$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214716.roa File: AS214716.roa (raw, json) Hash identifier: nt1VZD8yC4GMYciYkaROKM9FC7Dvn7dffTcW1YeiL+I= Subject key identifier: 9B:56:25:0E:94:27:BA:32:2A:0B:F2:9D:26:F9:1D:0D:BB:3B:0E:A2 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 70625FBB534A22AB0CB3CD038FDB6EA2FCD57F9C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214716.roa Signing time: Fri 02 Oct 2026 19:11:27 +0000 ROA not before: Fri 02 Oct 2026 19:06:27 +0000 ROA not after: Fri 01 Oct 2027 19:11:27 +0000 asID: 214716 IP address blocks: 179.69.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:62:5f:bb:53:4a:22:ab:0c:b3:cd:03:8f:db:6e:a2:fc:d5:7f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 2 19:06:27 2026 GMT Not After : Oct 1 19:11:27 2027 GMT Subject: CN=9B56250E9427BA322A0BF29D26F91D0DBB3B0EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:2f:f7:45:6b:dc:82:68:7f:35:2d:43:ce: cc:4a:7f:4a:87:d2:01:a4:fd:6d:a8:e6:61:e3:bf: 51:8d:b1:78:f5:bc:43:46:53:65:b3:77:ec:32:a9: 9a:56:dc:75:f8:34:c9:dd:30:48:be:5b:8e:d1:df: 4f:6e:01:34:83:f6:dd:dd:ce:13:37:6b:ec:91:61: f4:02:35:a8:04:17:6b:6c:cd:b7:04:45:bd:a9:18: 93:88:6c:f6:b4:1b:a9:38:53:33:8d:da:ec:f6:f6: f3:58:31:24:cd:43:17:8d:ad:41:2e:f8:36:1e:2a: 45:d0:50:51:83:0b:9a:33:6f:d3:28:74:1d:c8:62: 11:d3:47:fa:43:10:1c:46:b4:19:e2:bd:3f:2c:41: e0:ca:71:97:c0:3d:77:75:ef:c9:b6:db:32:85:3b: 65:08:84:29:c2:19:f1:32:c3:cf:75:d2:80:5e:a7: 3f:f5:a4:3a:1f:ad:57:67:2f:0e:43:d3:d9:f6:f2: d8:49:67:fa:4f:5e:e4:9e:53:db:f2:cf:61:3c:cc: 6d:03:83:13:a8:5d:c8:58:b3:87:63:f2:be:5b:07: 53:16:2d:a3:64:f0:7e:68:c6:eb:c7:0a:48:5d:1f: e1:7f:ef:78:86:fc:07:fc:cf:6e:38:bd:cc:5c:82: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:56:25:0E:94:27:BA:32:2A:0B:F2:9D:26:F9:1D:0D:BB:3B:0E:A2 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214716.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.69.68.0/24 Signature Algorithm: sha256WithRSAEncryption 64:c7:67:f5:6a:2f:e0:3d:6c:cd:e8:7e:c9:35:41:71:0e:14: 49:32:5c:2f:12:7d:3c:0b:9d:c1:a5:c4:45:eb:84:20:54:34: 08:db:01:a8:6f:bd:e1:a6:29:03:a9:cd:8f:be:ab:70:2b:38: 4d:30:12:f7:10:65:e5:a7:61:4f:d4:75:c6:a8:a8:53:df:a3: 36:8c:12:67:11:13:96:0f:13:4b:09:0e:7c:87:60:46:db:66: 79:70:6c:61:9e:20:b8:44:9e:36:18:d2:b0:ad:54:93:ed:50: 91:4c:ec:98:6a:aa:84:80:99:50:8e:35:38:14:7f:c7:1f:5a: 09:e4:17:ca:76:52:2e:a6:72:7a:90:a4:5e:53:2f:3a:bf:8c: b7:53:ac:f7:67:d5:91:34:19:ab:1d:f2:68:cb:bb:33:1d:91: 3b:0c:bb:aa:16:88:1b:4b:f1:76:51:bb:e4:88:2d:4a:f3:cb: 20:2a:b5:4e:b2:57:cf:69:73:b3:f4:26:0b:dd:7e:f9:1b:c9: 1c:15:db:8e:3d:1a:15:dc:db:6b:9f:ef:2d:cd:24:75:c9:03: d4:b5:a1:53:71:69:22:cf:db:66:84:67:c8:12:43:80:3f:00: 02:ed:46:5a:61:25:3c:79:57:19:68:31:6a:c4:fc:e5:6e:f7: 70:82:ff:d4 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUcGJfu1NKIqsMs80Dj9tuovzVf5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMDIxOTA2MjdaFw0yNzEwMDExOTExMjdaMDMxMTAvBgNV BAMTKDlCNTYyNTBFOTQyN0JBMzIyQTBCRjI5RDI2RjkxRDBEQkIzQjBFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDehy/3RWvcgmh/NS1DzsxKf0qH 0gGk/W2o5mHjv1GNsXj1vENGU2Wzd+wyqZpW3HX4NMndMEi+W47R309uATSD9t3d zhM3a+yRYfQCNagEF2tszbcERb2pGJOIbPa0G6k4UzON2uz29vNYMSTNQxeNrUEu +DYeKkXQUFGDC5ozb9ModB3IYhHTR/pDEBxGtBnivT8sQeDKcZfAPXd178m22zKF O2UIhCnCGfEyw8910oBepz/1pDofrVdnLw5D09n28thJZ/pPXuSeU9vyz2E8zG0D gxOoXchYs4dj8r5bB1MWLaNk8H5oxuvHCkhdH+F/73iG/Af8z244vcxcgpA/AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUm1YlDpQnujIqC/KdJvkdDbs7DqIwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTQ3MTYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACzRUQwDQYJKoZIhvcNAQELBQADggEBAGTHZ/VqL+A9bM3ofsk1QXEO FEkyXC8SfTwLncGlxEXrhCBUNAjbAahvveGmKQOpzY++q3ArOE0wEvcQZeWnYU/U dcaoqFPfozaMEmcRE5YPE0sJDnyHYEbbZnlwbGGeILhEnjYY0rCtVJPtUJFM7Jhq qoSAmVCONTgUf8cfWgnkF8p2Ui6mcnqQpF5TLzq/jLdTrPdn1ZE0Gasd8mjLuzMd kTsMu6oWiBtL8XZRu+SILUrzyyAqtU6yV89pc7P0JgvdfvkbyRwV2449GhXc22uf 7y3NJHXJA9S1oVNxaSLP22aEZ8gSQ4A/AALtRlphJTx5VxloMWrE/OVu93CC/9Q= -----END CERTIFICATE-----Generated at Tue Oct 20 08:18:02 2026 by rpki-client