$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152698.roa File: AS152698.roa (raw, json) Hash identifier: 1MfS9vhewfOZdH0oCl0kBDyS6qgDQhAffgFx+TsKOYU= Subject key identifier: A3:A8:35:3F:2F:DE:6F:24:0E:31:C1:8F:57:96:DC:98:06:8B:09:E6 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 21422F4E16AAC82602915F7B03BEF5C1EEB4B3BA Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152698.roa Signing time: Tue 20 Oct 2026 05:45:34 +0000 ROA not before: Tue 20 Oct 2026 05:40:34 +0000 ROA not after: Tue 19 Oct 2027 05:45:34 +0000 asID: 152698 IP address blocks: 177.201.193.0/24 maxlen: 24 179.253.41.0/24 maxlen: 24 179.254.193.0/24 maxlen: 24 189.30.64.0/24 maxlen: 24 189.73.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:42:2f:4e:16:aa:c8:26:02:91:5f:7b:03:be:f5:c1:ee:b4:b3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 20 05:40:34 2026 GMT Not After : Oct 19 05:45:34 2027 GMT Subject: CN=A3A8353F2FDE6F240E31C18F5796DC98068B09E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:84:6e:67:c6:a2:9e:84:6a:2f:7a:d6:1a:1f: a9:75:c4:40:03:e1:96:8d:60:a6:1e:b9:39:71:fb: 39:45:7f:6d:8a:69:5c:a6:f2:00:e3:4f:13:5d:b4: c3:cf:54:69:18:6c:8d:bd:1e:7d:9b:ba:a1:4e:85: b2:e0:d8:47:46:c7:9c:60:50:f4:69:fa:17:41:00: ca:42:f3:eb:bd:1e:02:db:1f:bc:f3:f1:6b:e5:43: 22:36:88:d1:07:57:15:f2:f1:e9:e1:69:b7:44:42: 3d:57:7e:e5:69:53:f2:a7:c5:b7:9f:55:29:d5:1e: 40:7f:ff:5c:36:7a:ca:fb:a6:b5:6c:45:c5:a4:1e: d9:81:a8:3a:94:3c:21:86:87:e7:b6:5f:14:04:bf: 5e:d4:cd:d8:b3:98:1d:25:b0:68:84:40:40:d5:13: d0:6a:3c:f3:c2:b5:b7:e1:23:25:50:9b:cf:59:94: 7a:cb:87:0e:cc:2f:25:06:cc:04:2b:eb:8d:3c:a5: 13:f6:f6:5d:4b:4c:0a:60:e0:54:12:ce:e0:a3:48: 44:83:e3:1d:04:33:2b:56:55:12:82:47:8c:a3:66: 2b:58:1d:44:0c:87:3c:bf:55:82:22:55:84:b2:35: df:c5:14:bf:da:f3:2b:26:61:60:83:39:c4:2b:60: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:35:3F:2F:DE:6F:24:0E:31:C1:8F:57:96:DC:98:06:8B:09:E6 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.193.0/24 179.253.41.0/24 179.254.193.0/24 189.30.64.0/24 189.73.43.0/24 Signature Algorithm: sha256WithRSAEncryption a3:1c:b8:6d:76:40:b4:b2:e3:2f:5a:f4:4a:cc:04:eb:26:d1: 65:f4:a2:57:85:0e:cc:39:63:4c:89:b9:f9:db:dc:7d:57:d8: 79:a8:db:48:05:9f:5e:09:91:ca:1b:d2:1a:6a:10:c9:c7:f5: 97:8b:16:b8:9d:2b:d6:f7:a2:64:cf:1d:f5:46:db:2f:b0:e2: 67:96:b2:0e:41:61:f4:01:b4:03:89:ad:db:73:42:58:27:d3: 36:42:f9:a5:1d:6c:69:fd:ad:17:f5:4c:ce:ba:2b:42:e4:6d: c4:06:ff:8e:1d:e2:55:c9:16:1c:0f:4e:b8:58:35:27:28:5a: e7:e2:80:0a:c9:de:a4:19:1c:2e:cc:2b:d0:10:34:3f:db:de: 9e:78:09:23:73:94:41:5a:f0:c5:08:1c:2e:f8:bc:82:ee:7a: ab:3c:57:62:ad:0a:da:a6:11:b7:9a:0d:b4:cf:42:0c:ad:ac: 14:70:75:e2:95:da:77:43:c9:d4:92:50:09:b1:ce:9f:f0:d7: 35:b0:be:0a:9a:60:d1:0f:8a:9b:a8:47:79:9d:ef:e8:1e:54: 09:6a:78:69:be:6b:49:a3:b4:f3:65:cd:54:c3:8d:3c:3d:b8: b1:2b:ee:e7:1d:bc:78:62:22:91:93:71:49:ba:76:78:21:8f: ab:f7:a9:9c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIUIvThaqyCYCkV97A771we60s7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjAwNTQwMzRaFw0yNzEwMTkwNTQ1MzRaMDMxMTAvBgNV BAMTKEEzQTgzNTNGMkZERTZGMjQwRTMxQzE4RjU3OTZEQzk4MDY4QjA5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohG5nxqKehGovetYaH6l1xEAD 4ZaNYKYeuTlx+zlFf22KaVym8gDjTxNdtMPPVGkYbI29Hn2buqFOhbLg2EdGx5xg UPRp+hdBAMpC8+u9HgLbH7zz8WvlQyI2iNEHVxXy8enhabdEQj1XfuVpU/Knxbef VSnVHkB//1w2esr7prVsRcWkHtmBqDqUPCGGh+e2XxQEv17UzdizmB0lsGiEQEDV E9BqPPPCtbfhIyVQm89ZlHrLhw7MLyUGzAQr6408pRP29l1LTApg4FQSzuCjSESD 4x0EMytWVRKCR4yjZitYHUQMhzy/VYIiVYSyNd/FFL/a8ysmYWCDOcQrYK9xAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUo6g1Py/ebyQOMcGPV5bcmAaLCeYwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTI2OTgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBACxycEDBACz/SkDBACz/sEDBAC9HkADBAC9SSswDQYJKoZIhvcNAQEL BQADggEBAKMcuG12QLSy4y9a9ErMBOsm0WX0oleFDsw5Y0yJufnb3H1X2Hmo20gF n14Jkcob0hpqEMnH9ZeLFridK9b3omTPHfVG2y+w4meWsg5BYfQBtAOJrdtzQlgn 0zZC+aUdbGn9rRf1TM66K0LkbcQG/44d4lXJFhwPTrhYNScoWufigArJ3qQZHC7M K9AQND/b3p54CSNzlEFa8MUIHC74vILueqs8V2KtCtqmEbeaDbTPQgytrBRwdeKV 2ndDydSSUAmxzp/w1zWwvgqaYNEPipuoR3md7+geVAlqeGm+a0mjtPNlzVTDjTw9 uLEr7ucdvHhiIpGTcUm6dnghj6v3qZw= -----END CERTIFICATE-----Generated at Thu Nov 5 08:49:21 2026 by rpki-client