$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa File: AS402899.roa (raw, json) Hash identifier: ECH2Nq1Tt9jPEbNoTcDGem59y5BbUbcoqIOBlnnbP1I= Subject key identifier: 2E:E1:AF:D1:B2:5A:AA:71:C9:81:E4:D9:C1:4E:EC:63:4D:12:FB:25 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0664FB10906491B383A094222BF520495E5FA3E2 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa Signing time: Tue 13 Oct 2026 17:06:13 +0000 ROA not before: Tue 13 Oct 2026 17:01:13 +0000 ROA not after: Tue 12 Oct 2027 17:06:13 +0000 asID: 402899 IP address blocks: 187.14.150.0/24 maxlen: 24 187.14.155.0/24 maxlen: 24 187.14.160.0/24 maxlen: 24 187.15.224.0/24 maxlen: 24 187.15.238.0/24 maxlen: 24 187.15.250.0/24 maxlen: 24 187.55.29.0/24 maxlen: 24 200.138.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:64:fb:10:90:64:91:b3:83:a0:94:22:2b:f5:20:49:5e:5f:a3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 13 17:01:13 2026 GMT Not After : Oct 12 17:06:13 2027 GMT Subject: CN=2EE1AFD1B25AAA71C981E4D9C14EEC634D12FB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:0a:cf:6c:32:a9:26:d7:84:35:78:27:1c: 03:fc:f2:99:1d:1e:cb:c7:e0:de:e8:4a:a3:a8:3a: 47:b2:3e:2d:e3:64:c7:8a:bc:ae:e8:a0:f3:06:7d: 5a:7e:d8:21:f6:71:1c:19:36:e0:6e:cd:f5:25:cf: c4:c9:4d:8b:c6:09:bc:2a:4e:a7:e7:85:5a:65:0f: 6b:80:24:d7:11:32:3a:ad:a0:d2:5b:ed:a2:1e:22: 62:2d:b2:fc:d3:86:2d:2f:3d:c4:e1:f5:97:55:dc: 20:6d:a4:03:85:5d:88:8f:1a:c8:b5:bd:99:fa:a0: 72:da:a2:4a:a8:71:05:7a:b6:96:c8:29:12:15:0e: e1:bf:98:3c:af:ee:ac:fb:58:3b:ed:88:58:e7:00: 90:c3:a6:d4:13:f4:ec:ba:82:c8:30:a3:b0:c5:a3: 62:60:d7:2a:38:5c:87:a7:b8:ff:74:42:70:81:0f: c9:f2:9e:be:40:d3:54:37:20:72:46:27:fd:f4:cd: 6c:de:15:d3:e3:60:50:15:b9:72:c1:db:53:bc:6d: 5b:b5:f5:83:ee:0d:db:b0:55:1d:81:c3:2a:14:0d: 16:a2:52:78:38:bc:56:b3:fa:17:f1:69:98:fd:41: 30:8e:71:fe:de:7d:94:35:b3:be:5d:ef:d4:d3:26: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:AF:D1:B2:5A:AA:71:C9:81:E4:D9:C1:4E:EC:63:4D:12:FB:25 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.14.150.0/24 187.14.155.0/24 187.14.160.0/24 187.15.224.0/24 187.15.238.0/24 187.15.250.0/24 187.55.29.0/24 200.138.36.0/24 Signature Algorithm: sha256WithRSAEncryption 22:df:31:35:c1:90:71:9c:6b:48:3f:07:40:86:bf:67:a4:e9: 32:a7:47:68:f9:30:74:a1:c7:83:37:78:df:f3:20:03:2b:d1: d6:57:b5:83:de:2a:9b:19:99:c8:d9:fc:b9:33:0a:6e:1b:94: f4:0c:96:5d:d6:9a:99:e7:7d:c1:b4:57:8d:72:ba:fb:3b:89: ee:54:28:88:6d:47:6d:d2:04:9d:00:37:e0:38:c0:99:cd:29: 75:c5:a6:13:70:4d:05:e4:8f:04:6e:18:19:19:22:11:60:31: a7:e4:ab:75:2b:79:c6:57:b0:da:e0:a1:7e:f0:9d:d0:0e:cb: a6:11:31:d4:75:1f:86:b9:0b:32:c9:96:e6:86:2b:6a:3f:8a: c8:d3:31:e5:c5:26:29:f9:de:21:03:23:ee:9d:7f:f9:06:54: 81:f5:28:26:10:89:40:bc:e7:27:a8:7d:8a:b1:e9:2c:92:c8: 06:5d:03:32:9c:b6:b2:64:b9:3a:e6:5f:e4:5e:e6:f9:b3:e5: 53:ad:b9:4d:3c:f9:09:a0:79:f8:77:46:ed:bb:1f:0b:68:4c: cf:38:35:f8:35:f1:ff:8d:f4:d5:de:c3:84:fb:a4:0f:53:db: 2a:08:a2:96:c3:3c:d4:6a:e0:6a:59:32:b4:c2:40:49:89:02: 94:22:0a:4e -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUBmT7EJBkkbODoJQiK/UgSV5fo+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTMxNzAxMTNaFw0yNzEwMTIxNzA2MTNaMDMxMTAvBgNV BAMTKDJFRTFBRkQxQjI1QUFBNzFDOTgxRTREOUMxNEVFQzYzNEQxMkZCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjwrPbDKpJteENXgnHAP88pkd HsvH4N7oSqOoOkeyPi3jZMeKvK7ooPMGfVp+2CH2cRwZNuBuzfUlz8TJTYvGCbwq TqfnhVplD2uAJNcRMjqtoNJb7aIeImItsvzThi0vPcTh9ZdV3CBtpAOFXYiPGsi1 vZn6oHLaokqocQV6tpbIKRIVDuG/mDyv7qz7WDvtiFjnAJDDptQT9Oy6gsgwo7DF o2Jg1yo4XIenuP90QnCBD8nynr5A01Q3IHJGJ/30zWzeFdPjYFAVuXLB21O8bVu1 9YPuDduwVR2BwyoUDRaiUng4vFaz+hfxaZj9QTCOcf7efZQ1s75d79TTJrCPAgMB AAGjggJvMIICazAdBgNVHQ4EFgQULuGv0bJaqnHJgeTZwU7sY00S+yUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4OTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYE AgABMDADBAC7DpYDBAC7DpsDBAC7DqADBAC7D+ADBAC7D+4DBAC7D/oDBAC7Nx0D BADIiiQwDQYJKoZIhvcNAQELBQADggEBACLfMTXBkHGca0g/B0CGv2ek6TKnR2j5 MHShx4M3eN/zIAMr0dZXtYPeKpsZmcjZ/LkzCm4blPQMll3WmpnnfcG0V41yuvs7 ie5UKIhtR23SBJ0AN+A4wJnNKXXFphNwTQXkjwRuGBkZIhFgMafkq3UrecZXsNrg oX7wndAOy6YRMdR1H4a5CzLJluaGK2o/isjTMeXFJin53iEDI+6df/kGVIH1KCYQ iUC85yeofYqx6SySyAZdAzKctrJkuTrmX+Re5vmz5VOtuU08+Qmgefh3Ru27Hwto TM84Nfg18f+N9NXew4T7pA9T2yoIopbDPNRq4GpZMrTCQEmJApQiCk4= -----END CERTIFICATE-----Generated at Tue Oct 20 11:14:22 2026 by rpki-client