$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS42960.roa File: AS42960.roa (raw, json) Hash identifier: lNYIeg5CwEDgZJ8M6/w9VlXWVnn8CPrg1RmVKWjkyxc= Subject key identifier: 54:25:86:4E:5A:80:0F:0F:48:5A:E6:04:B4:90:18:7F:47:DB:2B:D3 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3A551063D4FC7B2056D3BFE0DA5538D30556E539 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS42960.roa Signing time: Wed 11 Nov 2026 16:08:55 +0000 ROA not before: Wed 11 Nov 2026 16:03:55 +0000 ROA not after: Wed 10 Nov 2027 16:08:55 +0000 asID: 42960 IP address blocks: 79.182.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:55:10:63:d4:fc:7b:20:56:d3:bf:e0:da:55:38:d3:05:56:e5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 11 16:03:55 2026 GMT Not After : Nov 10 16:08:55 2027 GMT Subject: CN=5425864E5A800F0F485AE604B490187F47DB2BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:21:aa:fd:34:d3:90:fe:b0:9d:4f:44:71: 22:a4:79:28:25:13:5a:0d:68:5f:f0:46:1d:76:67: 79:16:e5:d3:3c:20:c0:13:b5:76:94:c9:10:72:ef: 84:6c:57:22:32:72:d1:81:6b:7a:13:89:88:8d:a2: 8d:36:8f:7e:6a:f3:7b:8f:10:bd:30:91:ea:d4:51: 0f:03:72:d6:96:05:90:29:98:c7:3a:46:0e:27:4e: 95:88:78:04:46:3e:f7:d3:3d:f4:75:75:79:f2:c4: db:1e:23:92:bc:4c:d7:af:8c:d8:5a:8b:0b:11:89: 1e:46:b9:1a:f4:39:7c:69:88:1b:ad:77:b3:84:ef: f2:0e:11:97:4e:72:ac:bc:1b:d1:38:a0:b6:0a:f6: c2:c8:6e:7b:d2:cb:1e:f7:36:9a:59:05:59:5e:3a: ee:ca:88:27:b0:a8:4d:8c:a8:cf:16:71:8d:ae:61: 97:17:55:47:6e:53:8d:0a:0f:7d:47:10:57:6e:6f: 84:c8:a1:48:3c:64:80:47:60:e9:de:5f:17:41:bf: e0:d3:4b:a8:f1:39:06:37:7e:34:8f:73:07:ce:72: bb:ae:5e:cb:7e:72:42:85:6d:3d:a2:07:8e:49:f6: 21:ee:f6:64:ad:61:ca:69:24:2a:4a:9e:f2:18:ff: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:25:86:4E:5A:80:0F:0F:48:5A:E6:04:B4:90:18:7F:47:DB:2B:D3 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS42960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.188.0/24 Signature Algorithm: sha256WithRSAEncryption a9:26:3b:24:88:3b:dc:73:80:69:1e:56:a1:16:e6:6a:7b:87: 19:f9:2f:79:a6:49:bf:35:23:4a:f4:30:93:13:a9:25:57:7e: fc:bf:e3:20:77:1a:8f:5f:7d:13:a3:1f:c5:01:a4:b4:ef:8b: 4a:92:2c:32:c3:d7:fa:e7:3b:40:51:46:33:86:04:3c:c7:46: 2d:5d:62:fc:3e:26:cc:b1:3d:78:bc:6a:5b:0d:0f:75:51:84: e5:a4:5c:d9:47:83:af:54:f8:4c:a2:5a:0e:50:da:3c:49:bc: 7a:8d:7a:51:30:6e:eb:cf:aa:67:aa:6d:82:fb:52:8f:6a:2b: 8d:60:7e:29:42:9b:c6:fa:3f:ac:bd:79:6c:05:af:7e:05:d0: b0:32:99:7b:a0:50:db:dd:25:d5:11:66:d1:6c:72:62:1c:53: 20:4c:85:f8:a3:d0:f1:75:39:bc:41:69:da:61:56:73:45:8d: 86:84:53:45:14:9e:0c:d6:7a:88:fe:93:d1:ac:79:f5:1b:0b: f1:5d:e9:e6:70:46:ba:9f:e1:af:54:6d:04:fc:b8:e3:7a:77: 4f:ac:c0:c8:4e:c2:60:e8:5e:a3:a3:fe:9b:04:61:04:2f:82: f7:fe:e4:45:cc:1e:91:cd:c6:91:6e:5c:81:5a:3d:94:2b:c4: 8a:80:38:a2 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUOlUQY9T8eyBW07/g2lU40wVW5TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMTExNjAzNTVaFw0yNzExMTAxNjA4NTVaMDMxMTAvBgNV BAMTKDU0MjU4NjRFNUE4MDBGMEY0ODVBRTYwNEI0OTAxODdGNDdEQjJCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxryGq/TTTkP6wnU9EcSKkeSgl E1oNaF/wRh12Z3kW5dM8IMATtXaUyRBy74RsVyIyctGBa3oTiYiNoo02j35q83uP EL0wkerUUQ8DctaWBZApmMc6Rg4nTpWIeARGPvfTPfR1dXnyxNseI5K8TNevjNha iwsRiR5GuRr0OXxpiButd7OE7/IOEZdOcqy8G9E4oLYK9sLIbnvSyx73NppZBVle Ou7KiCewqE2MqM8WcY2uYZcXVUduU40KD31HEFdub4TIoUg8ZIBHYOneXxdBv+DT S6jxOQY3fjSPcwfOcruuXst+ckKFbT2iB45J9iHu9mStYcppJCpKnvIY/8YDAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUVCWGTlqADw9IWuYEtJAYf0fbK9MwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0Mjk2MC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAE+2vDANBgkqhkiG9w0BAQsFAAOCAQEAqSY7JIg73HOAaR5WoRbmanuH GfkveaZJvzUjSvQwkxOpJVd+/L/jIHcaj199E6MfxQGktO+LSpIsMsPX+uc7QFFG M4YEPMdGLV1i/D4mzLE9eLxqWw0PdVGE5aRc2UeDr1T4TKJaDlDaPEm8eo16UTBu 68+qZ6ptgvtSj2orjWB+KUKbxvo/rL15bAWvfgXQsDKZe6BQ290l1RFm0WxyYhxT IEyF+KPQ8XU5vEFp2mFWc0WNhoRTRRSeDNZ6iP6T0ax59RsL8V3p5nBGup/hr1Rt BPy443p3T6zAyE7CYOheo6P+mwRhBC+C9/7kRcwekc3GkW5cgVo9lCvEioA4og== -----END CERTIFICATE-----Generated at Sat Nov 14 23:22:33 2026 by rpki-client