$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402289.roa File: AS402289.roa (raw, json) Hash identifier: 2xihaYQPY5+haH200sMo2WV3CrghiqpAGNJBPZbeOjM= Subject key identifier: 23:FB:85:4A:64:E9:78:CB:6C:22:7E:55:9C:E4:52:A8:2D:E1:2A:E4 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 23C13787DF1E065C074E88D37FFCE402559226AF Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402289.roa Signing time: Fri 30 Oct 2026 03:36:49 +0000 ROA not before: Fri 30 Oct 2026 03:31:49 +0000 ROA not after: Fri 29 Oct 2027 03:36:49 +0000 asID: 402289 IP address blocks: 79.183.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c1:37:87:df:1e:06:5c:07:4e:88:d3:7f:fc:e4:02:55:92:26:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Oct 30 03:31:49 2026 GMT Not After : Oct 29 03:36:49 2027 GMT Subject: CN=23FB854A64E978CB6C227E559CE452A82DE12AE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:ab:c0:6a:ca:dd:bb:3f:12:7b:06:8f:4e: a2:f6:e4:bb:05:72:df:57:bd:09:49:d4:06:a4:a3: 7a:eb:c3:43:be:42:6d:a0:23:65:fd:80:1c:03:e6: d5:1a:db:d1:7f:2c:0f:5c:3f:50:7a:33:51:cd:1b: 14:16:a6:1e:3c:a3:b2:72:df:0a:24:86:56:e3:24: e9:96:46:06:43:86:a8:0a:4f:b8:8c:47:16:99:c8: eb:84:b0:13:43:08:f2:27:2f:96:86:cf:aa:9b:72: d8:11:cb:6a:8e:00:6e:1e:0f:c5:24:f0:21:0b:9f: 7e:f5:f5:8b:f8:c5:d7:45:b6:b4:cc:ac:7e:5f:94: ad:df:27:72:47:43:f4:5b:a2:a4:95:a0:3f:15:a3: a7:89:bf:c9:73:7a:3b:6d:7a:c3:97:1a:13:be:49: bd:ec:b4:21:3d:ee:32:e9:c0:c4:5a:e3:d3:62:76: 7b:67:9d:79:66:69:71:d0:bb:8f:7b:1b:0f:bd:9d: d7:c8:6e:d3:c3:35:13:59:f3:ca:60:20:3c:93:6c: cd:10:40:59:f9:2f:48:84:58:2b:cd:e2:a0:0e:3c: 6c:73:3b:6e:51:d8:61:68:9c:a1:60:78:48:1d:d4: e3:cd:1a:76:c3:b0:d8:af:69:48:b6:cf:68:2f:a5: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FB:85:4A:64:E9:78:CB:6C:22:7E:55:9C:E4:52:A8:2D:E1:2A:E4 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402289.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.183.93.0/24 Signature Algorithm: sha256WithRSAEncryption c6:1c:af:c0:09:3c:85:16:d0:8f:25:9b:80:eb:a1:84:9c:54: 76:5f:8c:c8:8c:8f:2d:87:94:ab:9b:9c:f9:12:cf:1f:f0:1a: 8c:fc:6f:7f:35:aa:3e:8c:e7:83:8a:ef:05:ad:d8:59:0e:76: c0:40:78:80:c6:46:a3:10:78:81:33:3e:86:88:93:8d:2f:93: 10:b1:b0:63:1f:80:4e:f6:27:67:00:2d:a4:a7:97:ad:18:4e: 80:b4:25:66:11:9e:e9:c9:f3:11:ac:64:ce:4d:9c:9a:ed:d0: 28:46:01:2e:3d:5f:28:ab:b7:56:f7:02:9f:fc:71:a5:38:82: 4a:a8:81:fe:33:df:d8:f9:ac:09:59:0e:12:b7:1f:0d:0d:d4: d3:a0:ef:05:57:7a:53:ff:bf:7f:7c:58:d4:13:61:d7:a0:e0: 6a:91:ee:88:70:78:8a:c6:58:1c:13:b4:27:71:f1:7c:d9:70: 8b:b8:b8:7c:a1:02:45:9e:06:54:68:bf:c0:a6:eb:4c:c8:59: 2c:53:a9:93:86:fd:e5:ce:85:2a:4e:17:2d:97:a0:83:77:8a: 36:85:66:a7:e8:5b:e5:62:c5:21:ad:81:cc:8c:34:02:6d:f6: 5d:6d:4d:33:64:d8:88:8b:26:04:91:c0:2d:88:dc:b1:b1:55: 07:57:43:1e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUI8E3h98eBlwHTojTf/zkAlWSJq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjEwMzAwMzMxNDlaFw0yNzEwMjkwMzM2NDlaMDMxMTAvBgNV BAMTKDIzRkI4NTRBNjRFOTc4Q0I2QzIyN0U1NTlDRTQ1MkE4MkRFMTJBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntKvAasrduz8SewaPTqL25LsF ct9XvQlJ1Aako3rrw0O+Qm2gI2X9gBwD5tUa29F/LA9cP1B6M1HNGxQWph48o7Jy 3wokhlbjJOmWRgZDhqgKT7iMRxaZyOuEsBNDCPInL5aGz6qbctgRy2qOAG4eD8Uk 8CELn3719Yv4xddFtrTMrH5flK3fJ3JHQ/RboqSVoD8Vo6eJv8lzejttesOXGhO+ Sb3stCE97jLpwMRa49NidntnnXlmaXHQu497Gw+9ndfIbtPDNRNZ88pgIDyTbM0Q QFn5L0iEWCvN4qAOPGxzO25R2GFonKFgeEgd1OPNGnbDsNivaUi2z2gvpVldAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUI/uFSmTpeMtsIn5VnORSqC3hKuQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIyODkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPt10wDQYJKoZIhvcNAQELBQADggEBAMYcr8AJPIUW0I8lm4DroYSc VHZfjMiMjy2HlKubnPkSzx/wGoz8b381qj6M54OK7wWt2FkOdsBAeIDGRqMQeIEz PoaIk40vkxCxsGMfgE72J2cALaSnl60YToC0JWYRnunJ8xGsZM5NnJrt0ChGAS49 Xyirt1b3Ap/8caU4gkqogf4z39j5rAlZDhK3Hw0N1NOg7wVXelP/v398WNQTYdeg 4GqR7ohweIrGWBwTtCdx8XzZcIu4uHyhAkWeBlRov8Cm60zIWSxTqZOG/eXOhSpO Fy2XoIN3ijaFZqfoW+VixSGtgcyMNAJt9l1tTTNk2IiLJgSRwC2I3LGxVQdXQx4= -----END CERTIFICATE-----Generated at Sun Nov 15 16:46:28 2026 by rpki-client