$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa File: AS219447.roa (raw, json) Hash identifier: yjv4Ph2zQH3duUukkRvZh+knaFXVwcBazwhW1uuqk30= Subject key identifier: 0D:BA:9A:77:6E:F5:23:5E:12:53:20:66:C9:1C:3B:C1:41:0A:49:13 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0F754822EF27F6724A175E25C6AB8B39790EC5F2 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa Signing time: Fri 16 Oct 2026 07:38:35 +0000 ROA not before: Fri 16 Oct 2026 07:33:35 +0000 ROA not after: Fri 15 Oct 2027 07:38:35 +0000 asID: 219447 IP address blocks: 152.234.134.0/24 maxlen: 24 189.12.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 06:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:75:48:22:ef:27:f6:72:4a:17:5e:25:c6:ab:8b:39:79:0e:c5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 16 07:33:35 2026 GMT Not After : Oct 15 07:38:35 2027 GMT Subject: CN=0DBA9A776EF5235E12532066C91C3BC1410A4913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:d7:c2:c5:0a:e3:ca:84:a6:6d:1e:e3:6b: d8:c2:63:21:7a:04:1d:8b:2c:29:f2:a2:60:7c:4c: 5c:4b:4b:be:42:2e:9f:5b:d7:3d:ba:f5:03:53:cc: fd:c7:76:d9:e7:f6:85:fb:fa:3b:9c:23:f7:49:f9: cd:5d:f7:91:e4:48:e7:74:d7:d5:d7:e6:dc:41:f0: 71:e0:b0:0e:09:43:43:91:9a:db:48:60:28:2d:cb: 73:a7:c9:f7:38:a0:0c:48:9a:51:d6:21:9a:a2:27: 75:c7:3d:2d:3f:1c:77:3a:f8:ed:e5:21:df:5b:6d: 93:1f:05:29:d6:da:df:df:2a:2c:95:fe:ad:8e:e7: 0f:c9:0c:31:bc:87:c6:e6:c4:78:98:18:5d:57:fc: 76:97:db:d3:68:04:5f:6f:b9:5f:3a:9e:97:f0:b6: 00:b6:2d:d8:59:99:ee:71:1a:9f:3f:9b:45:05:ed: 00:08:de:f8:c0:9e:0f:4a:37:fd:7b:8b:d1:55:f3: a2:3d:64:26:f3:e7:4c:38:2a:25:c9:47:95:c5:0d: fd:88:b1:56:24:61:90:74:b8:85:45:e5:a4:c1:6d: 10:a4:37:09:f1:4f:35:23:ec:17:c2:55:ec:e3:49: fa:6c:b2:c1:82:01:af:a0:b8:69:c5:1a:60:c0:ef: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BA:9A:77:6E:F5:23:5E:12:53:20:66:C9:1C:3B:C1:41:0A:49:13 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.134.0/24 189.12.130.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8c:91:97:9f:fb:b3:c1:dc:93:9b:4b:e1:71:f6:05:28:dd: 82:9c:60:8a:d3:b8:9c:c6:d3:41:a1:ed:dc:10:18:32:2a:12: 25:62:93:48:cb:26:65:ae:14:8c:98:29:8a:77:f3:f6:8e:6b: b1:15:76:2d:63:78:cd:ff:39:5a:32:f8:7d:96:49:d1:77:04: 61:48:4f:de:c5:79:c8:1d:b2:c1:b3:a8:2b:68:c6:ce:33:0e: 38:36:cc:b6:81:4b:62:5d:7e:57:2b:c9:32:dd:0c:b1:e3:2d: 58:8e:d5:92:5b:00:da:80:f0:43:c4:86:69:8d:ff:a4:4a:4b: 63:01:53:03:6f:32:f0:59:8c:b9:55:02:d5:44:ec:21:47:5e: 38:00:98:22:f8:92:b5:d6:b5:53:41:28:e2:ee:02:9f:8f:82: 49:12:cb:5f:9f:36:76:67:1e:b8:01:3e:90:56:09:b2:3f:3b: b8:cd:7c:0f:0e:6b:37:5d:34:4c:5f:ea:b6:b3:94:5a:26:5d: 6d:de:14:33:34:0e:cf:50:4b:8c:af:22:06:64:51:85:50:20: 55:66:45:1b:a0:32:8d:3f:0c:a3:8c:f6:d1:9b:0b:f4:ed:e1: 16:9c:3b:ff:71:00:0b:c6:c8:8d:5c:fe:be:a0:c7:c7:0a:24: d4:1c:bd:a2 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUD3VIIu8n9nJKF14lxquLOXkOxfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTYwNzMzMzVaFw0yNzEwMTUwNzM4MzVaMDMxMTAvBgNV BAMTKDBEQkE5QTc3NkVGNTIzNUUxMjUzMjA2NkM5MUMzQkMxNDEwQTQ5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjydfCxQrjyoSmbR7ja9jCYyF6 BB2LLCnyomB8TFxLS75CLp9b1z269QNTzP3Hdtnn9oX7+jucI/dJ+c1d95HkSOd0 19XX5txB8HHgsA4JQ0ORmttIYCgty3Onyfc4oAxImlHWIZqiJ3XHPS0/HHc6+O3l Id9bbZMfBSnW2t/fKiyV/q2O5w/JDDG8h8bmxHiYGF1X/HaX29NoBF9vuV86npfw tgC2LdhZme5xGp8/m0UF7QAI3vjAng9KN/17i9FV86I9ZCbz50w4KiXJR5XFDf2I sVYkYZB0uIVF5aTBbRCkNwnxTzUj7BfCVezjSfpsssGCAa+guGnFGmDA70DFAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUDbqad271I14SUyBmyRw7wUEKSRMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTk0NDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY6oYDBAC9DIIwDQYJKoZIhvcNAQELBQADggEBAIeMkZef+7PB3JOb S+Fx9gUo3YKcYIrTuJzG00Gh7dwQGDIqEiVik0jLJmWuFIyYKYp38/aOa7EVdi1j eM3/OVoy+H2WSdF3BGFIT97FecgdssGzqCtoxs4zDjg2zLaBS2JdflcryTLdDLHj LViO1ZJbANqA8EPEhmmN/6RKS2MBUwNvMvBZjLlVAtVE7CFHXjgAmCL4krXWtVNB KOLuAp+PgkkSy1+fNnZnHrgBPpBWCbI/O7jNfA8OazddNExf6razlFomXW3eFDM0 Ds9QS4yvIgZkUYVQIFVmRRugMo0/DKOM9tGbC/Tt4RacO/9xAAvGyI1c/r6gx8cK JNQcvaI= -----END CERTIFICATE-----Generated at Tue Oct 20 11:14:51 2026 by rpki-client