$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218911.roa File: AS218911.roa (raw, json) Hash identifier: YNQy2MN/aQyd7ilpFU7LuIjztNEeYFeiGqXWcCc4iDo= Subject key identifier: 8E:65:91:C2:14:E7:CF:61:34:0D:53:FE:AB:E1:8D:54:A5:CF:25:8A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7F16E6EEFCD385FC772094FCEE15E3F4F48EE92D Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218911.roa Signing time: Sat 24 Oct 2026 16:59:39 +0000 ROA not before: Sat 24 Oct 2026 16:54:39 +0000 ROA not after: Sat 23 Oct 2027 16:59:39 +0000 asID: 218911 IP address blocks: 187.55.7.0/24 maxlen: 24 189.31.3.0/24 maxlen: 24 200.149.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 08:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:16:e6:ee:fc:d3:85:fc:77:20:94:fc:ee:15:e3:f4:f4:8e:e9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 24 16:54:39 2026 GMT Not After : Oct 23 16:59:39 2027 GMT Subject: CN=8E6591C214E7CF61340D53FEABE18D54A5CF258A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:f8:89:fc:00:4d:60:02:a1:34:31:1c:09: 5b:3b:8b:5f:0e:ab:61:dd:00:ea:67:b7:25:d7:7a: ba:83:fd:5b:89:70:b4:e4:c0:59:63:74:81:42:1e: 0b:ec:88:9f:b2:c5:55:ae:35:c0:01:54:5e:42:cc: 81:ef:e2:13:16:8f:06:bc:6e:a8:3a:58:4e:b5:ba: 0e:55:c1:68:31:26:bb:9a:56:27:49:c0:a1:5f:e0: 0d:b5:17:98:24:e9:d7:72:7d:a0:61:93:e4:e1:71: 42:21:91:ef:ae:d6:f6:91:e4:db:1b:51:f4:2b:ad: 8a:f5:e0:5d:b0:8e:df:6d:fc:8d:a1:7e:da:6f:18: ef:e8:15:b2:f2:0d:e8:19:76:01:dd:41:f1:56:21: fc:37:73:cf:37:b1:57:be:0e:d8:3a:8b:65:fe:fa: 82:a0:a4:b8:cb:da:3d:4f:03:ea:2b:e4:2c:a3:7d: d9:08:75:e2:38:7b:e0:d1:36:00:11:3f:7c:97:e9: 02:93:c5:ad:2e:7f:21:fe:98:2a:fd:ee:01:cf:08: f9:37:c5:6d:1f:74:4f:ad:da:e4:e6:7b:de:60:65: e1:3d:de:63:55:a8:c3:ab:b2:4f:d7:68:dc:d9:4b: d7:e8:ef:c9:78:4a:4a:1b:6b:11:1e:b5:94:7b:07: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:91:C2:14:E7:CF:61:34:0D:53:FE:AB:E1:8D:54:A5:CF:25:8A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.55.7.0/24 189.31.3.0/24 200.149.180.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ca:03:c3:00:d6:10:f2:dd:2b:69:53:e3:83:cb:5c:10:de: e8:21:a4:58:52:5b:7e:bb:2e:77:91:0a:8d:42:e2:88:f0:8b: f4:d8:70:d9:ac:f1:fd:b4:79:eb:c6:7c:07:9c:5e:21:a3:a7: 25:40:fd:1c:3f:8b:80:89:3e:c5:42:81:99:22:ad:ce:fb:6c: b7:cb:1d:25:7f:44:a1:1b:fd:f1:67:1c:26:62:f2:1a:57:11: ee:9d:fc:5b:6b:3c:fa:84:a3:3d:67:b0:11:51:a5:60:c9:48: 64:06:6f:ab:55:ed:18:f6:b4:34:1f:08:3b:7f:da:5f:22:04: b8:b9:f3:03:a1:33:ef:a7:4e:3d:c3:39:1f:b3:13:3e:44:14: 38:06:4a:d2:3b:dc:e6:f0:a2:eb:d2:ce:86:f1:88:bf:4b:8a: d0:be:2e:80:c0:0f:33:a1:d3:04:a1:18:2a:65:a3:3e:11:0a: 8f:29:ce:21:5d:f6:48:04:f2:18:2c:8e:b3:33:41:25:97:cf: e8:e3:17:63:66:d1:16:29:32:95:c2:e5:9a:9e:07:23:e3:61: ea:a4:36:18:7b:97:3c:dd:3b:b7:6b:7d:8f:c1:ea:80:a6:f5: e2:d5:98:ed:d0:11:b9:24:89:3c:0a:78:6b:75:7e:15:2c:83: f4:b5:68:ab -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUfxbm7vzThfx3IJT87hXj9PSO6S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjQxNjU0MzlaFw0yNzEwMjMxNjU5MzlaMDMxMTAvBgNV BAMTKDhFNjU5MUMyMTRFN0NGNjEzNDBENTNGRUFCRTE4RDU0QTVDRjI1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0D/iJ/ABNYAKhNDEcCVs7i18O q2HdAOpntyXXerqD/VuJcLTkwFljdIFCHgvsiJ+yxVWuNcABVF5CzIHv4hMWjwa8 bqg6WE61ug5VwWgxJruaVidJwKFf4A21F5gk6ddyfaBhk+ThcUIhke+u1vaR5Nsb UfQrrYr14F2wjt9t/I2hftpvGO/oFbLyDegZdgHdQfFWIfw3c883sVe+Dtg6i2X+ +oKgpLjL2j1PA+or5CyjfdkIdeI4e+DRNgARP3yX6QKTxa0ufyH+mCr97gHPCPk3 xW0fdE+t2uTme95gZeE93mNVqMOrsk/XaNzZS9fo78l4SkobaxEetZR7BzFpAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUjmWRwhTnz2E0DVP+q+GNVKXPJYowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg5MTEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAC7NwcDBAC9HwMDBADIlbQwDQYJKoZIhvcNAQELBQADggEBALTKA8MA 1hDy3StpU+ODy1wQ3ughpFhSW367LneRCo1C4ojwi/TYcNms8f20eevGfAecXiGj pyVA/Rw/i4CJPsVCgZkirc77bLfLHSV/RKEb/fFnHCZi8hpXEe6d/FtrPPqEoz1n sBFRpWDJSGQGb6tV7Rj2tDQfCDt/2l8iBLi58wOhM++nTj3DOR+zEz5EFDgGStI7 3ObwouvSzobxiL9LitC+LoDADzOh0wShGCploz4RCo8pziFd9kgE8hgsjrMzQSWX z+jjF2Nm0RYpMpXC5ZqeByPjYeqkNhh7lzzdO7drfY/B6oCm9eLVmO3QEbkkiTwK eGt1fhUsg/S1aKs= -----END CERTIFICATE-----Generated at Mon Oct 26 02:04:22 2026 by rpki-client