$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402899.roa File: AS402899.roa (raw, json) Hash identifier: kp9Gwka8dtniQncOKPe++pY9IHTX0/yRNhpRXQCbFvY= Subject key identifier: D0:A2:D1:D2:47:6C:FF:2D:18:82:70:75:6F:41:B1:11:52:08:E8:61 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5A50668E75D9E1C3B32BC83350DF46E7EFBDA804 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402899.roa Signing time: Mon 09 Nov 2026 06:58:13 +0000 ROA not before: Mon 09 Nov 2026 06:53:13 +0000 ROA not after: Mon 08 Nov 2027 06:58:13 +0000 asID: 402899 IP address blocks: 79.180.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:50:66:8e:75:d9:e1:c3:b3:2b:c8:33:50:df:46:e7:ef:bd:a8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 9 06:53:13 2026 GMT Not After : Nov 8 06:58:13 2027 GMT Subject: CN=D0A2D1D2476CFF2D188270756F41B1115208E861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:92:cd:42:e4:47:34:ba:9e:86:74:f3:19: 05:2c:34:d9:50:d8:c5:1a:6b:12:cd:d0:20:b4:e4: 81:9e:58:f2:9f:a8:9a:56:2e:a4:f1:04:89:d9:45: 60:05:af:40:f3:27:50:08:73:79:30:d4:d6:a6:2a: 0f:17:c7:c8:12:83:cf:ee:40:ea:d7:9b:e1:d6:7c: cd:bd:aa:04:45:31:e5:9e:e1:6d:0e:b1:59:d7:01: 08:a8:e2:92:97:71:55:04:01:19:48:2c:85:d7:d2: 8a:43:f3:07:0e:90:48:db:f9:e3:dd:3b:08:a7:65: 60:79:28:5c:e6:28:66:9d:1f:cc:8c:12:b9:8c:85: 70:31:e2:ff:2c:fc:4a:cd:f7:a0:68:ab:bb:31:c1: 83:d1:07:8d:e1:89:44:60:d6:a4:b2:16:dc:6e:85: 82:0f:59:fd:78:e3:e0:89:7c:fb:b7:64:8d:ef:35: d0:81:62:2a:92:49:45:ed:e1:70:af:a6:9d:c0:04: 7c:8d:bc:7c:fb:07:36:83:c8:0f:49:9d:18:b2:1b: d8:c6:6b:69:68:03:16:f0:99:31:42:a9:8d:34:af: ba:e5:f5:df:8c:60:cb:60:69:fe:3f:61:de:72:7d: de:13:45:e9:4c:ee:ba:e5:4b:ec:fc:71:2e:7e:f1: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:D1:D2:47:6C:FF:2D:18:82:70:75:6F:41:B1:11:52:08:E8:61 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS402899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.180.18.0/24 Signature Algorithm: sha256WithRSAEncryption c1:4d:bf:be:dd:46:7a:8c:4b:41:ae:20:30:11:e3:b3:ed:2b: 13:7d:30:03:ff:de:3b:99:af:ef:3b:2e:8f:b6:e1:ef:c7:4b: 0d:1a:06:53:7b:b7:f1:ce:ad:9d:c1:e4:de:42:d9:3b:1b:1c: c7:9d:60:3d:44:ff:5e:cd:96:f5:3a:14:cc:f4:d5:a9:a3:9f: f7:3d:b9:c8:8f:7b:43:9c:33:5f:c2:1a:97:d7:de:98:ab:a0: ad:d7:0a:03:4b:6d:98:41:3f:07:73:35:70:9c:a9:43:34:04: 99:b5:cf:36:d1:64:61:e3:ae:ed:34:5c:ce:5c:6b:1c:c5:a8: 39:dd:75:43:35:e1:f1:86:72:41:96:69:a7:9b:10:e9:29:89: 0e:ce:b7:ac:0e:a6:35:41:9b:90:f1:4d:58:60:7f:8b:09:2b: bd:38:bc:2b:64:10:23:1f:73:8f:b4:ba:a3:c3:95:a1:18:c2: da:5e:b1:42:3b:f1:ed:89:b8:a7:e6:aa:b9:3d:a5:4c:9b:65: ba:c8:ae:1b:ff:79:c5:5e:48:08:bf:41:be:83:e8:52:69:84: 11:ac:88:c9:08:e8:46:45:57:53:64:0d:8f:bf:39:96:4d:ac: 50:64:69:37:fa:57:ea:09:c6:14:af:0e:cd:6b:39:66:ca:a2: ae:7c:7d:e1 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUWlBmjnXZ4cOzK8gzUN9G5++9qAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDkwNjUzMTNaFw0yNzExMDgwNjU4MTNaMDMxMTAvBgNV BAMTKEQwQTJEMUQyNDc2Q0ZGMkQxODgyNzA3NTZGNDFCMTExNTIwOEU4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJh5LNQuRHNLqehnTzGQUsNNlQ 2MUaaxLN0CC05IGeWPKfqJpWLqTxBInZRWAFr0DzJ1AIc3kw1NamKg8Xx8gSg8/u QOrXm+HWfM29qgRFMeWe4W0OsVnXAQio4pKXcVUEARlILIXX0opD8wcOkEjb+ePd OwinZWB5KFzmKGadH8yMErmMhXAx4v8s/ErN96Boq7sxwYPRB43hiURg1qSyFtxu hYIPWf144+CJfPu3ZI3vNdCBYiqSSUXt4XCvpp3ABHyNvHz7BzaDyA9JnRiyG9jG a2loAxbwmTFCqY00r7rl9d+MYMtgaf4/Yd5yfd4TRelM7rrlS+z8cS5+8RExAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU0KLR0kds/y0YgnB1b0GxEVII6GEwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0MDI4OTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABPtBIwDQYJKoZIhvcNAQELBQADggEBAMFNv77dRnqMS0GuIDAR47Pt KxN9MAP/3juZr+87Lo+24e/HSw0aBlN7t/HOrZ3B5N5C2TsbHMedYD1E/17NlvU6 FMz01amjn/c9uciPe0OcM1/CGpfX3piroK3XCgNLbZhBPwdzNXCcqUM0BJm1zzbR ZGHjru00XM5caxzFqDnddUM14fGGckGWaaebEOkpiQ7Ot6wOpjVBm5DxTVhgf4sJ K704vCtkECMfc4+0uqPDlaEYwtpesUI78e2JuKfmqrk9pUybZbrIrhv/ecVeSAi/ Qb6D6FJphBGsiMkI6EZFV1NkDY+/OZZNrFBkaTf6V+oJxhSvDs1rOWbKoq58feE= -----END CERTIFICATE-----Generated at Sun Nov 15 01:35:59 2026 by rpki-client