$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402866.roa File: AS402866.roa (raw, json) Hash identifier: +jqJtU/L7ClkxToyX5vRcKPQSGwoKDBmxSB1mHHWy6w= Subject key identifier: 62:58:99:8B:2F:26:84:2A:7A:13:64:C2:DB:FA:7F:FA:FD:EF:18:4A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1685D9FEE234A64D95A4ADF06FAD26CE332B0C45 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402866.roa Signing time: Mon 19 Oct 2026 21:19:44 +0000 ROA not before: Mon 19 Oct 2026 21:14:44 +0000 ROA not after: Mon 18 Oct 2027 21:19:44 +0000 asID: 402866 IP address blocks: 201.24.228.0/24 maxlen: 24 201.24.232.0/24 maxlen: 24 201.24.233.0/24 maxlen: 24 201.24.234.0/24 maxlen: 24 201.24.236.0/24 maxlen: 24 201.24.238.0/24 maxlen: 24 201.24.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 11:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:85:d9:fe:e2:34:a6:4d:95:a4:ad:f0:6f:ad:26:ce:33:2b:0c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 19 21:14:44 2026 GMT Not After : Oct 18 21:19:44 2027 GMT Subject: CN=6258998B2F26842A7A1364C2DBFA7FFAFDEF184A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:60:32:13:9b:08:42:10:4e:22:fd:9b:50: f9:de:72:cd:0e:0a:4b:55:9b:c5:97:9b:1e:3f:fc: be:e7:a7:19:8d:51:05:2b:10:5d:6c:81:6d:ab:3a: 4d:d3:72:3b:a0:1f:16:b7:aa:e6:1e:0c:e6:86:b1: 58:c0:7f:d2:95:64:fa:07:a9:a6:6b:5a:35:d8:7f: 1f:ed:62:3a:9c:02:05:e3:a3:30:66:21:4d:68:d5: 3f:86:fd:9f:5b:07:ee:61:df:01:9a:07:2d:54:0c: 2e:a4:51:ab:bc:62:20:75:57:9f:e5:85:f9:e3:e2: 6b:f4:f6:c9:15:31:69:17:85:37:65:31:ef:19:e0: 7c:70:d3:92:3f:10:41:5e:ba:79:bb:cb:5f:d3:47: 1e:f0:06:6f:01:da:b1:ee:27:d9:0e:11:5c:3a:64: 61:0d:02:cb:13:10:99:d1:db:b2:e8:01:59:08:21: d4:c9:99:bb:89:cd:e7:cf:fc:59:e8:8b:31:72:d0: 81:97:a7:f1:7d:ed:bf:69:f9:10:9e:53:e9:48:bc: 1a:84:84:62:9d:27:d9:d7:ba:11:e3:99:0c:e8:f9: 68:00:6f:5a:48:c9:f4:01:6a:0c:b9:5a:c0:ec:d5: 76:0e:64:b9:92:ec:41:d6:b0:3a:c7:e0:03:f9:01: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:58:99:8B:2F:26:84:2A:7A:13:64:C2:DB:FA:7F:FA:FD:EF:18:4A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.228.0/24 201.24.232.0-201.24.234.255 201.24.236.0/24 201.24.238.0/23 Signature Algorithm: sha256WithRSAEncryption a3:35:7d:c5:81:56:18:db:95:64:ba:6d:cf:89:58:0a:5f:9f: 22:d2:de:7e:a1:e0:0e:3e:da:bb:6d:02:02:9a:e9:b9:5e:42: e9:d4:f1:cf:64:28:32:f7:e0:0e:f5:d6:3a:cf:fe:e3:88:2a: 5a:e4:fc:87:ff:92:97:10:dc:86:df:d3:6a:2c:b4:05:e3:44: 57:09:e2:47:37:5b:3b:fd:2a:57:38:07:0d:34:26:1a:f2:80: a7:ae:0f:f9:3c:4a:53:66:1f:b9:bd:53:4b:4b:17:f6:7a:b5: 09:89:05:06:03:22:d9:2d:a6:ca:09:ad:41:61:ad:56:81:77: 9c:3e:90:bc:84:ec:b7:54:3d:02:2e:2f:b4:15:ab:a3:f5:b9: 37:98:54:63:da:13:30:d2:62:7b:2b:43:c3:ce:6f:34:d9:d9: d6:22:02:cc:cc:ee:3c:0d:1a:1c:6a:83:4b:14:40:c6:7a:1a: cf:43:d3:e0:09:7e:1c:65:e8:67:68:33:fc:f6:8f:a1:4e:55: d6:53:61:23:cf:ea:e1:64:4e:09:d0:29:38:36:0b:0f:91:48: 7f:bd:3a:ed:2f:72:ec:25:0f:10:64:78:9f:82:91:66:6f:9d: 1b:fe:f5:2d:03:76:ab:91:01:d4:60:17:d6:26:6d:09:4e:a4: b4:94:b2:84 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUFoXZ/uI0pk2VpK3wb60mzjMrDEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTkyMTE0NDRaFw0yNzEwMTgyMTE5NDRaMDMxMTAvBgNV BAMTKDYyNTg5OThCMkYyNjg0MkE3QTEzNjRDMkRCRkE3RkZBRkRFRjE4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNWAyE5sIQhBOIv2bUPnecs0O CktVm8WXmx4//L7npxmNUQUrEF1sgW2rOk3TcjugHxa3quYeDOaGsVjAf9KVZPoH qaZrWjXYfx/tYjqcAgXjozBmIU1o1T+G/Z9bB+5h3wGaBy1UDC6kUau8YiB1V5/l hfnj4mv09skVMWkXhTdlMe8Z4Hxw05I/EEFeunm7y1/TRx7wBm8B2rHuJ9kOEVw6 ZGENAssTEJnR27LoAVkIIdTJmbuJzefP/FnoizFy0IGXp/F97b9p+RCeU+lIvBqE hGKdJ9nXuhHjmQzo+WgAb1pIyfQBagy5WsDs1XYOZLmS7EHWsDrH4AP5AfmNAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUYliZiy8mhCp6E2TC2/p/+v3vGEowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4NjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMCYE AgABMCADBADJGOQwDAMEA8kY6AMEAMkY6gMEAMkY7AMEAckY7jANBgkqhkiG9w0B AQsFAAOCAQEAozV9xYFWGNuVZLptz4lYCl+fItLefqHgDj7au20CAprpuV5C6dTx z2QoMvfgDvXWOs/+44gqWuT8h/+SlxDcht/Taiy0BeNEVwniRzdbO/0qVzgHDTQm GvKAp64P+TxKU2Yfub1TS0sX9nq1CYkFBgMi2S2mygmtQWGtVoF3nD6QvITst1Q9 Ai4vtBWro/W5N5hUY9oTMNJieytDw85vNNnZ1iICzMzuPA0aHGqDSxRAxnoaz0PT 4Al+HGXoZ2gz/PaPoU5V1lNhI8/q4WROCdApODYLD5FIf7067S9y7CUPEGR4n4KR Zm+dG/71LQN2q5EB1GAX1iZtCU6ktJSyhA== -----END CERTIFICATE-----Generated at Tue Oct 20 04:18:16 2026 by rpki-client