$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS203156.roa File: AS203156.roa (raw, json) Hash identifier: BAP1HBP/kWKFgW5ydFgFrdRyPlyh0Vi2uOn7NIbH88A= Subject key identifier: D5:D0:C1:DE:28:DB:BE:FC:51:02:72:AA:46:94:35:4A:D0:73:39:F1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0230B23025B51B50EC1FF7C2D4BF768522AD7AE4 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS203156.roa Signing time: Tue 27 Oct 2026 19:05:50 +0000 ROA not before: Tue 27 Oct 2026 19:00:50 +0000 ROA not after: Tue 26 Oct 2027 19:05:50 +0000 asID: 203156 IP address blocks: 187.14.156.0/22 maxlen: 24 189.12.152.0/22 maxlen: 24 200.138.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:30:b2:30:25:b5:1b:50:ec:1f:f7:c2:d4:bf:76:85:22:ad:7a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 27 19:00:50 2026 GMT Not After : Oct 26 19:05:50 2027 GMT Subject: CN=D5D0C1DE28DBBEFC510272AA4694354AD07339F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f0:01:a1:f8:27:e5:82:8b:f3:a7:17:01:07: 83:82:5a:39:46:9c:68:e5:81:76:c8:86:18:8f:a4: 59:99:61:ed:53:8a:d3:01:de:e5:3b:22:63:32:25: 26:ea:34:fe:80:b1:fc:eb:31:20:4e:18:6e:24:fd: 66:c8:74:a7:a7:26:d1:61:99:16:95:08:82:4f:77: c8:d6:5e:0e:eb:d4:0c:a1:a4:71:62:7a:a0:4a:42: e4:d5:8c:df:46:19:db:b9:18:31:45:1a:75:23:1a: fb:48:21:4c:ab:cc:aa:7d:05:68:61:44:67:86:af: 4f:d8:cc:29:b7:26:2b:f3:04:73:d4:71:5b:b0:eb: 80:fa:69:90:47:b3:5f:c1:04:c4:c8:82:96:7c:8f: 79:1b:a0:74:13:1f:25:a6:b0:6b:78:18:f2:a1:df: 38:b6:0d:95:cf:89:e3:fd:e6:3d:ed:a3:cd:61:ed: 9e:95:8a:29:44:d5:26:92:04:ae:9b:da:b1:23:b6: 09:43:5f:25:90:e6:02:54:2b:f5:03:ad:1e:3f:df: 48:e7:73:09:8e:88:a7:9a:fc:6b:6e:40:18:6b:68: 42:c7:08:04:29:20:14:da:4d:fe:89:71:50:df:cb: 2a:ff:bf:30:2a:ee:51:19:f9:df:a9:71:f7:ab:17: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D0:C1:DE:28:DB:BE:FC:51:02:72:AA:46:94:35:4A:D0:73:39:F1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS203156.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.14.156.0/22 189.12.152.0/22 200.138.20.0/22 Signature Algorithm: sha256WithRSAEncryption 36:23:3b:a8:b5:76:ef:87:ef:47:22:73:ea:6a:46:d2:f2:39: 22:44:a8:26:4e:fc:96:24:da:39:01:72:97:c2:58:58:1a:5d: 31:83:04:52:ee:d6:c4:54:6b:29:34:ec:87:78:75:ce:79:96: 7c:c6:ae:0f:17:35:85:9f:cf:2a:c7:3a:a0:6d:75:fb:4c:bd: d5:ca:75:02:f2:b4:ec:b2:cc:66:9d:fb:49:1b:db:0b:95:90: e8:21:8a:ef:27:4e:7e:c3:f7:0c:91:35:fd:c2:ef:cc:e2:ec: 76:82:b9:05:fa:db:76:82:27:71:fd:fd:1d:fe:f8:10:96:15: dc:2f:4c:84:50:43:35:23:31:19:c6:89:81:eb:48:6d:c9:6c: 8f:57:21:a3:82:3a:54:b0:39:4e:f3:71:d5:a4:3f:ea:cd:d9: dc:0d:41:3b:51:e5:53:c2:bb:c9:c3:13:43:e7:1f:ab:e1:0c: d3:38:f9:c5:7a:b0:ea:a1:f4:ed:b6:33:49:14:fb:7e:b9:10: 09:b9:c3:dc:74:ff:ed:d6:00:9a:9e:f2:c2:ab:d1:22:6a:22: 35:50:33:fd:96:97:ab:13:95:eb:d6:be:bd:6c:30:5f:fd:9c: 05:c5:2a:09:6b:0d:0b:f7:b0:54:1c:83:f8:2d:82:8b:85:5b: db:5d:97:04 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUAjCyMCW1G1DsH/fC1L92hSKteuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjcxOTAwNTBaFw0yNzEwMjYxOTA1NTBaMDMxMTAvBgNV BAMTKEQ1RDBDMURFMjhEQkJFRkM1MTAyNzJBQTQ2OTQzNTRBRDA3MzM5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT8AGh+CflgovzpxcBB4OCWjlG nGjlgXbIhhiPpFmZYe1TitMB3uU7ImMyJSbqNP6AsfzrMSBOGG4k/WbIdKenJtFh mRaVCIJPd8jWXg7r1AyhpHFieqBKQuTVjN9GGdu5GDFFGnUjGvtIIUyrzKp9BWhh RGeGr0/YzCm3JivzBHPUcVuw64D6aZBHs1/BBMTIgpZ8j3kboHQTHyWmsGt4GPKh 3zi2DZXPieP95j3to81h7Z6ViilE1SaSBK6b2rEjtglDXyWQ5gJUK/UDrR4/30jn cwmOiKea/GtuQBhraELHCAQpIBTaTf6JcVDfyyr/vzAq7lEZ+d+pcferFyftAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU1dDB3ijbvvxRAnKqRpQ1StBzOfEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMDMxNTYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAK7DpwDBAK9DJgDBALIihQwDQYJKoZIhvcNAQELBQADggEBADYjO6i1 du+H70cic+pqRtLyOSJEqCZO/JYk2jkBcpfCWFgaXTGDBFLu1sRUayk07Id4dc55 lnzGrg8XNYWfzyrHOqBtdftMvdXKdQLytOyyzGad+0kb2wuVkOghiu8nTn7D9wyR Nf3C78zi7HaCuQX623aCJ3H9/R3++BCWFdwvTIRQQzUjMRnGiYHrSG3JbI9XIaOC OlSwOU7zcdWkP+rN2dwNQTtR5VPCu8nDE0PnH6vhDNM4+cV6sOqh9O22M0kU+365 EAm5w9x0/+3WAJqe8sKr0SJqIjVQM/2Wl6sTlevWvr1sMF/9nAXFKglrDQv3sFQc g/gtgouFW9tdlwQ= -----END CERTIFICATE-----Generated at Thu Nov 5 08:54:07 2026 by rpki-client