$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218580.roa File: AS218580.roa (raw, json) Hash identifier: 6XDtiOkI9H6wVaxO1BBOkrGAk4Z0Rxuyte/dp7K1Xng= Subject key identifier: AC:30:73:EF:6C:E8:F4:75:F3:46:35:68:68:9F:0D:2C:47:FB:18:54 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 43DAF18329919BF00D0511719C7DADDE682532D9 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218580.roa Signing time: Sun 27 Sep 2026 15:36:49 +0000 ROA not before: Sun 27 Sep 2026 15:31:49 +0000 ROA not after: Sun 26 Sep 2027 15:36:49 +0000 asID: 218580 IP address blocks: 179.254.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 19:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:da:f1:83:29:91:9b:f0:0d:05:11:71:9c:7d:ad:de:68:25:32:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 27 15:31:49 2026 GMT Not After : Sep 26 15:36:49 2027 GMT Subject: CN=AC3073EF6CE8F475F3463568689F0D2C47FB1854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:09:af:9b:0e:82:7f:50:39:4d:e9:ac:8c: e8:47:16:a2:f7:e0:8d:44:ac:ab:6e:2e:8b:a8:20: ce:ca:61:78:0a:93:fe:41:c8:25:30:70:2b:18:2b: da:f6:86:a0:81:63:f2:59:39:b8:60:c9:d6:3c:ec: 7c:f9:8f:d0:48:99:ea:a4:99:a4:80:b2:c1:05:54: cb:eb:9b:54:a1:17:a7:44:85:96:53:6f:2b:4c:08: 09:f4:f0:7b:24:73:7d:c8:c7:59:93:16:2f:1f:8c: d0:ce:1c:84:f8:af:93:6e:c8:f8:c0:c8:1f:bd:62: 2b:0d:00:1a:a9:8e:8f:a9:e5:69:16:34:ce:ee:a2: bf:4c:6b:32:f3:50:1a:da:aa:7f:91:66:ff:ca:21: 5d:37:b3:67:b3:82:66:7c:cd:99:10:b6:5d:fe:7a: bf:6a:47:62:99:b4:21:46:11:96:79:04:26:90:fa: 6b:4f:c6:40:f0:2d:99:25:84:e7:84:a3:44:89:2f: 85:15:54:ee:0f:ee:a1:a7:51:31:87:f7:3f:19:33: a9:29:f4:1f:c7:1c:e8:cd:26:ed:7f:62:37:be:5f: 07:9d:2f:d7:b4:d6:6e:db:4d:63:4d:85:42:b4:f2: 98:fa:3b:58:cf:b1:51:91:06:59:c6:07:1b:8c:a7: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:73:EF:6C:E8:F4:75:F3:46:35:68:68:9F:0D:2C:47:FB:18:54 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.196.0/22 Signature Algorithm: sha256WithRSAEncryption 87:cd:f7:9c:84:fb:4d:f6:3a:92:ae:52:ff:0b:bc:32:f6:7b: 7e:e0:6c:d7:f6:4d:29:80:dc:d0:f8:8c:a5:a7:97:54:ca:f9: 14:14:72:a4:cf:de:31:78:0a:ac:75:40:57:66:d1:c8:c4:61: fb:97:01:45:06:dc:c2:0b:14:2f:9c:57:70:f2:c0:6d:5a:e0: c8:91:c9:5a:03:20:86:61:e3:e6:73:88:bd:ff:67:94:37:c2: 36:cd:be:7a:1f:8f:f9:87:84:63:f7:8d:ee:b8:7b:91:d9:3c: b3:a3:4a:06:e2:50:a9:df:cc:ca:f4:4b:19:57:da:c5:75:9e: c4:ed:2c:d8:a3:73:22:0d:ba:11:b5:f4:06:42:b9:6f:5b:b3: 97:c6:06:c2:b3:bb:ae:57:88:d4:44:5b:87:3a:2e:28:e4:e9: e4:6b:b8:a2:68:91:00:50:9d:1e:3f:36:14:1a:1f:6b:43:20: 98:e4:0a:26:95:8c:a5:e5:6f:02:61:ad:bc:26:46:48:43:15: 00:45:70:4c:a7:0c:cb:25:69:64:c0:f1:9a:50:17:a2:9d:8d: 8b:4f:bb:4b:cb:08:f3:71:d5:1f:0a:dd:1c:ce:e3:b7:f7:7f: 3f:29:ef:5d:a9:bc:13:df:a2:39:27:28:57:ef:95:51:76:75: 2f:af:da:bc -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUQ9rxgymRm/ANBRFxnH2t3mglMtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjcxNTMxNDlaFw0yNzA5MjYxNTM2NDlaMDMxMTAvBgNV BAMTKEFDMzA3M0VGNkNFOEY0NzVGMzQ2MzU2ODY4OUYwRDJDNDdGQjE4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBgmvmw6Cf1A5TemsjOhHFqL3 4I1ErKtuLouoIM7KYXgKk/5ByCUwcCsYK9r2hqCBY/JZObhgydY87Hz5j9BImeqk maSAssEFVMvrm1ShF6dEhZZTbytMCAn08Hskc33Ix1mTFi8fjNDOHIT4r5NuyPjA yB+9YisNABqpjo+p5WkWNM7uor9MazLzUBraqn+RZv/KIV03s2ezgmZ8zZkQtl3+ er9qR2KZtCFGEZZ5BCaQ+mtPxkDwLZklhOeEo0SJL4UVVO4P7qGnUTGH9z8ZM6kp 9B/HHOjNJu1/Yje+XwedL9e01m7bTWNNhUK08pj6O1jPsVGRBlnGBxuMp5SpAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUrDBz72zo9HXzRjVoaJ8NLEf7GFQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg1ODAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKz/sQwDQYJKoZIhvcNAQELBQADggEBAIfN95yE+032OpKuUv8LvDL2 e37gbNf2TSmA3ND4jKWnl1TK+RQUcqTP3jF4Cqx1QFdm0cjEYfuXAUUG3MILFC+c V3DywG1a4MiRyVoDIIZh4+ZziL3/Z5Q3wjbNvnofj/mHhGP3je64e5HZPLOjSgbi UKnfzMr0SxlX2sV1nsTtLNijcyINuhG19AZCuW9bs5fGBsKzu65XiNREW4c6Lijk 6eRruKJokQBQnR4/NhQaH2tDIJjkCiaVjKXlbwJhrbwmRkhDFQBFcEynDMslaWTA 8ZpQF6KdjYtPu0vLCPNx1R8K3RzO47f3fz8p712pvBPfojknKFfvlVF2dS+v2rw= -----END CERTIFICATE-----Generated at Sat Oct 24 11:34:03 2026 by rpki-client