba:7a:66:75:b0:fd:89:26:c8: e9:6e:9a:d8:a3:10:47:25:1e:a9:1e:f1:2f:ce:9f: bb:e5:07:ec:8f:1c:c7:0b:71:d8:27:a7:ba:58:9c: dd:fc:11:33:3c:cc:43:1a:29:54:ca:b2:e2:43:16: 48:1a:4a:4a:ab:76:e2:8c:3a:c7:20:45:b5:13:2b: 78:9e:4e:55:ae:77:fe:f9:3b:31:91:9b:4d:71:bb: af:b8:b1:a2:dd:72:1f:69:2c:f7:22:2f:59:4b:50: 8d:26:58:66:9d:4b:13:f7:a7:02:7b:ad:aa:3b:21: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:AD:FE:6E:30:C2:75:41:A4:85:9E:22:B0:11:AD:08:15:7F:CE X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS31898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.21.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:09:7b:de:8f:d2:87:40:1c:47:51:87:9a:4e:e9:68:5e:1a: e7:06:00:40:51:8f:38:e0:0e:87:61:77:ac:98:1d:c2:43:7b: a0:29:c8:2a:90:43:b2:eb:25:50:ca:52:19:08:9c:1b:6f:85: 37:dc:73:1a:eb:14:89:c2:1a:c2:c8:c5:25:ef:0f:13:d0:59: e5:34:36:ce:a5:9d:ec:88:2f:42:30:29:30:aa:ea:d6:f6:c5: 7f:db:f8:11:23:38:c6:2b:80:d4:0d:b6:f0:38:57:03:13:b6: 69:bf:22:3a:17:ee:63:3a:c8:aa:7f:2f:1c:31:75:8d:a2:91: 49:d8:97:3b:cd:ff:fb:c7:b4:a3:fa:38:9c:f3:cd:e0:15:13: ee:43:5b:22:c9:64:62:6a:26:2d:f6:67:2c:39:d9:ad:af:ec: b3:72:1c:3d:0f:14:31:a4:72:1a:f6:5e:92:b8:86:24:95:b6: 02:a9:d7:35:0c:58:99:80:60:bf:0e:83:4c:9c:50:23:3d:67: 14:26:ca:f1:20:b5:6f:45:a3:87:79:ba:0b:d2:cf:fb:9e:50: 06:61:e2:0b:44:80:66:4d:4d:6e:c5:a9:0e:a6:d9:92:dd:e6: 83:64:cb:64:ad:fe:7b:a7:f2:99:c0:61:4c:a9:a4:2b:94:f9: c5:bb:8a:1d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUYwyk0MCvE90wOFwmtDMvYNkdy0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDUwNjU5MjlaFw0yNzExMDQwNzA0MjlaMDMxMTAvBgNV BAMTKEU2RDVBREZFNkUzMEMyNzU0MUE0ODU5RTIyQjAxMUFEMDgxNTdGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJABsWCcSHwfK3YxbVT1joOg0 6mcfYeZpUc66sKj5MYDmgVQM0o8d0avVVIwhA/G4ayPoNsHaTMxtfHRbk+PM2MgZ qJrxY9lADq35ixIOrsdXUbrFJh72aA2KA5RSPzaBQ8xRwLudTtnrCarEYFuTVvZc TOQ59VzmHR/cZIzjljmOS/taw7k0BpdLNLp6ZnWw/YkmyOlumtijEEclHqke8S/O n7vlB+yPHMcLcdgnp7pYnN38ETM8zEMaKVTKsuJDFkgaSkqrduKMOscgRbUTK3ie TlWud/75OzGRm01xu6+4saLdch9pLPciL1lLUI0mWGadSxP3pwJ7rao7IXVfAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU5tWt/m4wwnVBpIWeIrARrQgVf84wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVMzMTg5OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAE+wFTANBgkqhkiG9w0BAQsFAAOCAQEAWgl73o/Sh0AcR1GHmk7paF4a 5wYAQFGPOOAOh2F3rJgdwkN7oCnIKpBDsuslUMpSGQicG2+FN9xzGusUicIawsjF Je8PE9BZ5TQ2zqWd7IgvQjApMKrq1vbFf9v4ESM4xiuA1A228DhXAxO2ab8iOhfu YzrIqn8vHDF1jaKRSdiXO83/+8e0o/o4nPPN4BUT7kNbIslkYmomLfZnLDnZra/s s3IcPQ8UMaRyGvZekriGJJW2AqnXNQxYmYBgvw6DTJxQIz1nFCbK8SC1b0Wjh3m6 C9LP+55QBmHiC0SAZk1NbsWpDqbZkt3mg2TLZK3+e6fymcBhTKmkK5T5xbuKHQ== -----END CERTIFICATE-----Generated at Wed Nov 11 09:16:40 2026 by rpki-client