$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219053.roa File: AS219053.roa (raw, json) Hash identifier: MhFLp2f9Qh6rzCRbil2fHVS1XSgAASq3+tljt8hTrn0= Subject key identifier: B3:45:DA:30:02:DD:6C:C9:9C:B6:BB:79:81:24:F1:4C:8B:A9:C3:D5 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5FCCAEFD274B0FBDDE243F20CE11A3626070FF25 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219053.roa Signing time: Thu 15 Oct 2026 10:16:54 +0000 ROA not before: Thu 15 Oct 2026 10:11:54 +0000 ROA not after: Thu 14 Oct 2027 10:16:54 +0000 asID: 219053 IP address blocks: 152.234.134.0/24 maxlen: 24 189.12.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 06:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cc:ae:fd:27:4b:0f:bd:de:24:3f:20:ce:11:a3:62:60:70:ff:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 15 10:11:54 2026 GMT Not After : Oct 14 10:16:54 2027 GMT Subject: CN=B345DA3002DD6CC99CB6BB798124F14C8BA9C3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:11:a8:dd:fd:d3:52:d3:61:2e:11:bb:6f: 06:85:ba:7f:76:0a:7c:bf:c5:43:5b:56:38:57:e7: c9:50:dc:52:06:b1:21:45:a6:e4:39:6b:a5:b7:85: 7f:2c:b7:f4:1e:94:93:7a:77:4d:4a:d1:d8:a8:2e: e9:2d:a4:97:7f:c2:ed:de:31:c6:f0:83:cb:71:55: bf:78:e1:88:db:07:c1:6d:ba:d5:48:9a:f6:9a:98: ea:3d:53:19:dc:0b:10:9b:0d:7a:4b:b0:e6:88:99: 31:b6:85:fe:ae:98:aa:c5:28:e9:65:a2:83:66:6f: 2d:98:61:95:e3:5c:98:28:01:ff:d3:da:90:ea:d2: 25:0a:09:72:b3:a7:11:05:c0:12:90:ab:54:e9:c7: 54:92:d6:5d:e6:60:71:6a:01:05:d0:31:0a:a0:64: c7:e9:4d:1e:9c:ac:2c:66:9d:67:ab:77:4d:db:67: f1:7f:c1:cf:3b:99:12:6d:c9:c7:a8:c1:cb:ff:75: 93:ab:33:4d:84:3e:10:4c:8f:d3:c7:c0:52:77:24: bc:b4:8f:45:92:31:f9:f5:3d:4b:16:b8:83:21:ed: 01:e4:e9:c3:b2:ae:c8:f8:0a:98:3e:2b:7f:7d:07: 05:5c:ee:45:74:00:3d:19:84:a3:fb:96:8c:ae:c6: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:45:DA:30:02:DD:6C:C9:9C:B6:BB:79:81:24:F1:4C:8B:A9:C3:D5 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.134.0/24 189.12.130.0/24 Signature Algorithm: sha256WithRSAEncryption ac:49:6e:45:d5:83:5a:f2:86:3c:76:07:ad:c0:5a:78:39:62: 60:fd:75:07:ea:36:78:86:29:bc:3a:ef:06:9d:fe:e1:ec:66: 83:f1:4b:33:bd:00:97:c9:db:85:82:9f:00:de:eb:cb:a1:e7: c0:56:35:a5:ba:43:c9:d9:61:10:eb:a3:a4:09:4a:51:d1:63: 6e:d2:5a:53:42:ab:5d:cc:fc:ed:a9:47:d2:4b:05:71:09:1f: 8a:72:07:37:4c:6c:3a:94:7f:c6:6c:98:80:c0:f3:ab:10:35: 63:be:cf:5a:7a:02:1c:42:e5:de:c2:95:82:41:01:c0:f2:49: 59:7f:06:ce:1a:d4:4a:1b:66:21:d1:b5:68:72:8d:6e:21:d6: 3f:ea:ac:d9:45:66:91:11:84:6a:e0:0f:ec:c0:a2:6e:c9:3e: 44:e2:99:91:a4:67:b1:cc:08:11:bc:3e:d0:1b:6b:1c:72:4f: 24:14:5e:fa:b7:e3:67:6e:03:6d:75:36:bd:46:46:52:5e:d2: e4:d9:0a:92:96:fd:73:87:69:57:b3:2e:14:fb:9c:65:28:e0: 61:e1:91:c3:c2:3e:f9:02:11:1d:56:a4:8e:cb:bb:38:1e:66: 91:34:79:62:83:47:3b:56:65:c0:4a:f3:2c:4a:4f:44:76:60: db:1a:d3:6e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUX8yu/SdLD73eJD8gzhGjYmBw/yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTUxMDExNTRaFw0yNzEwMTQxMDE2NTRaMDMxMTAvBgNV BAMTKEIzNDVEQTMwMDJERDZDQzk5Q0I2QkI3OTgxMjRGMTRDOEJBOUMzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsBGo3f3TUtNhLhG7bwaFun92 Cny/xUNbVjhX58lQ3FIGsSFFpuQ5a6W3hX8st/QelJN6d01K0dioLuktpJd/wu3e Mcbwg8txVb944YjbB8FtutVImvaamOo9UxncCxCbDXpLsOaImTG2hf6umKrFKOll ooNmby2YYZXjXJgoAf/T2pDq0iUKCXKzpxEFwBKQq1Tpx1SS1l3mYHFqAQXQMQqg ZMfpTR6crCxmnWerd03bZ/F/wc87mRJtyceowcv/dZOrM02EPhBMj9PHwFJ3JLy0 j0WSMfn1PUsWuIMh7QHk6cOyrsj4Cpg+K399BwVc7kV0AD0ZhKP7loyuxjvVAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUs0XaMALdbMmctrt5gSTxTIupw9UwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTkwNTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY6oYDBAC9DIIwDQYJKoZIhvcNAQELBQADggEBAKxJbkXVg1ryhjx2 B63AWng5YmD9dQfqNniGKbw67wad/uHsZoPxSzO9AJfJ24WCnwDe68uh58BWNaW6 Q8nZYRDro6QJSlHRY27SWlNCq13M/O2pR9JLBXEJH4pyBzdMbDqUf8ZsmIDA86sQ NWO+z1p6AhxC5d7ClYJBAcDySVl/Bs4a1EobZiHRtWhyjW4h1j/qrNlFZpERhGrg D+zAom7JPkTimZGkZ7HMCBG8PtAbaxxyTyQUXvq342duA211Nr1GRlJe0uTZCpKW /XOHaVezLhT7nGUo4GHhkcPCPvkCER1WpI7LuzgeZpE0eWKDRztWZcBK8yxKT0R2 YNsa024= -----END CERTIFICATE-----Generated at Tue Oct 20 11:14:33 2026 by rpki-client