$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402394.roa File: AS402394.roa (raw, json) Hash identifier: 2qpomOrNF/Zx0E/AO5OXaco+Z2ZHDAE+ZoaybMhoFA4= Subject key identifier: 13:7B:41:D0:87:F8:9F:F6:0A:E2:6D:0F:92:CF:88:79:03:D5:DD:34 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 316E6AFEF0342D0533A97552D34C0303EB446852 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402394.roa Signing time: Fri 13 Nov 2026 07:26:45 +0000 ROA not before: Fri 13 Nov 2026 07:21:45 +0000 ROA not after: Fri 12 Nov 2027 07:26:45 +0000 asID: 402394 IP address blocks: 109.65.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6e:6a:fe:f0:34:2d:05:33:a9:75:52:d3:4c:03:03:eb:44:68:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 13 07:21:45 2026 GMT Not After : Nov 12 07:26:45 2027 GMT Subject: CN=137B41D087F89FF60AE26D0F92CF887903D5DD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:f6:a5:a7:5c:d9:75:2f:ad:50:61:ba:dc: 5e:34:f2:15:7f:f0:0c:48:f6:cc:24:47:b0:0b:6d: cd:71:b8:f8:ba:61:74:89:7e:3b:c2:c9:4d:df:41: a1:b6:ea:6c:fb:cb:79:f8:d4:1e:7c:3a:a3:6f:37: f1:62:90:a9:97:89:7a:32:94:cd:8b:f1:b0:4a:31: f8:1c:87:26:c8:3b:25:0f:d2:d0:aa:ea:f9:6d:84: 27:bc:f3:77:1b:5a:a9:b6:d2:e7:76:df:33:72:03: 35:12:85:12:98:42:94:c3:13:3a:3c:d5:f4:c7:42: 39:2a:2a:7c:3f:ee:83:02:96:3a:77:60:c3:9d:7a: 89:93:2b:ac:de:f7:95:a1:41:23:bd:89:71:41:13: 8e:69:14:e0:53:ba:d1:39:56:bd:bb:e5:8e:9b:43: a1:69:d3:0a:3f:e3:5d:f9:cd:53:ce:0b:fd:43:a8: cc:bf:53:d9:49:41:2a:41:1c:7e:7c:d2:f9:bd:b8: 71:6b:8c:77:be:e8:8f:b6:49:19:a9:21:e3:37:60: 89:9a:7a:b8:5d:08:cb:eb:c9:fb:7a:06:09:ba:fe: 25:08:43:b7:1a:76:a0:78:87:75:7b:72:48:7a:71: c5:e4:b4:1d:da:62:a2:b0:03:11:77:2d:81:88:1d: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7B:41:D0:87:F8:9F:F6:0A:E2:6D:0F:92:CF:88:79:03:D5:DD:34 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.65.199.0/24 Signature Algorithm: sha256WithRSAEncryption 52:74:7d:a5:0a:24:11:65:32:fa:7e:76:46:83:2c:f3:76:25: 36:ac:cb:51:66:46:1d:4d:8e:72:0d:4f:78:48:78:7c:d8:e5: 21:21:5e:29:0b:bb:3f:3b:44:88:14:a3:ce:7e:3c:c3:c4:75: 55:b4:29:61:99:a9:03:6e:f0:7e:1e:7a:fb:7e:f7:0f:5a:0c: 2a:51:02:ab:10:55:ad:0c:5e:6c:5c:02:2c:d6:5a:7e:5c:e2: a9:d7:57:4f:5d:e0:9b:81:9f:97:71:06:1f:14:7c:db:54:88: 26:9d:da:c4:92:8a:a3:2d:92:1a:66:01:c4:76:6c:d2:69:15: 00:42:c3:10:0f:3f:2a:9b:f6:fd:af:bd:ac:d4:af:02:8a:d8: 35:60:7c:fc:b0:6c:12:3b:10:1f:ff:16:67:03:01:4d:f3:d1: 9d:df:07:7f:96:88:04:ee:ca:bd:f9:74:16:3f:98:f0:b1:c0: c9:be:12:01:5a:d7:27:30:7d:f1:59:21:38:60:fa:1f:5b:f5: 15:09:50:a1:5d:ea:37:ac:db:fc:97:82:29:d3:56:19:7d:ab: d7:d5:f8:c6:29:45:4d:04:00:4e:72:9e:56:8b:a2:2b:22:db: d4:8f:0c:1b:c9:7c:76:3c:ec:a7:82:1b:ac:c7:f8:8f:10:ff: 02:ff:93:c6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUMW5q/vA0LQUzqXVS00wDA+tEaFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMTMwNzIxNDVaFw0yNzExMTIwNzI2NDVaMDMxMTAvBgNV BAMTKDEzN0I0MUQwODdGODlGRjYwQUUyNkQwRjkyQ0Y4ODc5MDNENUREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1k/alp1zZdS+tUGG63F408hV/ 8AxI9swkR7ALbc1xuPi6YXSJfjvCyU3fQaG26mz7y3n41B58OqNvN/FikKmXiXoy lM2L8bBKMfgchybIOyUP0tCq6vlthCe883cbWqm20ud23zNyAzUShRKYQpTDEzo8 1fTHQjkqKnw/7oMCljp3YMOdeomTK6ze95WhQSO9iXFBE45pFOBTutE5Vr275Y6b Q6Fp0wo/4135zVPOC/1DqMy/U9lJQSpBHH580vm9uHFrjHe+6I+2SRmpIeM3YIma erhdCMvryft6Bgm6/iUIQ7cadqB4h3V7ckh6ccXktB3aYqKwAxF3LYGIHTknAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUE3tB0If4n/YK4m0Pks+IeQPV3TQwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDIzOTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABtQccwDQYJKoZIhvcNAQELBQADggEBAFJ0faUKJBFlMvp+dkaDLPN2 JTasy1FmRh1NjnINT3hIeHzY5SEhXikLuz87RIgUo85+PMPEdVW0KWGZqQNu8H4e evt+9w9aDCpRAqsQVa0MXmxcAizWWn5c4qnXV09d4JuBn5dxBh8UfNtUiCad2sSS iqMtkhpmAcR2bNJpFQBCwxAPPyqb9v2vvazUrwKK2DVgfPywbBI7EB//FmcDAU3z 0Z3fB3+WiATuyr35dBY/mPCxwMm+EgFa1ycwffFZIThg+h9b9RUJUKFd6jes2/yX ginTVhl9q9fV+MYpRU0EAE5ynlaLoisi29SPDBvJfHY87KeCG6zH+I8Q/wL/k8Y= -----END CERTIFICATE-----Generated at Sun Nov 15 03:49:19 2026 by rpki-client