$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218853.roa File: AS218853.roa (raw, json) Hash identifier: CG5YsQoKI4Jpvfpr4GM9IXwp3WoEy16matoGs+vm3lE= Subject key identifier: 82:EF:4A:4B:86:C6:48:08:3D:B7:CE:30:01:5C:8F:47:AC:EC:78:5F Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6692DC9C225F9A60EDD1850E1F1A36F77BA6E50F Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218853.roa Signing time: Tue 20 Oct 2026 10:39:30 +0000 ROA not before: Tue 20 Oct 2026 10:34:30 +0000 ROA not after: Tue 19 Oct 2027 10:39:30 +0000 asID: 218853 IP address blocks: 152.234.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 06:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:92:dc:9c:22:5f:9a:60:ed:d1:85:0e:1f:1a:36:f7:7b:a6:e5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 20 10:34:30 2026 GMT Not After : Oct 19 10:39:30 2027 GMT Subject: CN=82EF4A4B86C648083DB7CE30015C8F47ACEC785F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:1d:36:42:f2:58:bc:fd:76:30:0a:3a:8d: 30:50:9c:58:b3:b2:60:0c:a8:b9:1a:e2:ef:6f:43: 87:30:4b:89:98:9b:49:b0:bc:7f:5d:ff:48:d8:06: fb:81:d0:48:35:b6:ed:e9:fc:7a:23:7b:78:8e:20: a8:20:2a:49:52:a5:a1:d7:43:ae:68:99:00:cc:1a: 77:72:39:05:4e:ca:6c:c6:7b:3e:3e:fd:40:ef:e5: e0:1e:5e:6b:b4:74:62:1a:2f:25:e1:9e:2c:5f:8a: ab:de:91:5c:95:a6:7b:bf:44:3e:97:96:b0:4a:cd: d3:6d:e5:23:c6:de:bd:2a:fc:4d:3e:06:bf:90:0c: 8e:34:f6:75:58:ed:94:26:08:56:cf:89:72:7f:34: 8d:9c:92:a8:07:a6:68:2c:91:55:bf:96:fa:69:c2: 07:ee:38:99:1e:37:11:82:77:68:f6:2b:94:82:a4: ee:2a:c0:ca:87:e1:05:a0:65:cc:0b:8e:62:a1:85: 0d:f4:bf:60:fa:ec:84:2f:73:4e:70:96:12:f3:b3: b9:64:a8:9e:12:12:e8:69:75:c9:23:c5:1b:94:59: a1:db:b7:08:d9:11:82:ec:e3:54:b6:bf:10:d5:83: 78:fb:68:18:3f:2f:21:97:e3:7a:cf:f3:42:e3:d2: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:4A:4B:86:C6:48:08:3D:B7:CE:30:01:5C:8F:47:AC:EC:78:5F X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.152.0/24 Signature Algorithm: sha256WithRSAEncryption 89:3a:4a:82:6e:67:7f:e1:63:9f:8f:c3:52:3d:c7:8f:7d:92: 8d:e1:d2:39:4e:6b:54:f3:9a:c1:cc:bb:d1:25:b0:f1:21:32: e4:1f:54:54:73:76:72:47:f2:7d:97:7e:cb:79:85:08:f6:0d: 5c:5a:eb:8c:74:92:d3:30:a5:43:0b:f6:26:03:63:df:79:0f: 9f:c9:6e:1b:36:6d:29:87:ae:a5:6b:56:66:a4:f6:a3:08:1a: 79:de:d6:4c:2c:3a:22:75:33:ab:63:df:12:b3:ac:a0:c3:64: 37:bb:cd:64:97:42:1d:39:9b:0d:28:ed:2c:7e:49:d6:78:49: ef:6b:18:14:7b:71:51:ea:b2:f3:24:18:5e:2a:61:83:cc:42: c6:d0:01:0a:de:72:c5:8a:1a:ab:78:7c:c9:76:5f:ca:9c:72: 5a:bb:a9:31:d6:10:17:1f:ec:65:58:ef:4f:98:27:d1:94:a6: 64:74:65:f1:cf:5f:23:df:fc:a4:1c:ea:a6:2c:0a:b4:f2:48: ea:15:4b:b9:e4:b4:5e:37:77:52:6c:ae:ae:3e:3e:9e:27:82: 44:12:dd:64:ac:43:e3:0b:7f:82:7c:71:89:06:45:90:c1:48: 90:ac:58:40:a2:ff:5f:bc:f3:ef:76:a7:90:f6:a7:38:13:f8: 97:6c:94:ab -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUZpLcnCJfmmDt0YUOHxo293um5Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjAxMDM0MzBaFw0yNzEwMTkxMDM5MzBaMDMxMTAvBgNV BAMTKDgyRUY0QTRCODZDNjQ4MDgzREI3Q0UzMDAxNUM4RjQ3QUNFQzc4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxx02QvJYvP12MAo6jTBQnFiz smAMqLka4u9vQ4cwS4mYm0mwvH9d/0jYBvuB0Eg1tu3p/Hoje3iOIKggKklSpaHX Q65omQDMGndyOQVOymzGez4+/UDv5eAeXmu0dGIaLyXhnixfiqvekVyVpnu/RD6X lrBKzdNt5SPG3r0q/E0+Br+QDI409nVY7ZQmCFbPiXJ/NI2ckqgHpmgskVW/lvpp wgfuOJkeNxGCd2j2K5SCpO4qwMqH4QWgZcwLjmKhhQ30v2D67IQvc05wlhLzs7lk qJ4SEuhpdckjxRuUWaHbtwjZEYLs41S2vxDVg3j7aBg/LyGX43rP80Lj0j+fAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUgu9KS4bGSAg9t84wAVyPR6zseF8wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg4NTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACY6pgwDQYJKoZIhvcNAQELBQADggEBAIk6SoJuZ3/hY5+Pw1I9x499 ko3h0jlOa1TzmsHMu9ElsPEhMuQfVFRzdnJH8n2Xfst5hQj2DVxa64x0ktMwpUML 9iYDY995D5/Jbhs2bSmHrqVrVmak9qMIGnne1kwsOiJ1M6tj3xKzrKDDZDe7zWSX Qh05mw0o7Sx+SdZ4Se9rGBR7cVHqsvMkGF4qYYPMQsbQAQrecsWKGqt4fMl2X8qc clq7qTHWEBcf7GVY70+YJ9GUpmR0ZfHPXyPf/KQc6qYsCrTySOoVS7nktF43d1Js rq4+Pp4ngkQS3WSsQ+MLf4J8cYkGRZDBSJCsWECi/1+88+92p5D2pzgT+JdslKs= -----END CERTIFICATE-----Generated at Wed Oct 21 18:00:52 2026 by rpki-client