$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4766.roa File: AS4766.roa (raw, json) Hash identifier: WFWS7TLTaoMOnFu7JIt/AlkiGF12CpxrIRchJoB+LP0= Subject key identifier: 94:94:E5:70:68:F4:7D:9E:7A:B4:73:65:C9:20:84:B4:0E:A6:41:E3 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 5C17753E05CAD5C8B68C2FA4088099FF076F4239 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4766.roa Signing time: Mon 09 Nov 2026 03:13:55 +0000 ROA not before: Mon 09 Nov 2026 03:08:55 +0000 ROA not after: Mon 08 Nov 2027 03:13:55 +0000 asID: 4766 IP address blocks: 79.176.184.0/21 maxlen: 21 79.180.2.0/23 maxlen: 24 79.180.34.0/23 maxlen: 24 79.180.64.0/23 maxlen: 24 79.180.102.0/23 maxlen: 24 79.180.132.0/23 maxlen: 24 79.180.236.0/23 maxlen: 24 79.180.254.0/23 maxlen: 24 79.182.19.0/24 maxlen: 24 109.65.16.0/23 maxlen: 24 109.66.90.0/23 maxlen: 24 109.66.168.0/21 maxlen: 21 109.66.234.0/23 maxlen: 24 109.66.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:17:75:3e:05:ca:d5:c8:b6:8c:2f:a4:08:80:99:ff:07:6f:42:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 9 03:08:55 2026 GMT Not After : Nov 8 03:13:55 2027 GMT Subject: CN=9494E57068F47D9E7AB47365C92084B40EA641E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:74:68:e0:30:66:ff:1f:d3:92:b2:3b:09: 4b:9f:77:6a:2f:ec:f0:ca:60:de:07:87:43:fb:fa: 33:51:f0:cc:a7:80:84:0b:44:8a:ae:80:66:09:05: 0b:80:49:61:41:ad:58:ec:4b:15:0e:6e:54:8a:7d: 97:a8:dc:af:66:12:f7:c1:4f:2d:ac:43:4b:e6:2b: 8a:1e:ec:94:86:8c:e1:2e:7f:82:64:0b:3f:68:01: d4:c7:57:74:34:c2:a2:b8:3d:82:cf:8c:09:f6:24: eb:28:62:a9:2b:b4:8a:f9:d4:e7:77:ce:24:29:d6: b9:ba:22:02:dd:53:53:0e:4e:ce:78:1d:57:b5:58: 24:c1:85:1d:dc:c5:66:d6:8f:15:78:e1:63:6c:9f: bc:58:2a:38:d9:3a:b0:77:8e:dd:e6:20:97:8b:a9: 31:9c:5c:a8:6f:20:a2:32:f4:a4:a6:73:0d:a2:9c: 11:35:07:02:35:98:e0:38:5a:cb:06:bf:0f:cb:7c: 9f:56:e9:9d:f8:f1:bf:20:7e:64:99:8b:a1:7d:e4: d8:c1:c5:4c:9c:ed:2f:52:6e:19:bf:61:e8:1d:9e: 3c:96:5e:94:91:5e:16:2f:b5:80:5f:3f:96:3e:7b: bc:ad:c2:e3:c7:04:d4:1f:93:b0:0d:12:c8:39:3d: e1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:E5:70:68:F4:7D:9E:7A:B4:73:65:C9:20:84:B4:0E:A6:41:E3 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS4766.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.184.0/21 79.180.2.0/23 79.180.34.0/23 79.180.64.0/23 79.180.102.0/23 79.180.132.0/23 79.180.236.0/23 79.180.254.0/23 79.182.19.0/24 109.65.16.0/23 109.66.90.0/23 109.66.168.0/21 109.66.234.0/23 109.66.246.0/23 Signature Algorithm: sha256WithRSAEncryption b3:e8:31:00:18:f5:f1:59:f7:27:e0:20:b1:33:43:74:42:fb: 68:c2:b8:d1:bc:cf:7f:ec:82:7d:ef:76:f5:42:d3:25:eb:e0: 74:92:b0:c2:97:da:3f:28:9f:45:36:51:9b:14:a2:20:a7:21: 44:c0:54:af:cc:3f:8d:10:3d:11:84:3f:d6:8f:d6:79:94:75: 94:be:12:b8:d2:7b:28:60:c7:4e:da:54:3e:a0:74:23:54:b2: 35:db:7a:64:3f:2f:49:b8:7f:a2:7f:bc:8e:52:f7:f5:7e:99: 19:92:4a:1b:e9:69:43:ac:80:e1:c0:81:db:f4:f9:ef:a7:df: 4f:19:f8:ab:e1:cc:0b:3a:80:59:1c:5b:e8:dc:39:f5:b1:2c: 73:e1:25:54:48:aa:96:0f:5b:f3:7a:3e:c6:41:33:40:df:2d: c2:11:eb:b6:97:ab:9f:ff:15:fd:f8:91:14:73:1b:df:0b:80: 4d:26:28:bd:f5:ed:97:b6:e4:ef:70:69:80:11:c3:ad:4c:4a: 39:50:ca:14:8a:81:b1:e7:4b:31:b0:a1:c5:36:c1:67:25:90: 7d:4a:d3:a6:c2:6f:d1:a7:5e:c6:f2:3f:ca:07:31:02:7e:86: 00:9e:fd:91:be:20:d7:8c:e7:ba:52:4f:bb:bb:da:38:81:82: d3:e6:f0:ce -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUXBd1PgXK1ci2jC+kCICZ/wdvQjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDkwMzA4NTVaFw0yNzExMDgwMzEzNTVaMDMxMTAvBgNV BAMTKDk0OTRFNTcwNjhGNDdEOUU3QUI0NzM2NUM5MjA4NEI0MEVBNjQxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeWHRo4DBm/x/TkrI7CUufd2ov 7PDKYN4Hh0P7+jNR8MyngIQLRIqugGYJBQuASWFBrVjsSxUOblSKfZeo3K9mEvfB Ty2sQ0vmK4oe7JSGjOEuf4JkCz9oAdTHV3Q0wqK4PYLPjAn2JOsoYqkrtIr51Od3 ziQp1rm6IgLdU1MOTs54HVe1WCTBhR3cxWbWjxV44WNsn7xYKjjZOrB3jt3mIJeL qTGcXKhvIKIy9KSmcw2inBE1BwI1mOA4WssGvw/LfJ9W6Z348b8gfmSZi6F95NjB xUyc7S9Sbhm/YegdnjyWXpSRXhYvtYBfP5Y+e7ytwuPHBNQfk7ANEsg5PeGZAgMB AAGjggKRMIICjTAdBgNVHQ4EFgQUlJTlcGj0fZ56tHNlySCEtA6mQeMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM0NzY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIA ATBUAwQDT7C4AwQBT7QCAwQBT7QiAwQBT7RAAwQBT7RmAwQBT7SEAwQBT7TsAwQB T7T+AwQAT7YTAwQBbUEQAwQBbUJaAwQDbUKoAwQBbULqAwQBbUL2MA0GCSqGSIb3 DQEBCwUAA4IBAQCz6DEAGPXxWfcn4CCxM0N0QvtowrjRvM9/7IJ973b1QtMl6+B0 krDCl9o/KJ9FNlGbFKIgpyFEwFSvzD+NED0RhD/Wj9Z5lHWUvhK40nsoYMdO2lQ+ oHQjVLI123pkPy9JuH+if7yOUvf1fpkZkkob6WlDrIDhwIHb9Pnvp99PGfir4cwL OoBZHFvo3Dn1sSxz4SVUSKqWD1vzej7GQTNA3y3CEeu2l6uf/xX9+JEUcxvfC4BN Jii99e2XtuTvcGmAEcOtTEo5UMoUioGx50sxsKHFNsFnJZB9StOmwm/Rp17G8j/K BzECfoYAnv2RviDXjOe6Uk+7u9o4gYLT5vDO -----END CERTIFICATE-----Generated at Sat Nov 14 22:29:57 2026 by rpki-client