$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215197.roa File: AS215197.roa (raw, json) Hash identifier: 6ODwCLVlchTTjaCXM7rfFluD5fVJ9X33dpOAnJlPuOg= Subject key identifier: 7A:19:43:D6:05:0C:A2:91:34:5C:DA:63:D7:7A:6D:54:AB:8C:1E:8C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 683F150B30E809518D232623E50413C4BC1247F0 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215197.roa Signing time: Sun 01 Nov 2026 19:37:33 +0000 ROA not before: Sun 01 Nov 2026 19:32:33 +0000 ROA not after: Sun 31 Oct 2027 19:37:33 +0000 asID: 215197 IP address blocks: 179.254.213.0/24 maxlen: 24 189.12.178.0/24 maxlen: 24 189.12.191.0/24 maxlen: 24 189.30.113.0/24 maxlen: 24 189.31.30.0/24 maxlen: 24 200.138.26.0/24 maxlen: 24 200.180.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3f:15:0b:30:e8:09:51:8d:23:26:23:e5:04:13:c4:bc:12:47:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 1 19:32:33 2026 GMT Not After : Oct 31 19:37:33 2027 GMT Subject: CN=7A1943D6050CA291345CDA63D77A6D54AB8C1E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:89:a6:b3:e8:17:49:35:22:88:9c:77:dc: bf:08:54:70:0b:1c:f6:7d:f7:6b:47:29:19:4f:93: fd:82:5d:06:a2:04:9b:e3:68:a5:50:98:35:24:54: a9:52:07:c9:54:0b:ff:a7:82:c7:a9:ff:a2:97:71: 2b:1d:2a:b2:3f:a8:5a:d5:d5:c8:43:cc:77:48:c9: fa:9e:8e:8a:3e:13:5f:db:d6:3f:e7:90:69:e6:ae: 22:1e:d4:0b:57:3c:d4:98:77:f3:4f:93:fb:05:e1: ec:51:ee:d1:b4:2a:24:3f:af:70:c5:dd:d1:e5:19: 7a:9a:9e:3d:72:67:ba:57:b5:16:e6:e1:c5:e5:7b: 19:43:c7:56:8d:d2:62:1a:36:db:86:13:69:7d:9e: ac:87:c0:df:35:6c:52:1e:a8:4f:62:5e:31:5c:24: db:4f:30:5e:0d:ec:5b:f1:5f:94:58:af:18:00:52: 79:ba:da:c0:d8:0a:e1:3b:99:9d:67:83:d6:91:8a: 92:fa:fe:26:30:47:b8:a4:44:31:96:9f:a7:f9:b0: 91:de:70:fa:87:9b:ea:5e:7e:b1:da:e9:74:7c:91: 3b:f2:7a:fc:66:0e:da:af:a7:0a:30:88:49:54:c4: 17:19:e3:3b:8a:2b:75:4c:60:82:3b:da:43:a1:f7: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:19:43:D6:05:0C:A2:91:34:5C:DA:63:D7:7A:6D:54:AB:8C:1E:8C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215197.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.213.0/24 189.12.178.0/24 189.12.191.0/24 189.30.113.0/24 189.31.30.0/24 200.138.26.0/24 200.180.190.0/24 Signature Algorithm: sha256WithRSAEncryption bd:cf:78:29:e4:f2:f3:7b:d3:ff:7d:fe:2d:17:28:73:a9:d9: 7a:48:16:ae:f5:31:07:29:56:3d:9c:5e:dd:18:9f:c3:af:65: 4d:17:68:65:bb:dc:5e:46:e8:cd:f1:e2:61:00:a1:c2:6f:70: 0a:3d:29:d1:fb:8c:98:08:34:55:96:e3:01:05:ea:e3:87:fb: 62:ba:8c:35:5d:b0:b8:00:4e:2c:8f:74:b9:88:ed:db:3a:12: 8e:cf:8d:32:1d:a4:d1:3c:27:4a:5d:f4:64:3c:65:a7:d6:a3: c7:9c:e6:1c:1a:f3:e5:7e:66:65:fd:4c:e4:96:59:84:6d:4b: 8a:53:cf:8c:22:80:20:99:8d:e9:1c:4b:37:68:41:05:f3:a8: 4f:e7:dd:e5:84:b1:2d:b0:13:ca:fa:d8:c2:2d:7e:c4:57:12: 45:4d:07:9d:c2:42:db:99:d6:a3:2b:0e:fb:4c:25:65:d7:bf: 2d:41:5a:81:62:88:76:87:a8:ab:c0:1d:72:cc:83:d0:a3:8b: 67:f5:0b:2b:e1:0d:80:de:7a:01:d9:6b:e0:61:ba:59:e5:dd: d3:87:c5:b9:e1:e9:85:94:70:48:99:5e:4d:4f:4e:7f:d5:b2: 93:a1:91:a6:28:aa:d7:06:07:a9:e6:60:0c:65:38:0c:60:fe: 24:23:d5:e7 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUaD8VCzDoCVGNIyYj5QQTxLwSR/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDExOTMyMzNaFw0yNzEwMzExOTM3MzNaMDMxMTAvBgNV BAMTKDdBMTk0M0Q2MDUwQ0EyOTEzNDVDREE2M0Q3N0E2RDU0QUI4QzFFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlYmms+gXSTUiiJx33L8IVHAL HPZ992tHKRlPk/2CXQaiBJvjaKVQmDUkVKlSB8lUC/+ngsep/6KXcSsdKrI/qFrV 1chDzHdIyfqejoo+E1/b1j/nkGnmriIe1AtXPNSYd/NPk/sF4exR7tG0KiQ/r3DF 3dHlGXqanj1yZ7pXtRbm4cXlexlDx1aN0mIaNtuGE2l9nqyHwN81bFIeqE9iXjFc JNtPMF4N7FvxX5RYrxgAUnm62sDYCuE7mZ1ng9aRipL6/iYwR7ikRDGWn6f5sJHe cPqHm+pefrHa6XR8kTvyevxmDtqvpwowiElUxBcZ4zuKK3VMYII72kOh99JfAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQUehlD1gUMopE0XNpj13ptVKuMHowwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTUxOTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAE AgABMCoDBACz/tUDBAC9DLIDBAC9DL8DBAC9HnEDBAC9Hx4DBADIihoDBADItL4w DQYJKoZIhvcNAQELBQADggEBAL3PeCnk8vN70/99/i0XKHOp2XpIFq71MQcpVj2c Xt0Yn8OvZU0XaGW73F5G6M3x4mEAocJvcAo9KdH7jJgINFWW4wEF6uOH+2K6jDVd sLgATiyPdLmI7ds6Eo7PjTIdpNE8J0pd9GQ8ZafWo8ec5hwa8+V+ZmX9TOSWWYRt S4pTz4wigCCZjekcSzdoQQXzqE/n3eWEsS2wE8r62MItfsRXEkVNB53CQtuZ1qMr DvtMJWXXvy1BWoFiiHaHqKvAHXLMg9Cji2f1CyvhDYDeegHZa+Bhulnl3dOHxbnh 6YWUcEiZXk1PTn/VspOhkaYoqtcGB6nmYAxlOAxg/iQj1ec= -----END CERTIFICATE-----Generated at Thu Nov 5 08:54:07 2026 by rpki-client