$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS17404.roa File: AS17404.roa (raw, json) Hash identifier: 5jJAHCesE14CYcBVDzk2Hm0Ix7r9wGyXpOKRZoMszYc= Subject key identifier: 9C:65:08:BF:89:5D:F3:1C:F1:7C:44:A5:51:A1:65:A2:67:E2:39:35 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1CC2B20BA482604C14E038B802A4DA73F682490B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS17404.roa Signing time: Thu 22 Oct 2026 17:35:12 +0000 ROA not before: Thu 22 Oct 2026 17:30:12 +0000 ROA not after: Thu 21 Oct 2027 17:35:12 +0000 asID: 17404 IP address blocks: 187.55.56.0/22 maxlen: 24 189.12.140.0/22 maxlen: 24 191.0.84.0/22 maxlen: 24 200.149.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c2:b2:0b:a4:82:60:4c:14:e0:38:b8:02:a4:da:73:f6:82:49:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 22 17:30:12 2026 GMT Not After : Oct 21 17:35:12 2027 GMT Subject: CN=9C6508BF895DF31CF17C44A551A165A267E23935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:94:73:71:76:e0:9b:d4:5f:28:ff:2c:6a: 9f:33:d9:03:a9:75:7d:ac:e3:2a:93:dd:c9:01:ab: 35:5e:7b:c1:31:fb:a3:35:50:f4:86:23:14:c9:33: 90:ce:66:b1:9f:55:9e:86:82:4e:98:89:97:31:13: f1:c0:52:c7:e1:eb:b4:2b:a3:27:be:4d:69:68:a6: 86:39:fa:9c:99:73:1e:d6:91:cb:2c:9e:2c:9f:f4: c9:7d:37:2e:7d:74:02:7c:9d:4b:63:2f:09:09:76: ea:a7:38:1a:b0:e3:34:cf:1b:32:b8:f3:82:af:1d: f4:54:91:00:10:ee:d4:41:7f:56:53:42:47:79:ab: 01:d2:19:1a:62:05:dc:86:bb:4c:67:e2:da:15:8e: cd:4d:49:cd:87:d5:ab:bc:e5:ed:a4:31:1f:1c:9e: 18:f9:8a:9e:41:f0:8f:09:3f:0e:9c:67:9c:bc:b7: 50:15:03:33:96:69:5b:f4:d1:6e:34:32:f9:d0:82: 0c:37:e9:a3:9f:0e:9d:90:34:b6:b3:21:42:89:fd: 6f:73:b8:34:1e:d0:02:7b:29:dd:55:ee:e2:64:09: 1f:67:2f:b0:7a:dd:50:76:39:8c:f8:22:7b:a5:e5: 00:61:74:a2:e6:94:72:8e:70:a1:3a:ea:aa:ef:6b: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:65:08:BF:89:5D:F3:1C:F1:7C:44:A5:51:A1:65:A2:67:E2:39:35 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS17404.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.55.56.0/22 189.12.140.0/22 191.0.84.0/22 200.149.176.0/22 Signature Algorithm: sha256WithRSAEncryption a7:c4:d9:60:69:93:60:11:e6:9c:6b:69:21:72:3d:42:16:cf: 25:98:96:b5:8b:b0:0f:d5:ba:5b:d0:30:66:08:b8:19:08:d4: 13:5b:bf:a8:46:bd:cf:bf:c8:cf:0c:69:e2:fe:35:42:db:b0: 38:ac:70:3d:cc:ab:c9:e2:df:b7:a0:5a:45:26:40:97:b1:cf: b0:04:e1:f0:53:28:16:77:6d:e9:75:6c:6b:09:f3:a7:20:89: 78:5c:32:30:cb:c3:cc:e9:1e:83:55:2c:7b:0a:26:13:d0:60: 8e:ed:1e:84:50:c0:41:d2:1c:7c:62:30:0e:9f:b1:ad:d8:53: 11:95:5a:dc:51:80:57:59:a1:17:cb:43:76:46:7d:f6:cc:f2: f0:dd:92:73:b1:26:4f:72:d8:47:e0:ba:e2:b0:49:35:0d:6d: a3:05:88:71:d3:23:f1:dc:00:d0:90:48:2e:3d:3e:f6:ef:c3: 6f:24:98:51:77:c1:0e:d5:d4:60:dc:b8:78:dd:bc:6e:6b:72: 19:17:f7:e3:f0:c7:8d:32:8b:b3:9b:4a:34:64:bb:63:6e:2a: 70:41:14:9a:6a:79:c8:53:b9:dd:32:a2:67:fe:fa:f3:bf:1f: 72:9d:ff:b1:b4:17:12:c2:82:2c:14:35:88:6c:79:07:f2:22: a0:fc:58:c5 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHMKyC6SCYEwU4Di4AqTac/aCSQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjIxNzMwMTJaFw0yNzEwMjExNzM1MTJaMDMxMTAvBgNV BAMTKDlDNjUwOEJGODk1REYzMUNGMTdDNDRBNTUxQTE2NUEyNjdFMjM5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR7ZRzcXbgm9RfKP8sap8z2QOp dX2s4yqT3ckBqzVee8Ex+6M1UPSGIxTJM5DOZrGfVZ6Ggk6YiZcxE/HAUsfh67Qr oye+TWlopoY5+pyZcx7Wkcssniyf9Ml9Ny59dAJ8nUtjLwkJduqnOBqw4zTPGzK4 84KvHfRUkQAQ7tRBf1ZTQkd5qwHSGRpiBdyGu0xn4toVjs1NSc2H1au85e2kMR8c nhj5ip5B8I8JPw6cZ5y8t1AVAzOWaVv00W40MvnQggw36aOfDp2QNLazIUKJ/W9z uDQe0AJ7Kd1V7uJkCR9nL7B63VB2OYz4Inul5QBhdKLmlHKOcKE66qrva1ONAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUnGUIv4ld8xzxfESlUaFlomfiOTUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNzQwNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQC AAEwGAMEArs3OAMEAr0MjAMEAr8AVAMEAsiVsDANBgkqhkiG9w0BAQsFAAOCAQEA p8TZYGmTYBHmnGtpIXI9QhbPJZiWtYuwD9W6W9AwZgi4GQjUE1u/qEa9z7/Izwxp 4v41QtuwOKxwPcyryeLft6BaRSZAl7HPsATh8FMoFndt6XVsawnzpyCJeFwyMMvD zOkeg1UsewomE9Bgju0ehFDAQdIcfGIwDp+xrdhTEZVa3FGAV1mhF8tDdkZ99szy 8N2Sc7EmT3LYR+C64rBJNQ1towWIcdMj8dwA0JBILj0+9u/DbySYUXfBDtXUYNy4 eN28bmtyGRf34/DHjTKLs5tKNGS7Y24qcEEUmmp5yFO53TKiZ/76878fcp3/sbQX EsKCLBQ1iGx5B/IioPxYxQ== -----END CERTIFICATE-----Generated at Thu Nov 5 08:48:49 2026 by rpki-client