$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: 1Vp5zbLNNZ5gjhjVyQgFso3pdv6T/2C8qqPTa7C7FGM= Subject key identifier: 18:68:92:95:EA:2B:33:02:D6:32:AE:C7:87:61:1A:6A:BA:65:5A:2F Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 6E58E4356AC06F2999299603ABD13AC908849B1F Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa Signing time: Sat 07 Nov 2026 06:33:03 +0000 ROA not before: Sat 07 Nov 2026 06:28:03 +0000 ROA not after: Sat 06 Nov 2027 06:33:03 +0000 asID: 9009 IP address blocks: 79.182.130.0/24 maxlen: 24 109.65.22.0/24 maxlen: 24 109.66.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 02:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:58:e4:35:6a:c0:6f:29:99:29:96:03:ab:d1:3a:c9:08:84:9b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 7 06:28:03 2026 GMT Not After : Nov 6 06:33:03 2027 GMT Subject: CN=18689295EA2B3302D632AEC787611A6ABA655A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:0b:8b:16:7d:b1:3c:b3:0e:49:4f:c3:f5: 0c:76:84:d2:3d:84:2b:76:87:1b:04:ae:8d:b1:55: 77:ae:ac:01:e8:b1:be:a6:fd:b2:c0:4e:94:91:7b: 07:5b:3e:00:55:c3:40:c8:74:a8:72:f8:9f:cb:57: 93:40:87:bb:6a:68:b7:cc:5b:df:31:77:48:77:d0: ad:ba:35:dc:77:f1:65:2e:2d:5f:bc:f0:7d:d4:57: fa:0d:7a:a0:6e:94:f5:04:e8:3c:5f:05:45:b5:e2: a0:10:68:30:96:09:60:05:89:33:b8:52:eb:6c:96: d8:a7:9a:9d:8a:b5:2a:36:e2:0a:58:bc:9e:da:54: b8:5c:82:24:91:06:5d:6f:1f:24:1f:6c:30:91:a7: 05:ad:86:bc:b3:14:3f:3d:59:95:89:d9:93:bf:4a: 6c:77:de:ea:34:a1:ac:a6:d8:c7:4f:28:41:a3:d8: 2c:d0:6b:55:df:72:76:cb:ef:b1:93:e4:fb:ce:78: 83:cf:f2:9d:90:38:bb:6d:f7:98:6a:41:72:cc:b3: 52:e5:d2:3e:18:8f:19:d9:2a:40:1f:d6:5e:9e:17: ce:6c:8c:e4:d3:eb:2c:68:fa:0c:66:fe:a9:6d:0e: 20:1b:fa:18:6b:8f:4e:b1:ab:7c:a2:2b:a8:65:c5: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:68:92:95:EA:2B:33:02:D6:32:AE:C7:87:61:1A:6A:BA:65:5A:2F X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.182.130.0/24 109.65.22.0/24 109.66.13.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:62:49:29:f2:31:a2:18:b5:f1:54:24:3e:a2:b9:9d:ba:a6: bf:b4:7a:a9:79:21:a1:4e:86:ab:73:cb:f8:8e:33:26:a1:c4: 57:81:96:a6:f7:41:8f:24:55:61:94:53:be:aa:7f:64:ad:d7: 8e:75:4c:c6:72:0b:3b:60:33:b7:1e:9b:b3:61:18:06:13:1a: cb:16:28:e4:6d:81:7a:29:93:0d:a7:bb:d4:94:35:d1:04:81: 82:f2:48:a8:6c:37:b7:ad:f9:3c:5c:c7:54:5c:ef:92:87:ba: be:79:05:bb:14:b5:99:59:66:c7:64:b5:5e:cb:0f:b2:b6:49: 9f:17:c6:90:8e:bb:d0:00:ad:35:dc:9d:38:60:43:71:68:5f: ad:f0:54:e4:70:48:cf:95:de:a4:55:57:c9:67:e3:da:fc:c4: f8:2a:65:85:e6:13:c7:f6:7d:61:03:35:f8:35:4f:be:63:ba: 3d:49:01:67:3e:c2:e3:d3:86:ca:a2:19:8d:13:d9:ec:68:54: 6b:96:ca:93:aa:29:a2:05:63:64:0d:62:6a:cf:cb:43:5f:dd: cd:48:ce:96:30:ae:fc:27:69:89:89:66:17:90:f4:53:21:09: 0a:e1:d4:37:30:d6:51:42:09:61:ff:96:45:63:40:c7:02:28: d0:53:17:51 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUbljkNWrAbymZKZYDq9E6yQiEmx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDcwNjI4MDNaFw0yNzExMDYwNjMzMDNaMDMxMTAvBgNV BAMTKDE4Njg5Mjk1RUEyQjMzMDJENjMyQUVDNzg3NjExQTZBQkE2NTVBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3guLFn2xPLMOSU/D9Qx2hNI9 hCt2hxsEro2xVXeurAHosb6m/bLATpSRewdbPgBVw0DIdKhy+J/LV5NAh7tqaLfM W98xd0h30K26Ndx38WUuLV+88H3UV/oNeqBulPUE6DxfBUW14qAQaDCWCWAFiTO4 Uutsltinmp2KtSo24gpYvJ7aVLhcgiSRBl1vHyQfbDCRpwWthryzFD89WZWJ2ZO/ Smx33uo0oaym2MdPKEGj2CzQa1XfcnbL77GT5PvOeIPP8p2QOLtt95hqQXLMs1Ll 0j4YjxnZKkAf1l6eF85sjOTT6yxo+gxm/qltDiAb+hhrj06xq3yiK6hlxUL7AgMB AAGjggJPMIICSzAdBgNVHQ4EFgQUGGiSleorMwLWMq7Hh2EaarplWi8wHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5MDA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA ATASAwQAT7aCAwQAbUEWAwQAbUINMA0GCSqGSIb3DQEBCwUAA4IBAQCeYkkp8jGi GLXxVCQ+ormduqa/tHqpeSGhToarc8v4jjMmocRXgZam90GPJFVhlFO+qn9krdeO dUzGcgs7YDO3HpuzYRgGExrLFijkbYF6KZMNp7vUlDXRBIGC8kiobDe3rfk8XMdU XO+Sh7q+eQW7FLWZWWbHZLVeyw+ytkmfF8aQjrvQAK013J04YENxaF+t8FTkcEjP ld6kVVfJZ+Pa/MT4KmWF5hPH9n1hAzX4NU++Y7o9SQFnPsLj04bKohmNE9nsaFRr lsqTqimiBWNkDWJqz8tDX93NSM6WMK78J2mJiWYXkPRTIQkK4dQ3MNZRQglh/5ZF Y0DHAijQUxdR -----END CERTIFICATE-----Generated at Wed Nov 11 20:40:14 2026 by rpki-client