$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218661.roa File: AS218661.roa (raw, json) Hash identifier: GW68hyNG056/qs9sxqEjpkqWX0B/tzVD/m0eHWoghRA= Subject key identifier: 17:66:2E:1A:DF:1F:51:A2:FC:7F:84:43:80:59:50:2C:F1:07:05:51 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 46254B0699E2E1D1EB9CF677186866FD2CEDBCA7 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218661.roa Signing time: Thu 24 Sep 2026 14:09:26 +0000 ROA not before: Thu 24 Sep 2026 14:04:26 +0000 ROA not after: Thu 23 Sep 2027 14:09:26 +0000 asID: 218661 IP address blocks: 191.45.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:25:4b:06:99:e2:e1:d1:eb:9c:f6:77:18:68:66:fd:2c:ed:bc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 24 14:04:26 2026 GMT Not After : Sep 23 14:09:26 2027 GMT Subject: CN=17662E1ADF1F51A2FC7F84438059502CF1070551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:1a:b8:8b:bf:94:ad:19:0e:5e:55:b7:3d: fe:6e:14:6f:b8:9d:cf:13:d8:8d:9d:e3:f8:aa:32: d0:87:3c:bc:05:9d:b4:82:4e:5f:81:1e:fc:e5:0d: c4:e4:77:23:43:70:83:88:79:98:56:23:c7:25:05: e8:6b:73:3d:5a:e7:2b:93:b9:d3:9c:8b:3f:f1:8d: a6:6d:3c:d2:e1:d1:48:a2:6c:7b:c3:bf:68:8d:02: 6a:4a:68:b8:0e:54:9d:68:dd:65:86:63:5f:19:7e: 65:61:61:53:e8:c0:c5:f9:d7:16:e1:e9:f2:0f:5e: 9c:28:bb:01:d3:29:24:48:a2:48:53:47:95:a2:3d: a6:df:55:47:5d:fb:9f:f4:b0:04:4f:43:d3:81:aa: 42:53:b0:79:02:b1:1a:b1:8a:d1:b3:43:b0:97:50: c4:9c:87:49:12:c8:c2:04:26:cf:dc:a4:30:4b:22: 1c:4e:56:ff:0d:90:09:08:29:b5:a7:b4:7e:91:f2: e1:b4:14:4d:c0:11:18:f6:57:1c:45:d3:72:32:29: 9a:65:be:0d:31:6e:92:79:4e:3e:57:e0:86:8e:df: 05:8f:e1:0f:47:95:88:49:8d:86:9a:61:e3:0e:0a: f0:9c:eb:9b:73:ec:2d:3d:08:f0:c6:de:f6:c4:0e: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:66:2E:1A:DF:1F:51:A2:FC:7F:84:43:80:59:50:2C:F1:07:05:51 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.45.44.0/24 Signature Algorithm: sha256WithRSAEncryption ba:d2:a1:ab:59:d9:c0:f2:c3:39:e3:6e:e1:9c:60:1e:47:05: ec:ad:78:10:09:c0:4e:4a:d1:bd:1e:32:ff:db:40:e9:9e:82: 2e:d4:93:a4:9e:1d:2b:ca:74:f3:52:65:0a:e2:c0:fb:d3:bf: 69:63:1d:cf:64:18:44:7b:30:70:bd:37:b8:83:db:98:3b:f2: 57:cb:1c:ad:db:82:5f:5d:87:4d:9c:e3:97:bb:27:9f:10:24: 83:fc:b6:44:a6:15:3e:1b:63:54:1f:ec:3b:ff:e3:5a:59:03: 3b:4d:54:b1:83:d1:3c:84:bb:43:86:43:18:bd:a1:68:13:28: 33:b1:c1:fa:c1:d5:a6:17:51:0b:e4:2b:f3:a9:7b:df:a4:1f: 4b:2d:0d:fb:71:9d:1c:da:e2:8c:fa:72:0c:51:cf:c1:e7:d9: 56:29:20:20:eb:2b:f7:84:26:7b:63:28:e4:d3:1d:29:58:e9: 89:50:17:d2:03:c9:b7:04:4b:bf:3d:ce:43:9c:c3:b1:d3:3c: 02:30:da:4d:bb:96:bf:77:7a:4f:66:45:6c:81:26:18:16:ea: 2c:03:df:58:ed:48:eb:60:db:76:13:08:cf:65:1a:63:76:46: a4:e0:b8:73:ad:be:18:d3:ea:2e:20:64:b2:b6:a9:c2:34:85: dd:cc:c2:4e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIURiVLBpni4dHrnPZ3GGhm/SztvKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjQxNDA0MjZaFw0yNzA5MjMxNDA5MjZaMDMxMTAvBgNV BAMTKDE3NjYyRTFBREYxRjUxQTJGQzdGODQ0MzgwNTk1MDJDRjEwNzA1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Zhq4i7+UrRkOXlW3Pf5uFG+4 nc8T2I2d4/iqMtCHPLwFnbSCTl+BHvzlDcTkdyNDcIOIeZhWI8clBehrcz1a5yuT udOciz/xjaZtPNLh0UiibHvDv2iNAmpKaLgOVJ1o3WWGY18ZfmVhYVPowMX51xbh 6fIPXpwouwHTKSRIokhTR5WiPabfVUdd+5/0sARPQ9OBqkJTsHkCsRqxitGzQ7CX UMSch0kSyMIEJs/cpDBLIhxOVv8NkAkIKbWntH6R8uG0FE3AERj2VxxF03IyKZpl vg0xbpJ5Tj5X4IaO3wWP4Q9HlYhJjYaaYeMOCvCc65tz7C09CPDG3vbEDiq9AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUF2YuGt8fUaL8f4RDgFlQLPEHBVEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg2NjEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC/LSwwDQYJKoZIhvcNAQELBQADggEBALrSoatZ2cDywznjbuGcYB5H BeyteBAJwE5K0b0eMv/bQOmegi7Uk6SeHSvKdPNSZQriwPvTv2ljHc9kGER7MHC9 N7iD25g78lfLHK3bgl9dh02c45e7J58QJIP8tkSmFT4bY1Qf7Dv/41pZAztNVLGD 0TyEu0OGQxi9oWgTKDOxwfrB1aYXUQvkK/Ope9+kH0stDftxnRza4oz6cgxRz8Hn 2VYpICDrK/eEJntjKOTTHSlY6YlQF9IDybcES789zkOcw7HTPAIw2k27lr93ek9m RWyBJhgW6iwD31jtSOtg23YTCM9lGmN2RqTguHOtvhjT6i4gZLK2qcI0hd3Mwk4= -----END CERTIFICATE-----Generated at Fri Sep 25 15:58:53 2026 by rpki-client