$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402265.roa File: AS402265.roa (raw, json) Hash identifier: 60eFpUEoRfUOj01R9tYYpcLOXyOyfAqNfE7WSJXeEiU= Subject key identifier: 64:C9:0F:17:68:93:E6:1F:05:82:C9:20:A0:8D:9D:EF:BC:10:E3:5D Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 0D235B781D588063B5629F5F375132FB7A16B600 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402265.roa Signing time: Mon 02 Nov 2026 00:20:36 +0000 ROA not before: Mon 02 Nov 2026 00:15:36 +0000 ROA not after: Mon 01 Nov 2027 00:20:36 +0000 asID: 402265 IP address blocks: 109.66.69.0/24 maxlen: 24 109.66.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:23:5b:78:1d:58:80:63:b5:62:9f:5f:37:51:32:fb:7a:16:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 2 00:15:36 2026 GMT Not After : Nov 1 00:20:36 2027 GMT Subject: CN=64C90F176893E61F0582C920A08D9DEFBC10E35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:15:b8:9f:bb:52:3c:5a:16:64:d7:5c:6b: 0e:69:68:2a:6c:a7:51:8d:34:e9:27:77:26:ed:7e: 10:33:d8:33:7b:b8:a0:2c:e2:03:cd:d3:de:f2:88: b2:4d:60:54:11:0e:f6:d8:e9:b8:3e:48:78:66:86: 7e:dd:82:4b:a7:0d:8e:02:7a:f9:71:76:0e:71:0c: 3e:6d:18:38:33:b5:86:1c:28:29:a0:5b:25:a9:d3: 1a:96:fd:6a:ed:a7:75:63:95:73:c4:73:3b:8d:65: 72:90:21:42:3e:32:ac:22:db:05:48:31:90:6c:cc: 77:9b:32:40:d9:a5:83:ba:a7:75:45:d6:54:f0:1f: 2d:6a:91:dc:24:d1:d7:2b:fd:3c:de:62:38:5a:16: 76:29:b1:68:f3:56:e3:08:bd:35:1e:14:f0:0e:49: eb:3f:da:a2:89:ec:1d:a2:52:ca:29:c4:7c:b6:be: 96:14:fb:35:78:e4:24:28:a9:32:01:7d:4b:98:4c: 00:b7:76:92:a0:d2:d0:8c:45:af:e7:37:e9:fa:0f: 7a:f1:43:4a:b1:e1:ff:24:00:2d:45:e3:53:b7:7d: 0e:a7:68:0c:78:25:7b:e2:8e:74:c2:09:1b:9d:ca: 0d:f9:9a:9d:bb:62:d8:22:02:1c:d9:a7:8d:71:7a: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C9:0F:17:68:93:E6:1F:05:82:C9:20:A0:8D:9D:EF:BC:10:E3:5D X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402265.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.66.69.0/24 109.66.84.0/24 Signature Algorithm: sha256WithRSAEncryption 40:3c:63:fc:7c:c5:9b:09:cf:5b:b6:37:0b:df:cd:1b:a1:89: 97:87:21:d5:67:6b:32:77:65:cb:da:c7:ec:3b:3e:f8:ae:9e: 58:a1:3d:ce:fb:a5:72:2b:3c:2c:71:99:06:0e:ea:2a:ae:f3: ed:2b:2f:60:77:e5:ff:64:ed:af:2f:63:59:43:6f:b8:53:5e: e9:18:1d:31:67:36:e2:c9:c9:f3:d6:67:7e:c8:41:a8:f8:a5: 33:24:53:93:64:93:b2:8f:a4:e3:6f:da:13:c9:31:ab:b2:76: a9:dc:f1:f2:18:e6:0e:cd:26:c8:26:38:3e:ff:1a:94:2a:bd: 1b:15:78:66:b8:34:4b:ef:2f:88:00:cd:95:0b:8b:4a:8d:5c: 67:5a:8e:b0:ed:3e:30:2f:a6:63:b7:b6:f6:5a:3a:60:35:a3: cc:af:9d:f5:df:d1:20:61:1d:d3:46:9c:32:0f:fc:5d:5d:ed: 6c:52:4f:4b:35:92:f6:da:e0:00:57:96:af:b2:c4:e3:f7:3c: d0:ef:8a:ff:e1:98:c0:a9:1a:17:5c:f8:f8:47:34:10:9e:09: ef:73:ec:50:15:bc:33:77:2f:e3:b8:26:bf:b5:b5:6b:ae:4d: 78:5e:5c:9f:9e:67:81:16:17:a3:5d:83:1a:fe:ed:b9:2b:86: 4f:a2:56:4b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUDSNbeB1YgGO1Yp9fN1Ey+3oWtgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDIwMDE1MzZaFw0yNzExMDEwMDIwMzZaMDMxMTAvBgNV BAMTKDY0QzkwRjE3Njg5M0U2MUYwNTgyQzkyMEEwOEQ5REVGQkMxMEUzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLRW4n7tSPFoWZNdcaw5paCps p1GNNOkndybtfhAz2DN7uKAs4gPN097yiLJNYFQRDvbY6bg+SHhmhn7dgkunDY4C evlxdg5xDD5tGDgztYYcKCmgWyWp0xqW/Wrtp3VjlXPEczuNZXKQIUI+Mqwi2wVI MZBszHebMkDZpYO6p3VF1lTwHy1qkdwk0dcr/TzeYjhaFnYpsWjzVuMIvTUeFPAO Ses/2qKJ7B2iUsopxHy2vpYU+zV45CQoqTIBfUuYTAC3dpKg0tCMRa/nN+n6D3rx Q0qx4f8kAC1F41O3fQ6naAx4JXvijnTCCRudyg35mp27YtgiAhzZp41xegxDAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUZMkPF2iT5h8FgskgoI2d77wQ410wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIyNjUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABtQkUDBABtQlQwDQYJKoZIhvcNAQELBQADggEBAEA8Y/x8xZsJz1u2 NwvfzRuhiZeHIdVnazJ3Zcvax+w7PviunlihPc77pXIrPCxxmQYO6iqu8+0rL2B3 5f9k7a8vY1lDb7hTXukYHTFnNuLJyfPWZ37IQaj4pTMkU5Nkk7KPpONv2hPJMauy dqnc8fIY5g7NJsgmOD7/GpQqvRsVeGa4NEvvL4gAzZULi0qNXGdajrDtPjAvpmO3 tvZaOmA1o8yvnfXf0SBhHdNGnDIP/F1d7WxST0s1kvba4ABXlq+yxOP3PNDviv/h mMCpGhdc+PhHNBCeCe9z7FAVvDN3L+O4Jr+1tWuuTXheXJ+eZ4EWF6Ndgxr+7bkr hk+iVks= -----END CERTIFICATE-----Generated at Sun Nov 15 00:47:08 2026 by rpki-client