$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218641.roa File: AS218641.roa (raw, json) Hash identifier: IjDraJvlfTQvIr4NB1rxy6nxE5nkESYoPk31uCRhN98= Subject key identifier: 9C:86:64:48:4B:00:D7:1F:80:F1:F2:CF:5D:11:56:00:93:2F:EE:58 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2BC6B0EC03D880ACEE61A45D814A95703A6C5FCC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218641.roa Signing time: Wed 04 Nov 2026 06:55:31 +0000 ROA not before: Wed 04 Nov 2026 06:50:31 +0000 ROA not after: Wed 03 Nov 2027 06:55:31 +0000 asID: 218641 IP address blocks: 189.31.17.0/24 maxlen: 24 200.138.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c6:b0:ec:03:d8:80:ac:ee:61:a4:5d:81:4a:95:70:3a:6c:5f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 4 06:50:31 2026 GMT Not After : Nov 3 06:55:31 2027 GMT Subject: CN=9C8664484B00D71F80F1F2CF5D115600932FEE58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:90:a9:43:74:23:a1:6f:b1:c3:fa:ee:09: 24:ec:ca:d4:69:8f:98:e5:09:8e:11:47:9c:de:45: 31:34:0c:ae:14:0a:92:cd:7c:5d:fd:2f:f3:d9:3d: af:16:b3:6c:d1:05:a4:12:e1:ea:95:e4:a5:68:28: 6e:78:f7:47:48:90:e0:ea:d0:2f:53:9c:27:50:7f: 7f:5f:f1:df:c8:1a:63:2f:e4:2a:16:f3:48:89:7f: 44:37:35:6b:3a:fe:f1:84:40:12:d3:2e:1f:f9:25: ff:45:87:aa:e0:ae:90:07:17:a3:c8:bd:cf:70:18: 1c:17:63:c3:fd:8b:d0:9a:a6:f4:1d:b6:b5:15:26: 08:f8:ae:44:f7:63:c5:a3:6b:00:9e:0a:0a:f6:81: fc:b2:79:2f:3d:b8:2e:08:b2:f9:17:7b:07:84:fd: 6f:d1:06:52:ac:01:29:86:bb:d8:58:9f:17:df:ca: 3f:e3:01:21:49:8e:8f:f1:6d:aa:df:91:2c:3c:77: 4b:63:c8:4a:86:3b:be:b9:15:63:6a:f8:25:83:21: 2e:8f:1e:c6:50:61:0c:8d:92:3c:98:fc:05:5f:cb: d3:dd:38:47:26:27:67:7f:95:b8:42:34:24:43:35: 58:cc:f6:3f:26:fa:66:63:e1:1c:f4:77:de:27:67: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:86:64:48:4B:00:D7:1F:80:F1:F2:CF:5D:11:56:00:93:2F:EE:58 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.31.17.0/24 200.138.18.0/24 Signature Algorithm: sha256WithRSAEncryption 50:99:60:15:28:e5:52:9b:d6:0c:21:f3:37:46:00:7b:31:e0: 66:b8:20:e8:98:37:0a:dd:a9:a0:11:40:98:6c:34:8f:3a:eb: 70:ba:31:bf:3f:f1:e9:3e:e5:8f:27:7e:74:f0:bd:f1:65:e4: 21:ed:9f:62:83:74:8e:d4:21:06:6d:7b:cb:b9:0e:0e:74:cd: 36:4a:fe:77:74:e7:f4:5d:ad:17:e5:9a:1e:f3:f8:c8:62:a1: bd:64:26:43:d4:6b:bb:9a:de:c7:9a:04:a1:cc:6a:c9:6f:fc: 17:7f:b0:f7:b5:e5:3d:cd:eb:fb:e4:88:90:ab:2f:0d:84:34: 73:52:dc:c9:e1:49:61:dd:45:50:ce:75:4b:5a:73:cc:f9:d7: 4c:75:84:60:17:64:62:80:d3:f1:13:cb:20:76:fc:2e:31:5c: c0:1a:e3:7b:31:b9:c2:f2:bb:20:5c:2f:39:6b:3d:a3:e1:9a: 65:c1:c6:a8:51:81:87:b4:98:41:f9:17:a7:34:4e:7d:0b:11: 11:4a:19:51:0f:aa:d1:8b:75:f1:11:75:f6:be:7a:ac:d7:c9: d2:2b:00:c2:be:7b:28:ea:fe:f2:2e:bf:24:bc:2b:ca:3d:c1: cc:a4:39:69:e0:9c:45:4e:9d:32:a8:89:b8:9e:20:f7:1b:e1: 7f:2b:86:5d -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUK8aw7APYgKzuYaRdgUqVcDpsX8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDQwNjUwMzFaFw0yNzExMDMwNjU1MzFaMDMxMTAvBgNV BAMTKDlDODY2NDQ4NEIwMEQ3MUY4MEYxRjJDRjVEMTE1NjAwOTMyRkVFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1pCpQ3QjoW+xw/ruCSTsytRp j5jlCY4RR5zeRTE0DK4UCpLNfF39L/PZPa8Ws2zRBaQS4eqV5KVoKG5490dIkODq 0C9TnCdQf39f8d/IGmMv5CoW80iJf0Q3NWs6/vGEQBLTLh/5Jf9Fh6rgrpAHF6PI vc9wGBwXY8P9i9CapvQdtrUVJgj4rkT3Y8WjawCeCgr2gfyyeS89uC4IsvkXeweE /W/RBlKsASmGu9hYnxffyj/jASFJjo/xbarfkSw8d0tjyEqGO765FWNq+CWDIS6P HsZQYQyNkjyY/AVfy9PdOEcmJ2d/lbhCNCRDNVjM9j8m+mZj4Rz0d94nZ9YBAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUnIZkSEsA1x+A8fLPXRFWAJMv7lgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg2NDEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC9HxEDBADIihIwDQYJKoZIhvcNAQELBQADggEBAFCZYBUo5VKb1gwh 8zdGAHsx4Ga4IOiYNwrdqaARQJhsNI8663C6Mb8/8ek+5Y8nfnTwvfFl5CHtn2KD dI7UIQZte8u5Dg50zTZK/nd05/RdrRflmh7z+Mhiob1kJkPUa7ua3seaBKHMaslv /Bd/sPe15T3N6/vkiJCrLw2ENHNS3MnhSWHdRVDOdUtac8z510x1hGAXZGKA0/ET yyB2/C4xXMAa43sxucLyuyBcLzlrPaPhmmXBxqhRgYe0mEH5F6c0Tn0LERFKGVEP qtGLdfERdfa+eqzXydIrAMK+eyjq/vIuvyS8K8o9wcykOWngnEVOnTKoibieIPcb 4X8rhl0= -----END CERTIFICATE-----Generated at Thu Nov 5 16:43:59 2026 by rpki-client