$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215607.roa File: AS215607.roa (raw, json) Hash identifier: z5uopeOdyd7DqG1lapthJjIAlWZSUKvMHZg6YEIn480= Subject key identifier: 72:43:17:91:5C:33:F1:93:62:D0:44:77:C6:BD:45:B7:5C:91:80:64 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6DFB8705DC766C2FD1FB59D225AD18078872FB1C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215607.roa Signing time: Fri 16 Oct 2026 09:30:08 +0000 ROA not before: Fri 16 Oct 2026 09:25:08 +0000 ROA not after: Fri 15 Oct 2027 09:30:08 +0000 asID: 215607 IP address blocks: 152.234.140.0/24 maxlen: 24 177.201.205.0/24 maxlen: 24 179.254.200.0/24 maxlen: 24 179.254.223.0/24 maxlen: 24 187.14.132.0/24 maxlen: 24 187.15.195.0/24 maxlen: 24 187.55.25.0/24 maxlen: 24 189.30.66.0/24 maxlen: 24 189.31.7.0/24 maxlen: 24 189.73.47.0/24 maxlen: 24 191.45.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fb:87:05:dc:76:6c:2f:d1:fb:59:d2:25:ad:18:07:88:72:fb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 16 09:25:08 2026 GMT Not After : Oct 15 09:30:08 2027 GMT Subject: CN=724317915C33F19362D04477C6BD45B75C918064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:39:00:6d:c5:2a:12:2a:78:48:c1:aa:8d: 3c:c4:46:3a:ea:3b:ab:dc:c9:8a:5d:8b:63:fe:49: fd:fb:d9:e2:ec:35:7d:32:83:64:72:5d:b0:80:39: d7:88:f1:2a:b4:21:8e:4f:50:ed:04:d0:c8:9a:4d: cb:2e:f4:ca:7b:19:10:4c:f6:d4:3e:8b:f5:8e:e7: 76:3b:47:0d:a8:f8:1e:43:2e:3b:90:4f:7f:7d:a3: 3d:5b:54:91:88:45:ff:86:5e:64:a7:5d:83:5c:62: 00:13:28:2d:ab:6f:74:38:c3:68:3f:03:9a:c1:84: b9:81:a8:96:15:74:0c:71:6e:b3:b6:7a:69:98:70: 9d:00:d9:18:97:44:ae:54:0c:ee:d4:ff:c4:fc:de: 00:08:a3:aa:3b:6c:dc:42:8a:fb:ee:95:31:86:88: fe:15:ba:39:fa:cb:23:74:aa:fa:b6:f6:9b:eb:8f: bd:e7:9d:8b:f3:15:54:66:7e:e6:d8:e7:33:09:89: 2d:e6:dd:e7:e9:40:fd:4b:c1:49:7b:75:ac:ca:a6: 7d:f1:5c:ca:b7:ab:f1:20:0d:a9:12:07:9c:20:f5: 33:8c:ea:22:0a:42:35:16:bb:36:b6:2c:d5:e8:40: 5f:8c:99:44:f1:40:4f:16:3b:d1:bc:7d:10:5a:ba: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:43:17:91:5C:33:F1:93:62:D0:44:77:C6:BD:45:B7:5C:91:80:64 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.140.0/24 177.201.205.0/24 179.254.200.0/24 179.254.223.0/24 187.14.132.0/24 187.15.195.0/24 187.55.25.0/24 189.30.66.0/24 189.31.7.0/24 189.73.47.0/24 191.45.42.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:0a:a5:07:d3:11:fa:be:f7:1f:8b:1c:89:2d:af:6c:c1:18: 88:31:9c:91:e5:70:e8:5f:82:e1:31:0a:12:f0:51:f8:00:b0: 01:18:fc:22:63:f8:a8:4a:f8:c6:03:78:62:5c:62:a1:07:44: cf:e5:37:41:fc:87:ee:b7:b5:3a:85:ea:16:48:cd:7a:4c:d9: 27:e5:6a:cf:8d:22:da:83:2e:a9:eb:37:69:a4:5b:6d:43:b4: b8:f0:5f:78:82:26:49:a7:f3:72:a5:d0:98:24:a4:bc:d8:1f: 7d:a6:f8:89:0f:5b:9e:e1:82:dd:4d:7d:7e:b9:ac:06:92:1a: 6f:38:63:50:ad:92:f5:07:75:34:9c:b5:7f:33:ff:07:51:4e: 82:d9:3f:97:ff:eb:99:81:c2:92:82:cc:5d:a7:f5:3f:4e:55: e3:3e:97:5e:b5:5b:63:42:66:e8:34:9e:e3:fd:ee:cb:a7:16: 9a:26:66:59:1c:a7:31:c7:fd:69:03:76:ef:5a:31:7d:1f:95: 3c:4b:01:69:59:11:a6:05:9e:98:ec:9a:7a:8b:f9:6e:7d:ef: 5c:ca:66:dc:fc:e7:45:d4:7d:b5:09:55:ea:c1:57:ee:01:e4: de:e7:53:17:d8:a8:aa:a0:65:f7:7a:af:33:ad:8c:ea:e2:13: 5f:3c:b0:ef -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUbfuHBdx2bC/R+1nSJa0YB4hy+xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTYwOTI1MDhaFw0yNzEwMTUwOTMwMDhaMDMxMTAvBgNV BAMTKDcyNDMxNzkxNUMzM0YxOTM2MkQwNDQ3N0M2QkQ0NUI3NUM5MTgwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/jkAbcUqEip4SMGqjTzERjrq O6vcyYpdi2P+Sf372eLsNX0yg2RyXbCAOdeI8Sq0IY5PUO0E0MiaTcsu9Mp7GRBM 9tQ+i/WO53Y7Rw2o+B5DLjuQT399oz1bVJGIRf+GXmSnXYNcYgATKC2rb3Q4w2g/ A5rBhLmBqJYVdAxxbrO2emmYcJ0A2RiXRK5UDO7U/8T83gAIo6o7bNxCivvulTGG iP4Vujn6yyN0qvq29pvrj73nnYvzFVRmfubY5zMJiS3m3efpQP1LwUl7dazKpn3x XMq3q/EgDakSB5wg9TOM6iIKQjUWuza2LNXoQF+MmUTxQE8WO9G8fRBaulsvAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUckMXkVwz8ZNi0ER3xr1Ft1yRgGQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTU2MDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWwYIKwYBBQUHAQcBAf8ETDBKMEgE AgABMEIDBACY6owDBACxyc0DBACz/sgDBACz/t8DBAC7DoQDBAC7D8MDBAC7NxkD BAC9HkIDBAC9HwcDBAC9SS8DBAC/LSowDQYJKoZIhvcNAQELBQADggEBAIwKpQfT Efq+9x+LHIktr2zBGIgxnJHlcOhfguExChLwUfgAsAEY/CJj+KhK+MYDeGJcYqEH RM/lN0H8h+63tTqF6hZIzXpM2Sflas+NItqDLqnrN2mkW21DtLjwX3iCJkmn83Kl 0JgkpLzYH32m+IkPW57hgt1NfX65rAaSGm84Y1CtkvUHdTSctX8z/wdRToLZP5f/ 65mBwpKCzF2n9T9OVeM+l161W2NCZug0nuP97sunFpomZlkcpzHH/WkDdu9aMX0f lTxLAWlZEaYFnpjsmnqL+W5971zKZtz850XUfbUJVerBV+4B5N7nUxfYqKqgZfd6 rzOtjOriE188sO8= -----END CERTIFICATE-----Generated at Thu Nov 5 08:54:04 2026 by rpki-client