$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9457.roa File: AS9457.roa (raw, json) Hash identifier: KVHaa33bsfc6jbz8t6iZ/TS3oXVkXqrZT/WQSW7HjfM= Subject key identifier: C7:4F:2B:AA:BA:81:4D:46:21:93:23:43:A8:1E:D4:FC:26:6C:47:33 Certificate issuer: /CN=EE62537B84730FEF19A4F83414308039BC848047 Certificate serial: 3DA6E369D46C07E34575FD89C7F1D4C419F3BE37 Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9457.roa Signing time: Wed 04 Nov 2026 07:35:47 +0000 ROA not before: Wed 04 Nov 2026 07:30:47 +0000 ROA not after: Wed 03 Nov 2027 07:35:47 +0000 asID: 9457 IP address blocks: 79.176.199.0/24 maxlen: 24 79.182.19.0/24 maxlen: 24 79.182.199.0/24 maxlen: 24 79.183.85.0/24 maxlen: 24 109.65.23.0/24 maxlen: 24 109.66.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a6:e3:69:d4:6c:07:e3:45:75:fd:89:c7:f1:d4:c4:19:f3:be:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047 Validity Not Before: Nov 4 07:30:47 2026 GMT Not After : Nov 3 07:35:47 2027 GMT Subject: CN=C74F2BAABA814D4621932343A81ED4FC266C4733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:6d:57:34:88:a8:d8:e5:a7:3d:05:a8:5c: f1:7b:d2:14:a8:d4:75:86:1d:65:6c:af:19:08:cf: 01:27:dd:f3:8a:8c:76:ad:9c:4e:a5:75:9c:d2:d5: 98:99:d6:fb:2c:7f:d2:78:d3:aa:f6:9a:da:dc:47: 8f:1c:f1:b0:04:52:ad:1f:6e:ba:a6:2a:a3:db:09: a1:53:bd:21:7b:22:a2:4a:c0:0f:ec:0a:29:0a:48: b6:1e:57:42:ba:2b:ee:51:9f:a5:21:11:6e:9f:87: 4e:18:e4:e8:0c:1c:72:f5:3c:c5:28:73:04:cb:02: d8:24:91:01:36:6a:5d:72:61:b1:d2:14:9e:3a:e1: 1c:d6:9d:17:45:a6:66:50:ea:89:4e:2d:c1:53:be: 33:7e:67:71:ab:a3:5b:5b:e0:ca:3a:7d:03:f4:67: 31:c8:35:d7:63:cd:1a:db:b3:87:cf:6c:3b:5a:e8: 5b:74:c8:96:e6:82:8a:93:13:72:c3:dd:ea:61:30: 5c:30:5e:9b:3d:ea:59:8b:dd:a2:d0:85:70:9c:30: ee:a9:d9:be:b7:67:67:d2:3f:9d:27:c5:76:6f:4c: 45:f4:17:f9:4e:f5:1a:74:4e:0f:3b:9c:35:cf:47: f3:ec:d8:1c:ea:2b:51:34:fc:de:38:7d:59:6e:30: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:2B:AA:BA:81:4D:46:21:93:23:43:A8:1E:D4:FC:26:6C:47:33 X509v3 Authority Key Identifier: keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS9457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.176.199.0/24 79.182.19.0/24 79.182.199.0/24 79.183.85.0/24 109.65.23.0/24 109.66.141.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:64:71:94:9a:f5:9c:67:56:6a:aa:58:c4:12:d2:12:03:b6: 58:af:60:82:28:6f:3e:59:90:8f:1f:be:3d:0b:1b:10:bf:b8: b8:58:b4:20:8c:78:2a:04:7c:61:f7:2c:22:70:15:de:2f:aa: 98:f1:98:e5:20:62:5a:4b:0d:3e:5a:ac:e0:42:e1:2a:01:94: 1b:8e:c5:c4:9c:a2:05:a5:8b:48:e3:83:5e:b2:18:95:b9:b0: 22:87:f9:cb:e9:c9:5a:06:d6:97:86:7f:8d:0f:06:a9:d5:3e: a5:35:69:86:0d:ea:81:96:18:ab:0d:ff:0e:57:9d:37:40:3d: bc:46:21:59:6a:b2:08:28:62:ce:bf:e5:c6:5d:d7:16:79:61: dc:54:66:de:bb:46:99:16:8d:0d:fb:11:49:90:24:45:df:bb: 7f:9c:7f:a0:52:44:cf:10:1f:85:71:79:b3:7b:01:6e:a5:8f: 27:e8:33:0b:0f:26:a8:8e:f9:aa:34:c5:61:20:fc:47:97:d0: 61:9b:2c:4d:fa:b8:75:ed:7a:d6:65:84:ce:bb:cb:e6:6b:47: 49:b7:df:54:b8:2d:f3:71:1e:a6:67:9d:62:a5:f7:a3:aa:d0: a8:35:1e:1a:0b:9c:01:95:1b:b5:fd:c0:05:d5:93:44:09:24: c0:9f:20:49 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUPabjadRsB+NFdf2Jx/HUxBnzvjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlC Qzg0ODA0NzAeFw0yNjExMDQwNzMwNDdaFw0yNzExMDMwNzM1NDdaMDMxMTAvBgNV BAMTKEM3NEYyQkFBQkE4MTRENDYyMTkzMjM0M0E4MUVENEZDMjY2QzQ3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1R21XNIio2OWnPQWoXPF70hSo 1HWGHWVsrxkIzwEn3fOKjHatnE6ldZzS1ZiZ1vssf9J406r2mtrcR48c8bAEUq0f brqmKqPbCaFTvSF7IqJKwA/sCikKSLYeV0K6K+5Rn6UhEW6fh04Y5OgMHHL1PMUo cwTLAtgkkQE2al1yYbHSFJ464RzWnRdFpmZQ6olOLcFTvjN+Z3Gro1tb4Mo6fQP0 ZzHINddjzRrbs4fPbDta6Ft0yJbmgoqTE3LD3ephMFwwXps96lmL3aLQhXCcMO6p 2b63Z2fSP50nxXZvTEX0F/lO9Rp0Tg87nDXPR/Ps2BzqK1E0/N44fVluMIP3AgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUx08rqrqBTUYhkyNDqB7U/CZsRzMwHwYDVR0j BBgwFoAU7mJTe4RzD+8ZpPg0FDCAObyEgEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjcxNDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2Jj MTczLzAvRUU2MjUzN0I4NDczMEZFRjE5QTRGODM0MTQzMDgwMzlCQzg0ODA0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTZmMjBhNC0yNjBmLTQw ZmEtYTM4OS1kNmNhZDJkYzBmYmQvMC9FRTYyNTM3Qjg0NzMwRkVGMTlBNEY4MzQx NDMwODAzOUJDODQ4MDQ3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjcx NDQ0NzktNzA5ZS00NGNmLWIyNjMtNmIxMGNkM2JjMTczLzAvQVM5NDU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA ATAkAwQAT7DHAwQAT7YTAwQAT7bHAwQAT7dVAwQAbUEXAwQAbUKNMA0GCSqGSIb3 DQEBCwUAA4IBAQBcZHGUmvWcZ1ZqqljEEtISA7ZYr2CCKG8+WZCPH749CxsQv7i4 WLQgjHgqBHxh9ywicBXeL6qY8ZjlIGJaSw0+WqzgQuEqAZQbjsXEnKIFpYtI44Ne shiVubAih/nL6claBtaXhn+NDwap1T6lNWmGDeqBlhirDf8OV503QD28RiFZarII KGLOv+XGXdcWeWHcVGbeu0aZFo0N+xFJkCRF37t/nH+gUkTPEB+FcXmzewFupY8n 6DMLDyaojvmqNMVhIPxHl9BhmyxN+rh17XrWZYTOu8vma0dJt99UuC3zcR6mZ51i pfejqtCoNR4aC5wBlRu1/cAF1ZNECSTAnyBJ -----END CERTIFICATE-----Generated at Sat Nov 14 22:18:29 2026 by rpki-client