$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152726.roa File: AS152726.roa (raw, json) Hash identifier: eTZaBugppSMY53f5Wg5tIyj8hKTVIy+Lmh67aJA5P9c= Subject key identifier: 31:F0:1A:B7:5C:06:B1:7C:27:7D:10:0E:86:F4:9E:07:21:05:B6:A1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4B291A7EF2614CE1EF2DE82DA93957798AAE7FE0 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152726.roa Signing time: Sun 25 Oct 2026 11:19:56 +0000 ROA not before: Sun 25 Oct 2026 11:14:56 +0000 ROA not after: Sun 24 Oct 2027 11:19:56 +0000 asID: 152726 IP address blocks: 191.45.40.0/24 maxlen: 24 200.149.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:29:1a:7e:f2:61:4c:e1:ef:2d:e8:2d:a9:39:57:79:8a:ae:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 25 11:14:56 2026 GMT Not After : Oct 24 11:19:56 2027 GMT Subject: CN=31F01AB75C06B17C277D100E86F49E072105B6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:fc:ea:3e:20:f8:9b:d7:3e:95:69:7a:fc: 4a:e2:20:9d:64:bd:72:05:d3:cf:4d:89:2b:b3:1f: ec:5e:e2:df:0e:0b:b6:63:4f:94:0a:ba:94:7a:1c: 54:41:92:e9:e7:06:24:22:e8:4a:1e:59:be:76:06: e5:a5:1a:78:07:44:2d:6c:60:f4:47:bb:16:93:04: b8:e4:90:c6:87:08:88:a1:29:50:57:5d:ed:b1:5c: 89:01:ad:25:78:78:cc:55:40:16:f0:33:dd:bc:7b: a6:9d:68:04:55:4a:47:01:e4:ce:b7:4e:17:08:2b: 76:90:40:b5:6a:0e:90:e3:e1:a8:41:d2:bf:f3:51: 31:50:e9:b9:cf:0f:35:01:0b:bd:01:ec:7f:b1:ec: 24:e3:ce:d1:20:7c:ff:0e:fe:55:23:32:4d:93:f7: a3:db:b3:18:72:50:bd:18:7e:a9:81:1b:63:63:c2: ea:a1:d4:98:85:2e:40:be:5b:21:d3:77:32:f6:8f: 47:a7:f2:5f:23:0a:99:27:fe:7a:75:a1:a2:c8:c6: 0e:94:69:dd:65:83:75:00:74:00:49:b4:4f:a3:15: 6b:99:2d:f6:df:47:00:28:f6:9a:20:0d:a9:93:6f: 7e:34:ef:c3:bd:3e:18:e8:fa:69:6b:9c:0a:47:2c: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F0:1A:B7:5C:06:B1:7C:27:7D:10:0E:86:F4:9E:07:21:05:B6:A1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.45.40.0/24 200.149.189.0/24 Signature Algorithm: sha256WithRSAEncryption 67:28:4f:36:4f:72:6f:a3:ea:d2:a1:04:1f:5d:ea:cb:23:60: da:3e:3e:9b:bc:e7:2b:3b:31:fd:31:c5:ce:db:87:ca:75:bf: 59:3e:ca:b4:c4:7b:70:8c:a9:16:9c:40:d3:b7:ac:f5:76:78: ad:97:94:a6:ad:24:df:8f:61:0c:9b:fc:e8:ea:db:ae:90:47: 9f:46:fa:58:75:4d:61:47:45:75:46:47:6d:45:79:d0:2c:0f: 00:49:fe:9a:6f:31:a3:5c:aa:f4:ff:c0:d5:70:7e:d8:49:c9: 6f:63:5d:ef:88:82:9b:e7:ae:18:dc:23:6d:ff:ef:56:8d:20: 0a:3a:45:e1:a0:d0:ab:f6:30:09:bd:e7:18:1d:f5:2f:d9:1a: 85:d5:f7:7b:dc:af:8e:c2:b8:61:59:8d:62:6d:53:66:9b:ee: ab:0e:3d:3b:86:6f:51:bf:bc:dc:b5:e8:d2:ff:56:2e:f2:3e: 5c:e1:02:2f:1c:16:e5:07:3c:63:c8:23:c4:68:49:fc:bc:b7: dd:ce:38:2c:cc:55:d3:77:95:73:d5:96:9f:a8:41:83:6f:a7: 4a:4b:6d:6f:1a:ba:0b:a2:ff:9f:d4:51:2e:6b:28:ae:77:61: ff:35:2e:8f:8a:d3:70:8b:09:a4:5f:8c:17:2d:56:14:c8:9e: b8:50:9b:ef -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUSykafvJhTOHvLegtqTlXeYquf+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjUxMTE0NTZaFw0yNzEwMjQxMTE5NTZaMDMxMTAvBgNV BAMTKDMxRjAxQUI3NUMwNkIxN0MyNzdEMTAwRTg2RjQ5RTA3MjEwNUI2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZxfzqPiD4m9c+lWl6/EriIJ1k vXIF089NiSuzH+xe4t8OC7ZjT5QKupR6HFRBkunnBiQi6EoeWb52BuWlGngHRC1s YPRHuxaTBLjkkMaHCIihKVBXXe2xXIkBrSV4eMxVQBbwM928e6adaARVSkcB5M63 ThcIK3aQQLVqDpDj4ahB0r/zUTFQ6bnPDzUBC70B7H+x7CTjztEgfP8O/lUjMk2T 96PbsxhyUL0YfqmBG2Njwuqh1JiFLkC+WyHTdzL2j0en8l8jCpkn/np1oaLIxg6U ad1lg3UAdABJtE+jFWuZLfbfRwAo9pogDamTb34078O9Phjo+mlrnApHLF9ZAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUMfAat1wGsXwnfRAOhvSeByEFtqEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTI3MjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC/LSgDBADIlb0wDQYJKoZIhvcNAQELBQADggEBAGcoTzZPcm+j6tKh BB9d6ssjYNo+Ppu85ys7Mf0xxc7bh8p1v1k+yrTEe3CMqRacQNO3rPV2eK2XlKat JN+PYQyb/Ojq266QR59G+lh1TWFHRXVGR21FedAsDwBJ/ppvMaNcqvT/wNVwfthJ yW9jXe+IgpvnrhjcI23/71aNIAo6ReGg0Kv2MAm95xgd9S/ZGoXV93vcr47CuGFZ jWJtU2ab7qsOPTuGb1G/vNy16NL/Vi7yPlzhAi8cFuUHPGPII8RoSfy8t93OOCzM VdN3lXPVlp+oQYNvp0pLbW8augui/5/UUS5rKK53Yf81Lo+K03CLCaRfjBctVhTI nrhQm+8= -----END CERTIFICATE-----Generated at Thu Nov 5 13:26:15 2026 by rpki-client