
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34224.roa
File: AS34224.roa (raw, json)
Hash identifier: X8S1U9TJbS/h5Dh542lBchV1EvuJAQAlxF1AGMOUEdM=
Subject key identifier: 0D:EE:1E:6C:A2:9E:43:21:CA:26:27:F2:9E:97:C4:D8:FD:98:62:92
Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial: 56C2B8CF686D9A37F730A9C29D5369BBBE55405F
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34224.roa
Signing time: Mon 26 Oct 2026 18:50:19 +0000
ROA not before: Mon 26 Oct 2026 18:45:19 +0000
ROA not after: Mon 25 Oct 2027 18:50:19 +0000
asID: 34224
IP address blocks: 79.180.91.0/24 maxlen: 24
79.182.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c2:b8:cf:68:6d:9a:37:f7:30:a9:c2:9d:53:69:bb:be:55:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
Validity
Not Before: Oct 26 18:45:19 2026 GMT
Not After : Oct 25 18:50:19 2027 GMT
Subject: CN=0DEE1E6CA29E4321CA2627F29E97C4D8FD986292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:44:11:49:6c:f2:79:88:d8:97:16:09:77:
98:2c:32:94:69:28:ac:4c:71:c0:20:66:a7:2d:5e:
4a:29:1f:51:64:09:b4:07:d3:71:8d:aa:b8:39:3c:
0e:64:a3:ca:4a:72:e0:53:55:c8:a4:76:52:79:6a:
26:d8:1c:4b:26:28:f4:97:26:24:c7:76:cd:2b:72:
ad:9b:31:64:51:94:04:93:dc:ce:9e:05:3e:3b:bc:
cb:40:9c:bf:d6:03:a5:9e:d6:b3:e3:0a:33:79:b0:
7e:b1:57:bd:c7:66:d4:59:e7:a8:51:dc:b1:1c:4c:
88:81:d9:d3:e7:ca:cb:32:bc:f5:5c:62:82:94:f7:
81:3b:9c:96:f8:05:10:12:cb:1f:6e:2b:d4:d3:cd:
07:34:66:f9:3a:9a:83:9e:24:c8:26:01:48:48:d2:
07:32:3e:33:a4:d5:e3:54:63:45:3b:d2:a7:09:8f:
b6:ed:30:36:a8:ab:d0:2f:8e:be:90:63:52:b5:2f:
2c:8d:a6:3d:f9:bd:64:d7:5b:f9:b1:17:c0:34:c9:
ef:b6:08:33:ea:f0:ce:11:c9:5c:31:38:3e:27:e0:
18:36:f9:83:ef:22:f2:6c:07:48:2e:db:85:59:7a:
13:ab:e8:34:de:50:56:66:11:e1:bb:11:90:00:73:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:1E:6C:A2:9E:43:21:CA:26:27:F2:9E:97:C4:D8:FD:98:62:92
X509v3 Authority Key Identifier:
keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS34224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.180.91.0/24
79.182.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ce:49:1d:f5:3c:de:a8:65:d6:52:8c:a0:56:8b:8b:70:68:
8c:50:f3:ce:43:0d:ef:8d:23:d1:70:83:2c:d5:71:53:81:9a:
13:3f:8e:9f:e1:95:01:78:8c:b7:7c:1c:77:42:ba:87:ac:65:
20:d7:9b:db:cb:2c:fa:3e:83:2f:76:26:a1:77:40:8e:48:55:
e4:9e:9f:ce:e3:06:8c:29:5c:1a:c3:05:1f:fd:f0:2a:67:3b:
21:cb:72:1e:6c:2f:29:8d:f4:89:21:e9:08:68:da:a5:a2:d7:
b2:13:04:cf:55:52:8f:f2:ca:9d:3b:73:b5:87:32:22:13:cb:
7e:b3:d0:88:98:7f:f0:9f:73:b7:f4:44:21:a5:52:ce:c4:8f:
fe:db:d4:d1:64:25:b1:40:a9:eb:73:3c:ce:d4:31:9b:97:00:
24:5c:69:78:3d:f2:f8:4b:77:6d:56:88:72:aa:b2:91:00:85:
27:e5:5c:15:48:af:05:70:61:35:4c:4b:d2:4d:99:68:64:cd:
10:37:10:72:de:e4:36:32:ba:3a:16:ea:a9:d2:55:11:de:8b:
dd:a7:08:35:8f:ab:b0:86:00:f1:5f:03:63:c0:69:c2:b6:bd:
73:68:dc:2c:4f:a2:b5:43:97:eb:3a:e9:06:30:a8:78:56:c5:
ee:b5:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:55:46 2026 by rpki-client