$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS136809.roa File: AS136809.roa (raw, json) Hash identifier: 9uwsvLTfqbGfIDNaKoONOJQ1k0/bY1cfu7U9tf1TM4E= Subject key identifier: EF:26:93:EF:11:12:09:09:97:F8:2C:DD:1D:9C:7E:8E:AA:4A:DC:08 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 65BA679A65A5A1B29295939DEADDC93B66617E45 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS136809.roa Signing time: Sun 25 Oct 2026 11:15:37 +0000 ROA not before: Sun 25 Oct 2026 11:10:37 +0000 ROA not after: Sun 24 Oct 2027 11:15:37 +0000 asID: 136809 IP address blocks: 152.234.135.0/24 maxlen: 24 179.69.96.0/24 maxlen: 24 187.15.192.0/24 maxlen: 24 189.31.2.0/24 maxlen: 24 200.180.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 15:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ba:67:9a:65:a5:a1:b2:92:95:93:9d:ea:dd:c9:3b:66:61:7e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 25 11:10:37 2026 GMT Not After : Oct 24 11:15:37 2027 GMT Subject: CN=EF2693EF1112090997F82CDD1D9C7E8EAA4ADC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:97:b0:9e:60:be:e2:41:b3:18:1d:ed:31: f9:b6:af:83:0f:51:cc:bc:3b:3b:86:c0:32:c9:3b: 09:89:3e:2a:ef:5c:46:ce:4b:45:9d:e1:74:19:be: 22:fa:66:c4:6d:43:93:d6:1b:e0:34:0c:04:62:fa: e6:7a:6e:bb:7b:e7:59:03:88:15:68:8d:9b:3b:cf: 21:a5:40:d7:73:79:e1:b1:7f:80:bd:f2:e6:39:c3: 00:12:63:38:d7:e4:0c:29:f3:73:0a:e1:2e:23:8b: 6a:0e:7a:56:b7:fd:a1:ca:cf:ab:bf:76:52:e4:99: ce:73:75:00:11:74:b1:62:cd:bb:03:ef:0a:5f:af: d1:81:84:5c:fe:16:58:04:9c:30:bb:cd:d3:5d:91: 30:24:e1:55:75:15:1d:59:a6:91:56:e0:19:74:f6: 44:d0:70:cd:91:9f:d9:dd:cb:08:7f:a7:c1:93:ef: 96:b6:26:b5:c8:3c:1a:3b:73:9c:87:39:8a:12:4a: c7:61:7d:73:f5:55:8b:49:2a:b5:06:60:2a:a9:32: b9:8e:5b:f2:90:57:27:56:33:3f:8b:f8:a0:20:7b: 83:fc:cf:9f:7b:53:6f:e5:ca:6a:59:48:09:4e:7f: 27:07:e8:2d:e5:e4:b9:b3:31:83:7b:94:24:a6:6d: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:26:93:EF:11:12:09:09:97:F8:2C:DD:1D:9C:7E:8E:AA:4A:DC:08 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS136809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.135.0/24 179.69.96.0/24 187.15.192.0/24 189.31.2.0/24 200.180.180.0/24 Signature Algorithm: sha256WithRSAEncryption 41:69:ad:3e:99:4c:06:6e:6b:32:b7:73:6a:bc:78:84:13:40: a5:06:7a:06:1b:4d:01:33:d2:c4:89:b4:0a:e0:79:41:87:bf: 7f:1c:29:27:95:cb:07:9a:11:e4:56:80:1b:c2:db:3b:ed:21: db:4d:f1:9d:60:db:cf:e2:01:75:35:fb:9d:71:ec:d2:e1:7e: 16:72:35:2e:49:23:e0:5c:06:3c:b1:c8:44:02:75:62:08:b4: e2:d4:bf:d6:d6:ba:4b:e5:78:b0:e3:8f:19:ef:1d:3c:81:22: 52:0d:c6:5c:61:ae:d7:73:75:0f:e7:1a:6b:b3:c7:10:25:6b: ef:47:c9:eb:52:c0:9d:42:46:2b:70:c2:8a:54:29:f0:36:3d: 4d:0d:de:b9:9c:65:b0:e6:81:35:3e:ef:2f:84:af:46:d1:18: 10:ff:9f:7a:1d:ef:31:6c:81:2c:83:b3:e4:40:57:b2:6d:08: 20:a5:14:8b:07:a7:60:32:cf:44:ff:e0:c2:b0:4e:7c:69:34: 6c:e0:48:d7:7e:e1:7a:a0:67:cc:c4:9b:ac:92:a5:57:c2:52: 7f:71:51:d8:e4:ea:be:8b:b9:dc:da:68:a8:d3:cc:15:61:17: e9:a6:73:28:d8:e4:ea:43:8a:ee:8a:a8:e0:07:0f:7f:cd:91: e7:35:4f:8b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUZbpnmmWlobKSlZOd6t3JO2ZhfkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjUxMTEwMzdaFw0yNzEwMjQxMTE1MzdaMDMxMTAvBgNV BAMTKEVGMjY5M0VGMTExMjA5MDk5N0Y4MkNERDFEOUM3RThFQUE0QURDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6pewnmC+4kGzGB3tMfm2r4MP Ucy8OzuGwDLJOwmJPirvXEbOS0Wd4XQZviL6ZsRtQ5PWG+A0DARi+uZ6brt751kD iBVojZs7zyGlQNdzeeGxf4C98uY5wwASYzjX5Awp83MK4S4ji2oOela3/aHKz6u/ dlLkmc5zdQARdLFizbsD7wpfr9GBhFz+FlgEnDC7zdNdkTAk4VV1FR1ZppFW4Bl0 9kTQcM2Rn9ndywh/p8GT75a2JrXIPBo7c5yHOYoSSsdhfXP1VYtJKrUGYCqpMrmO W/KQVydWMz+L+KAge4P8z597U2/lympZSAlOfycH6C3l5LmzMYN7lCSmbRjVAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU7yaT7xESCQmX+CzdHZx+jqpK3AgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxMzY4MDkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBACY6ocDBACzRWADBAC7D8ADBAC9HwIDBADItLQwDQYJKoZIhvcNAQEL BQADggEBAEFprT6ZTAZuazK3c2q8eIQTQKUGegYbTQEz0sSJtArgeUGHv38cKSeV yweaEeRWgBvC2zvtIdtN8Z1g28/iAXU1+51x7NLhfhZyNS5JI+BcBjyxyEQCdWII tOLUv9bWukvleLDjjxnvHTyBIlINxlxhrtdzdQ/nGmuzxxAla+9HyetSwJ1CRitw wopUKfA2PU0N3rmcZbDmgTU+7y+Er0bRGBD/n3od7zFsgSyDs+RAV7JtCCClFIsH p2Ayz0T/4MKwTnxpNGzgSNd+4XqgZ8zEm6ySpVfCUn9xUdjk6r6LudzaaKjTzBVh F+mmcyjY5OpDiu6KqOAHD3/Nkec1T4s= -----END CERTIFICATE-----Generated at Mon Oct 26 05:37:13 2026 by rpki-client