$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152606.roa File: AS152606.roa (raw, json) Hash identifier: c5b40/9yCFu6l5EkBvZJK9Gg5vL6FoY6ir6ArO0Ugqk= Subject key identifier: 26:EE:00:6E:60:7D:2A:A9:FD:88:F8:AB:81:D8:19:3B:63:E0:23:1F Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 70B857C1FE559D664D4AD5A29306921A9CF680CE Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152606.roa Signing time: Sat 31 Oct 2026 17:27:35 +0000 ROA not before: Sat 31 Oct 2026 17:22:35 +0000 ROA not after: Sat 30 Oct 2027 17:27:35 +0000 asID: 152606 IP address blocks: 187.14.128.0/24 maxlen: 24 187.55.0.0/24 maxlen: 24 189.30.67.0/24 maxlen: 24 191.0.90.0/24 maxlen: 24 200.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b8:57:c1:fe:55:9d:66:4d:4a:d5:a2:93:06:92:1a:9c:f6:80:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 31 17:22:35 2026 GMT Not After : Oct 30 17:27:35 2027 GMT Subject: CN=26EE006E607D2AA9FD88F8AB81D8193B63E0231F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:15:4e:b8:25:90:8a:07:56:9d:8d:46:a9:26: f6:b7:a3:a0:91:4a:4a:5f:c5:58:a9:c6:4e:f0:4e: 5b:24:45:e0:e8:db:66:c7:99:60:91:52:5c:8c:63: 3c:3d:33:23:7c:d4:6b:98:8b:9b:38:c0:06:aa:7d: 41:7b:03:20:ba:b7:1c:21:c0:5f:79:ea:b0:32:b4: 6d:2f:b1:ac:e2:c6:ee:d5:33:48:b9:de:ec:24:28: ae:d8:09:b6:66:2e:9b:d2:ba:ed:c8:2e:f4:e6:5b: 7e:15:32:eb:6d:0d:dc:93:7d:a0:06:82:df:6c:eb: 88:47:61:a0:d1:47:6f:d0:13:b7:ce:0e:9b:f2:05: b8:63:c4:2d:1f:19:34:03:12:3e:5f:96:1d:9f:51: dc:f3:ef:ce:15:91:ff:82:4e:0c:66:34:fc:5e:bb: e3:35:42:92:b2:b9:8f:61:97:f6:7c:ea:bb:bf:b1: 34:a1:ed:f4:c8:62:74:81:cd:30:55:cf:5b:e2:4e: fe:cb:2b:2f:70:55:7f:6d:07:2f:0f:83:6c:fe:57: 1b:39:9f:ff:30:fd:b5:95:36:68:1f:d0:27:76:3e: 7c:09:19:27:20:a0:2b:8b:89:da:7e:7e:53:66:a2: 9b:98:20:44:2d:9b:80:bf:29:de:4f:99:b9:87:64: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EE:00:6E:60:7D:2A:A9:FD:88:F8:AB:81:D8:19:3B:63:E0:23:1F X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152606.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.14.128.0/24 187.55.0.0/24 189.30.67.0/24 191.0.90.0/24 200.138.32.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:f1:f5:56:3d:6b:e5:76:d0:4f:31:1a:2a:94:7f:49:35:65: 97:53:d3:e4:23:82:a5:19:37:a9:a0:6e:17:e2:24:63:ee:c4: ac:63:b6:64:38:4f:88:32:01:d4:13:11:16:d6:a9:07:c0:27: 09:14:e2:0c:18:e2:f3:c8:05:7b:2f:6c:6e:42:09:fa:1d:8c: af:03:99:df:9f:c0:8c:0b:d0:04:e1:96:3c:96:ca:94:c7:d6: 49:fb:0b:f1:1d:84:90:78:2c:6b:2f:b0:86:d6:a7:ce:c4:cc: 2d:e6:bb:38:fc:35:fb:b1:3f:98:e7:c4:fc:85:a4:79:30:09: 0b:db:96:95:66:1f:36:12:82:e4:46:09:01:3e:d8:3f:08:69: 3f:da:97:77:2e:4b:45:f5:45:6c:6a:4e:ca:5b:e6:8e:3e:3d: 19:2b:20:06:75:38:e8:00:d2:a2:d0:8c:dd:ea:8c:aa:a7:5e: d9:d0:c3:36:02:23:be:5b:45:90:30:7a:75:9c:d9:5a:bf:90: a6:6b:2d:20:8a:bb:42:20:4d:18:9e:7d:8f:71:19:24:07:03: 0a:b5:e6:9d:8b:53:bb:de:16:c7:11:75:2f:9f:b7:00:9b:89: 2c:08:c6:09:9f:76:72:ab:22:b1:84:9c:d1:48:73:9a:e8:86: 4b:e7:62:c4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUcLhXwf5VnWZNStWikwaSGpz2gM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMzExNzIyMzVaFw0yNzEwMzAxNzI3MzVaMDMxMTAvBgNV BAMTKDI2RUUwMDZFNjA3RDJBQTlGRDg4RjhBQjgxRDgxOTNCNjNFMDIzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FU64JZCKB1adjUapJva3o6CR SkpfxVipxk7wTlskReDo22bHmWCRUlyMYzw9MyN81GuYi5s4wAaqfUF7AyC6txwh wF956rAytG0vsazixu7VM0i53uwkKK7YCbZmLpvSuu3ILvTmW34VMuttDdyTfaAG gt9s64hHYaDRR2/QE7fODpvyBbhjxC0fGTQDEj5flh2fUdzz784Vkf+CTgxmNPxe u+M1QpKyuY9hl/Z86ru/sTSh7fTIYnSBzTBVz1viTv7LKy9wVX9tBy8Pg2z+Vxs5 n/8w/bWVNmgf0Cd2PnwJGScgoCuLidp+flNmopuYIEQtm4C/Kd5PmbmHZERTAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUJu4AbmB9Kqn9iPirgdgZO2PgIx8wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTI2MDYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBAC7DoADBAC7NwADBAC9HkMDBAC/AFoDBADIiiAwDQYJKoZIhvcNAQEL BQADggEBAH7x9VY9a+V20E8xGiqUf0k1ZZdT0+QjgqUZN6mgbhfiJGPuxKxjtmQ4 T4gyAdQTERbWqQfAJwkU4gwY4vPIBXsvbG5CCfodjK8Dmd+fwIwL0AThljyWypTH 1kn7C/EdhJB4LGsvsIbWp87EzC3muzj8NfuxP5jnxPyFpHkwCQvblpVmHzYSguRG CQE+2D8IaT/al3cuS0X1RWxqTspb5o4+PRkrIAZ1OOgA0qLQjN3qjKqnXtnQwzYC I75bRZAwenWc2Vq/kKZrLSCKu0IgTRiefY9xGSQHAwq15p2LU7veFscRdS+ftwCb iSwIxgmfdnKrIrGEnNFIc5rohkvnYsQ= -----END CERTIFICATE-----Generated at Thu Nov 5 08:50:27 2026 by rpki-client