$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218729.roa File: AS218729.roa (raw, json) Hash identifier: HG3e0o4EQxGCIK62gH0LdQ7BDfPsTO8ehvbBrNKW8Lo= Subject key identifier: A4:8D:A3:E1:5B:84:00:D3:5E:CE:90:36:E9:A5:87:BF:D8:65:1B:E4 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2B9D19201803E082C15D6160AF06A3A2D13422B1 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218729.roa Signing time: Thu 22 Oct 2026 16:47:57 +0000 ROA not before: Thu 22 Oct 2026 16:42:57 +0000 ROA not after: Thu 21 Oct 2027 16:47:57 +0000 asID: 218729 IP address blocks: 152.234.136.0/24 maxlen: 24 187.15.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 08:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9d:19:20:18:03:e0:82:c1:5d:61:60:af:06:a3:a2:d1:34:22:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 22 16:42:57 2026 GMT Not After : Oct 21 16:47:57 2027 GMT Subject: CN=A48DA3E15B8400D35ECE9036E9A587BFD8651BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:da:5d:05:8a:c1:44:88:2d:2b:5d:35:03: 3b:28:29:ce:86:3c:80:95:47:eb:68:3b:0a:87:f9: 9a:10:37:36:b9:4c:e9:a5:43:fe:0e:4e:0f:94:0e: 4a:fe:60:19:2b:8c:58:eb:22:2b:0b:db:69:0c:61: d5:31:63:d1:6e:07:e4:b4:5c:ea:f4:73:a0:c4:8b: b3:b3:7d:7d:ee:ef:c8:21:23:2e:ec:08:48:72:4e: 4b:52:be:d0:30:9c:83:92:46:c4:3d:59:a3:b6:a2: f2:9f:7b:82:c0:33:83:57:a4:4b:74:d5:69:40:b7: c5:96:2c:35:5a:0c:ba:c1:3a:93:27:e5:3d:fe:e5: 23:88:1d:5c:32:05:51:8c:53:c7:4d:4f:5a:86:12: fd:8a:06:1c:70:34:9f:8f:f1:c9:95:b4:5d:d2:8a: c3:bd:82:08:bf:7e:eb:f1:08:78:d2:da:8c:49:ec: 48:f0:34:61:a7:45:e0:67:6b:f8:75:df:77:4b:5f: 63:8f:88:5a:27:da:83:a6:d7:ad:ff:6a:55:f9:96: 33:dd:04:37:d0:ac:c3:81:01:03:1d:11:b7:e8:2a: ca:d8:4f:96:47:ed:3d:50:1d:96:62:4d:30:01:e9: 35:b8:2e:4d:f1:b7:89:8b:96:6d:c8:1c:ce:4b:f6: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:A3:E1:5B:84:00:D3:5E:CE:90:36:E9:A5:87:BF:D8:65:1B:E4 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.136.0/24 187.15.200.0/24 Signature Algorithm: sha256WithRSAEncryption 96:89:de:0d:f9:ff:98:97:cb:f4:82:af:49:1c:54:55:64:62: d5:10:c0:cf:2b:8e:b0:f6:4e:9b:54:12:88:53:6c:e6:58:b4: 29:44:ac:4a:e0:c5:3f:4b:d0:7f:ee:95:a8:cb:b7:61:07:ed: e6:53:63:36:63:53:f6:61:76:73:db:13:04:cb:20:8e:9f:a9: c1:4f:69:81:7d:6d:a7:65:9c:ea:57:ab:26:0d:db:6b:ea:ad: d7:53:86:4d:95:0a:e0:40:28:4d:12:64:a0:9b:94:bc:4c:9e: 1b:e3:f0:5f:e0:4e:18:1d:9c:d9:8a:be:18:b7:79:95:cf:a1: b6:29:23:b3:de:ca:81:78:ca:16:65:24:85:b8:14:f2:50:48: 6d:f1:a2:59:2e:da:9b:3e:02:d7:af:56:b6:35:d3:f2:85:86: c0:af:c6:80:20:94:19:f9:99:bd:4c:42:68:52:de:a9:72:9d: 95:82:b4:35:5e:78:55:a0:39:de:f7:6e:bc:41:51:c5:85:fc: 7b:3f:41:2e:28:52:34:d0:bf:a5:4a:ec:cb:f7:f7:e6:e7:cd: 4a:39:30:8b:31:86:5b:f4:0e:30:f7:b2:b2:a7:c3:48:e6:46: 62:60:03:d9:9e:ed:30:55:f6:95:1a:dc:07:84:9d:a5:5b:f0: fb:cb:03:17 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUK50ZIBgD4ILBXWFgrwajotE0IrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjIxNjQyNTdaFw0yNzEwMjExNjQ3NTdaMDMxMTAvBgNV BAMTKEE0OERBM0UxNUI4NDAwRDM1RUNFOTAzNkU5QTU4N0JGRDg2NTFCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvdpdBYrBRIgtK101AzsoKc6G PICVR+toOwqH+ZoQNza5TOmlQ/4OTg+UDkr+YBkrjFjrIisL22kMYdUxY9FuB+S0 XOr0c6DEi7OzfX3u78ghIy7sCEhyTktSvtAwnIOSRsQ9WaO2ovKfe4LAM4NXpEt0 1WlAt8WWLDVaDLrBOpMn5T3+5SOIHVwyBVGMU8dNT1qGEv2KBhxwNJ+P8cmVtF3S isO9ggi/fuvxCHjS2oxJ7EjwNGGnReBna/h133dLX2OPiFon2oOm163/alX5ljPd BDfQrMOBAQMdEbfoKsrYT5ZH7T1QHZZiTTAB6TW4Lk3xt4mLlm3IHM5L9jTxAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUpI2j4VuEANNezpA26aWHv9hlG+QwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg3Mjkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY6ogDBAC7D8gwDQYJKoZIhvcNAQELBQADggEBAJaJ3g35/5iXy/SC r0kcVFVkYtUQwM8rjrD2TptUEohTbOZYtClErErgxT9L0H/ulajLt2EH7eZTYzZj U/ZhdnPbEwTLII6fqcFPaYF9badlnOpXqyYN22vqrddThk2VCuBAKE0SZKCblLxM nhvj8F/gThgdnNmKvhi3eZXPobYpI7PeyoF4yhZlJIW4FPJQSG3xolku2ps+Atev VrY10/KFhsCvxoAglBn5mb1MQmhS3qlynZWCtDVeeFWgOd73brxBUcWF/Hs/QS4o UjTQv6VK7Mv39+bnzUo5MIsxhlv0DjD3srKnw0jmRmJgA9me7TBV9pUa3AeEnaVb 8PvLAxc= -----END CERTIFICATE-----Generated at Mon Oct 26 00:48:39 2026 by rpki-client