$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS134494.roa File: AS134494.roa (raw, json) Hash identifier: E1VVO8MD7rmAODgWtgcDnLFvI+ZaxTuW88vAsfmg69E= Subject key identifier: 71:76:7E:6F:76:84:7C:56:37:14:47:56:9B:9C:5D:D6:C9:F5:41:E5 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2628174F4E89EA408A028B1D14E62D40F875424C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS134494.roa Signing time: Mon 02 Nov 2026 15:29:04 +0000 ROA not before: Mon 02 Nov 2026 15:24:04 +0000 ROA not after: Mon 01 Nov 2027 15:29:04 +0000 asID: 134494 IP address blocks: 152.234.128.0/24 maxlen: 24 177.201.209.0/24 maxlen: 24 179.69.98.0/24 maxlen: 24 179.253.32.0/24 maxlen: 24 179.254.192.0/24 maxlen: 24 187.14.129.0/24 maxlen: 24 187.15.194.0/24 maxlen: 24 187.55.1.0/24 maxlen: 24 189.12.132.0/24 maxlen: 24 189.31.0.0/24 maxlen: 24 189.31.16.0/24 maxlen: 24 200.138.33.0/24 maxlen: 24 200.180.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:28:17:4f:4e:89:ea:40:8a:02:8b:1d:14:e6:2d:40:f8:75:42:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 2 15:24:04 2026 GMT Not After : Nov 1 15:29:04 2027 GMT Subject: CN=71767E6F76847C56371447569B9C5DD6C9F541E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:4b:5e:8c:dc:bb:16:c1:8b:2b:59:60:75: fb:3b:c3:44:b5:0f:36:7f:15:c8:ae:bb:e5:c3:56: 36:6d:52:44:ee:27:16:53:69:f4:7b:b3:b4:00:32: e7:4c:29:6a:b8:4d:c2:65:0c:72:78:ef:8f:80:c7: 9a:c4:43:99:d0:14:f7:48:ed:71:9b:c2:f1:d1:6e: 7a:c4:32:05:9f:df:02:0b:25:a8:85:1c:1b:35:d5: 5f:60:7f:26:e3:df:2e:78:5d:42:49:77:95:b1:63: 7e:0a:a0:f4:14:87:38:9c:cc:b1:9d:57:61:9d:5b: a3:41:2e:a6:a0:06:56:b9:10:38:87:b8:63:6b:52: 53:7b:e3:fa:43:6b:da:60:b4:50:69:81:4d:c1:cb: a7:87:d8:4a:4b:e9:cc:6c:03:be:12:37:6c:5e:c0: 90:a2:fa:8c:a0:ac:f9:93:64:34:c9:4b:a6:53:43: 7a:d0:84:a5:cc:55:7e:65:e5:4e:a3:ab:21:a9:d3: a5:26:82:8d:9a:d5:d6:c7:1a:75:35:4e:6f:b8:c5: 76:e1:ad:e7:d9:69:87:df:e1:1e:0f:dc:c9:1f:e4: 45:e1:28:d0:44:01:9e:f0:3d:3a:30:0c:08:3f:cd: b3:5f:ae:ac:34:4e:f7:20:9b:10:00:e8:c3:12:2b: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:7E:6F:76:84:7C:56:37:14:47:56:9B:9C:5D:D6:C9:F5:41:E5 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS134494.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.128.0/24 177.201.209.0/24 179.69.98.0/24 179.253.32.0/24 179.254.192.0/24 187.14.129.0/24 187.15.194.0/24 187.55.1.0/24 189.12.132.0/24 189.31.0.0/24 189.31.16.0/24 200.138.33.0/24 200.180.177.0/24 Signature Algorithm: sha256WithRSAEncryption b2:36:ae:64:7d:a6:d3:f6:ba:df:de:9e:21:1d:00:2e:e3:ff: f4:74:d9:39:77:ea:cc:3c:27:61:d4:28:c2:a9:5c:52:ce:67: 2b:48:54:d5:67:cd:a9:c9:5b:26:63:94:dd:3c:7b:39:f8:7e: 44:2b:53:c3:a8:4b:55:a3:7f:af:57:94:81:a6:7f:e0:72:12: a8:b3:67:e3:57:32:6c:00:9c:7b:7b:f5:c2:0c:f7:c7:72:7d: e9:c7:4d:b5:02:41:ce:a7:54:41:10:c4:57:3c:52:38:c4:de: 9e:e9:f7:de:42:8d:6d:33:c5:91:da:47:c5:8e:7d:14:07:57: 56:50:7a:7b:1d:a0:b4:35:b4:d3:3e:aa:70:9a:70:26:d5:46: 86:ce:af:7f:3b:ee:fb:37:44:d0:31:78:8c:1f:42:35:2d:2e: 3a:ed:d4:29:d4:79:38:37:6a:b9:71:29:cf:93:95:99:2d:e7: 7f:e4:3e:16:d7:94:8a:13:fd:12:51:f3:e5:f9:f3:ce:49:96: 1e:1f:1b:70:c4:63:17:a3:71:f9:a8:19:f9:f6:c9:a1:a0:c2: fd:2e:f5:30:e3:a2:df:e7:ab:13:95:e1:68:61:5b:fa:1e:28: c5:71:d0:2d:2c:13:30:c6:59:2f:8b:b9:af:4f:49:73:b2:eb: aa:50:5c:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUJigXT06J6kCKAosdFOYtQPh1QkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDIxNTI0MDRaFw0yNzExMDExNTI5MDRaMDMxMTAvBgNV BAMTKDcxNzY3RTZGNzY4NDdDNTYzNzE0NDc1NjlCOUM1REQ2QzlGNTQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgEtejNy7FsGLK1lgdfs7w0S1 DzZ/Fciuu+XDVjZtUkTuJxZTafR7s7QAMudMKWq4TcJlDHJ474+Ax5rEQ5nQFPdI 7XGbwvHRbnrEMgWf3wILJaiFHBs11V9gfybj3y54XUJJd5WxY34KoPQUhziczLGd V2GdW6NBLqagBla5EDiHuGNrUlN74/pDa9pgtFBpgU3By6eH2EpL6cxsA74SN2xe wJCi+oygrPmTZDTJS6ZTQ3rQhKXMVX5l5U6jqyGp06Umgo2a1dbHGnU1Tm+4xXbh refZaYff4R4P3Mkf5EXhKNBEAZ7wPTowDAg/zbNfrqw0TvcgmxAA6MMSKyFXAgMB AAGjggKNMIICiTAdBgNVHQ4EFgQUcXZ+b3aEfFY3FEdWm5xd1sn1QeUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxMzQ0OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQE AgABME4DBACY6oADBACxydEDBACzRWIDBACz/SADBACz/sADBAC7DoEDBAC7D8ID BAC7NwEDBAC9DIQDBAC9HwADBAC9HxADBADIiiEDBADItLEwDQYJKoZIhvcNAQEL BQADggEBALI2rmR9ptP2ut/eniEdAC7j//R02Tl36sw8J2HUKMKpXFLOZytIVNVn zanJWyZjlN08ezn4fkQrU8OoS1Wjf69XlIGmf+ByEqizZ+NXMmwAnHt79cIM98dy fenHTbUCQc6nVEEQxFc8UjjE3p7p995CjW0zxZHaR8WOfRQHV1ZQensdoLQ1tNM+ qnCacCbVRobOr3877vs3RNAxeIwfQjUtLjrt1CnUeTg3arlxKc+TlZkt53/kPhbX lIoT/RJR8+X5885Jlh4fG3DEYxejcfmoGfn2yaGgwv0u9TDjot/nqxOV4WhhW/oe KMVx0C0sEzDGWS+Lua9PSXOy66pQXJ4= -----END CERTIFICATE-----Generated at Thu Nov 5 16:44:03 2026 by rpki-client