$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS13335.roa File: AS13335.roa (raw, json) Hash identifier: KtFEDEGPyKAYq//O5Px9Bd9PvLOkmT4efZ8E3NeJOD8= Subject key identifier: 13:78:70:AF:49:F5:73:45:87:F1:70:50:76:77:63:B6:FE:4F:7C:4F Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6C50F892017D6C959052BCE5B87FA222CDF9FE3A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS13335.roa Signing time: Wed 14 Oct 2026 09:49:02 +0000 ROA not before: Wed 14 Oct 2026 09:44:02 +0000 ROA not after: Wed 13 Oct 2027 09:49:02 +0000 asID: 13335 IP address blocks: 152.234.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 02:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:50:f8:92:01:7d:6c:95:90:52:bc:e5:b8:7f:a2:22:cd:f9:fe:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 14 09:44:02 2026 GMT Not After : Oct 13 09:49:02 2027 GMT Subject: CN=137870AF49F5734587F17050767763B6FE4F7C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:79:76:3d:78:90:0d:a8:54:86:71:53:82: a3:91:9a:47:0c:b0:7b:85:ef:5c:4f:63:81:e2:1f: a4:af:12:3f:20:2f:2e:f5:fe:15:37:e8:2f:6b:3b: e8:3b:26:ad:d0:1e:93:db:cf:50:2f:9a:83:50:17: 17:cf:b8:dc:56:e5:6a:56:21:06:b3:89:0c:ed:1a: 40:79:80:1e:44:d6:7b:a6:78:da:e8:1c:54:c3:35: 5f:4b:b2:f2:a1:71:a1:16:31:e3:32:e5:b2:ac:8e: 85:2c:ce:fa:4c:55:83:43:9e:71:66:9a:fd:b1:c4: 37:db:d6:fc:69:1f:f2:0f:45:f5:3a:5f:46:ac:8f: 04:1f:63:40:d1:39:15:c8:49:d5:10:e0:2c:fe:0c: b4:35:d2:28:99:7a:56:a0:e2:b7:6d:7a:cf:f9:25: 4c:8a:40:4d:eb:93:23:89:fc:0a:c1:2c:06:e3:54: 50:c9:9d:b5:43:57:a6:11:28:df:da:49:c9:39:62: 05:f3:2b:0e:e3:70:63:a1:ad:ee:df:9a:18:37:2b: f4:45:5c:26:83:79:09:27:7c:dd:7e:59:9e:d9:9c: 70:6a:f6:e4:5b:1f:88:8e:d5:f4:a9:64:aa:30:b3: 3b:f2:e4:a3:45:f8:10:50:69:28:de:ac:db:f9:8e: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:78:70:AF:49:F5:73:45:87:F1:70:50:76:77:63:B6:FE:4F:7C:4F X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS13335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.139.0/24 Signature Algorithm: sha256WithRSAEncryption 32:b3:cc:03:d4:b6:06:14:50:19:f7:8a:29:fc:39:76:ca:aa: ea:29:2d:a7:bb:2c:ff:10:55:0f:f7:09:56:87:19:b3:f0:f3: 2f:75:e9:f3:66:5a:c4:12:af:c5:c9:93:ea:7c:6f:fa:22:e0: 3d:21:5b:aa:b3:3d:d7:d0:a1:a4:75:ca:22:06:43:83:c2:1f: d2:5d:41:fc:53:59:fa:89:2f:f1:19:13:8e:ba:79:42:77:0a: 2e:b1:b6:4c:e9:56:75:30:08:9f:49:f0:31:fe:fb:0e:54:cd: 0c:de:64:3c:cd:a8:69:ac:a9:4a:f3:41:3b:37:46:fc:cd:e7: f6:d5:5b:66:bf:0b:ed:0f:73:f5:b6:4d:40:e5:86:a1:97:a2: 04:eb:70:ac:99:37:16:40:55:5a:37:a6:8d:95:61:69:2f:f5: cb:af:36:6f:39:5a:44:36:bc:38:45:a6:14:1b:b0:ec:98:21: 6e:58:59:a0:35:17:00:cb:ec:0b:e9:0f:7a:c0:14:d4:2e:59: cc:e9:cc:bd:5a:a8:57:02:5d:28:b7:15:f0:b9:e4:44:b3:3a: 85:43:ef:ad:e8:c5:26:85:6a:1d:61:3b:2d:ce:c3:75:8e:b1: b2:2d:c9:46:79:56:80:7a:c2:32:5c:70:e5:b3:0b:5c:b8:2f: 5e:8d:c2:cc -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbFD4kgF9bJWQUrzluH+iIs35/jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTQwOTQ0MDJaFw0yNzEwMTMwOTQ5MDJaMDMxMTAvBgNV BAMTKDEzNzg3MEFGNDlGNTczNDU4N0YxNzA1MDc2Nzc2M0I2RkU0RjdDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nXl2PXiQDahUhnFTgqORmkcM sHuF71xPY4HiH6SvEj8gLy71/hU36C9rO+g7Jq3QHpPbz1AvmoNQFxfPuNxW5WpW IQaziQztGkB5gB5E1numeNroHFTDNV9LsvKhcaEWMeMy5bKsjoUszvpMVYNDnnFm mv2xxDfb1vxpH/IPRfU6X0asjwQfY0DRORXISdUQ4Cz+DLQ10iiZelag4rdtes/5 JUyKQE3rkyOJ/ArBLAbjVFDJnbVDV6YRKN/aSck5YgXzKw7jcGOhre7fmhg3K/RF XCaDeQknfN1+WZ7ZnHBq9uRbH4iO1fSpZKowszvy5KNF+BBQaSjerNv5jg+PAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUE3hwr0n1c0WH8XBQdndjtv5PfE8wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxMzMzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAJjqizANBgkqhkiG9w0BAQsFAAOCAQEAMrPMA9S2BhRQGfeKKfw5dsqq 6iktp7ss/xBVD/cJVocZs/DzL3Xp82ZaxBKvxcmT6nxv+iLgPSFbqrM919ChpHXK IgZDg8If0l1B/FNZ+okv8RkTjrp5QncKLrG2TOlWdTAIn0nwMf77DlTNDN5kPM2o aaypSvNBOzdG/M3n9tVbZr8L7Q9z9bZNQOWGoZeiBOtwrJk3FkBVWjemjZVhaS/1 y682bzlaRDa8OEWmFBuw7JghblhZoDUXAMvsC+kPesAU1C5ZzOnMvVqoVwJdKLcV 8LnkRLM6hUPvrejFJoVqHWE7Lc7DdY6xsi3JRnlWgHrCMlxw5bMLXLgvXo3CzA== -----END CERTIFICATE-----Generated at Sat Oct 17 13:37:10 2026 by rpki-client