$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214483.roa File: AS214483.roa (raw, json) Hash identifier: b5TuWnM1BOszwaib9JUiJnBubV947W2/AjLylKr9grE= Subject key identifier: 7C:66:E8:A6:A5:85:54:F1:CC:4B:F3:66:CA:2C:14:8C:BC:FC:6E:D1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 71D3221B391CFB2A3A55C1A8CBA9EB7273955938 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214483.roa Signing time: Mon 19 Oct 2026 21:41:58 +0000 ROA not before: Mon 19 Oct 2026 21:36:58 +0000 ROA not after: Mon 18 Oct 2027 21:41:58 +0000 asID: 214483 IP address blocks: 189.12.131.0/24 maxlen: 24 189.12.146.0/24 maxlen: 24 189.30.101.0/24 maxlen: 24 191.0.88.0/24 maxlen: 24 201.24.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 03:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d3:22:1b:39:1c:fb:2a:3a:55:c1:a8:cb:a9:eb:72:73:95:59:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 19 21:36:58 2026 GMT Not After : Oct 18 21:41:58 2027 GMT Subject: CN=7C66E8A6A58554F1CC4BF366CA2C148CBCFC6ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:81:4e:31:9e:97:08:58:f2:b2:01:a7:9e: ff:7a:56:17:92:cc:15:92:57:5a:08:30:58:8a:47: 35:30:a1:d2:34:93:3c:6e:de:e4:09:e0:a2:3b:d6: 7f:c5:b4:91:62:c3:3e:fb:eb:1a:85:d7:9b:c5:c2: 26:3a:24:6e:a7:f2:c3:55:11:32:67:c0:b1:d9:2f: 50:d6:d5:ff:29:8f:5c:7b:b6:c6:8e:4c:c8:64:54: 13:a2:9d:37:55:07:ac:58:4f:9d:17:57:5a:56:24: a5:cc:b3:6c:a3:5b:c6:a3:78:ac:f8:70:16:19:7d: 4d:8b:0f:96:9c:93:ab:21:94:55:14:39:da:5b:3d: 3c:b0:8a:01:0c:ae:33:f5:06:df:f5:2a:7f:82:89: b6:fd:02:b0:9a:31:43:20:47:e8:74:ec:7d:ed:4d: 0f:2d:d5:5c:93:65:21:bf:dc:4b:39:e8:b9:99:ea: 05:4a:12:e3:2a:0c:30:eb:96:55:47:24:5c:0a:05: 33:d3:ee:37:5e:02:b2:91:f9:30:8e:48:56:f7:ca: 7c:58:3a:66:de:95:0e:b0:b1:8b:e6:cb:29:db:8e: bd:96:3e:d7:95:ba:f2:e0:66:ec:cd:f8:d1:f0:f4: ae:b0:18:51:a6:41:50:42:69:f4:21:cc:16:31:0c: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:66:E8:A6:A5:85:54:F1:CC:4B:F3:66:CA:2C:14:8C:BC:FC:6E:D1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.131.0/24 189.12.146.0/24 189.30.101.0/24 191.0.88.0/24 201.24.226.0/24 Signature Algorithm: sha256WithRSAEncryption 87:ae:7e:ba:38:2c:f7:99:7e:39:1b:a3:b3:67:87:1a:da:f4: db:9b:8e:3f:ff:a2:c2:e9:dd:41:b6:64:53:9f:ba:04:94:cf: 6d:bf:c6:e3:59:e8:84:c9:96:71:e2:0b:22:0d:36:6c:b8:4e: f9:72:d0:74:7e:65:9f:ba:19:66:b1:89:9c:03:85:b7:26:a5: 65:2a:e9:4e:94:95:3a:16:16:6d:3d:52:04:8b:87:c8:c6:d7: e6:fe:85:2d:7f:2f:c9:59:e3:6b:cc:18:2b:98:2c:c1:32:ef: 04:fe:37:50:8a:bf:f6:93:9b:6c:cd:b2:f0:de:f3:2c:1b:a4: fd:98:4a:cb:16:bf:f1:55:fb:37:b1:ae:00:c2:ac:e7:29:35: 13:bc:20:76:30:f0:c8:f5:5b:77:88:cf:f4:15:d7:53:96:a5: 41:13:52:65:fa:78:2a:5a:3b:2e:15:27:ea:83:f3:46:0d:77: 37:a4:09:04:d6:a9:f1:6f:70:98:5a:0f:8d:a6:2b:b3:29:7c: 2a:55:ca:bb:f2:aa:b5:ae:89:68:2f:ec:29:bf:fe:a3:e4:f2: f8:d1:d6:00:2d:35:2e:c3:22:39:e3:ec:72:b6:81:c8:35:89: 0c:0d:16:f7:c0:2e:b0:7c:ad:74:3c:85:4e:99:3c:59:2b:a7: 00:00:32:81 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUcdMiGzkc+yo6VcGoy6nrcnOVWTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTkyMTM2NThaFw0yNzEwMTgyMTQxNThaMDMxMTAvBgNV BAMTKDdDNjZFOEE2QTU4NTU0RjFDQzRCRjM2NkNBMkMxNDhDQkNGQzZFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC134FOMZ6XCFjysgGnnv96VheS zBWSV1oIMFiKRzUwodI0kzxu3uQJ4KI71n/FtJFiwz776xqF15vFwiY6JG6n8sNV ETJnwLHZL1DW1f8pj1x7tsaOTMhkVBOinTdVB6xYT50XV1pWJKXMs2yjW8ajeKz4 cBYZfU2LD5ack6shlFUUOdpbPTywigEMrjP1Bt/1Kn+Cibb9ArCaMUMgR+h07H3t TQ8t1VyTZSG/3Es56LmZ6gVKEuMqDDDrllVHJFwKBTPT7jdeArKR+TCOSFb3ynxY OmbelQ6wsYvmyynbjr2WPteVuvLgZuzN+NHw9K6wGFGmQVBCafQhzBYxDGUjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUfGbopqWFVPHMS/NmyiwUjLz8btEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTQ0ODMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBAC9DIMDBAC9DJIDBAC9HmUDBAC/AFgDBADJGOIwDQYJKoZIhvcNAQEL BQADggEBAIeufro4LPeZfjkbo7Nnhxra9Nubjj//osLp3UG2ZFOfugSUz22/xuNZ 6ITJlnHiCyINNmy4Tvly0HR+ZZ+6GWaxiZwDhbcmpWUq6U6UlToWFm09UgSLh8jG 1+b+hS1/L8lZ42vMGCuYLMEy7wT+N1CKv/aTm2zNsvDe8ywbpP2YSssWv/FV+zex rgDCrOcpNRO8IHYw8Mj1W3eIz/QV11OWpUETUmX6eCpaOy4VJ+qD80YNdzekCQTW qfFvcJhaD42mK7MpfCpVyrvyqrWuiWgv7Cm//qPk8vjR1gAtNS7DIjnj7HK2gcg1 iQwNFvfALrB8rXQ8hU6ZPFkrpwAAMoE= -----END CERTIFICATE-----Generated at Mon Oct 26 20:47:25 2026 by rpki-client