$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219047.roa File: AS219047.roa (raw, json) Hash identifier: Q6E0hWejTEVMcbb7mO5Tr3pIhF9x2NuqotTGoHZdjtY= Subject key identifier: 0C:EE:F4:97:79:B3:88:65:A3:30:A3:7D:5B:13:FB:51:88:8A:F5:A3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 475CBC35B4EB3434D74A0A8AE8321B53AD188C4E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219047.roa Signing time: Fri 16 Oct 2026 07:38:35 +0000 ROA not before: Fri 16 Oct 2026 07:33:35 +0000 ROA not after: Fri 15 Oct 2027 07:38:35 +0000 asID: 219047 IP address blocks: 152.234.134.0/24 maxlen: 24 189.12.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 08:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5c:bc:35:b4:eb:34:34:d7:4a:0a:8a:e8:32:1b:53:ad:18:8c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 16 07:33:35 2026 GMT Not After : Oct 15 07:38:35 2027 GMT Subject: CN=0CEEF49779B38865A330A37D5B13FB51888AF5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:96:66:bb:33:e2:86:99:cc:25:a7:32:6f: ea:aa:ce:c7:33:57:88:4b:52:ad:67:e9:24:9a:3a: a9:a5:0a:b9:57:91:f4:6b:cd:a1:2e:e2:33:0e:3b: 94:63:a1:bc:60:ff:e3:5a:ad:2d:7f:1c:a6:41:ac: bf:73:a4:5a:9e:26:ad:07:a5:9d:34:62:05:32:72: ac:6d:5f:85:de:78:6e:1d:4f:dd:ce:fc:e8:e8:4d: b0:27:e8:30:3e:17:be:22:d4:03:4a:5d:34:8d:4b: 52:eb:1a:9b:8e:b9:0b:30:c4:bc:3a:3d:81:b1:ed: 46:80:95:30:99:bf:80:af:e9:02:16:2e:c9:0d:e9: 50:6c:a8:a8:04:27:be:5d:3e:f5:a5:82:96:aa:ce: 02:20:26:9f:e3:4f:7e:e7:79:1c:a0:37:37:8f:74: 7b:42:c5:2c:e3:63:b9:66:ca:d0:5b:af:36:c9:80: b8:ba:05:1d:e4:4a:4c:39:b7:c2:13:4f:31:c6:28: 02:dd:e8:f7:ab:fd:36:bc:49:ca:25:c7:23:17:40: 42:44:1e:6b:ee:c0:5f:f2:62:f7:68:df:19:06:e0: 44:54:13:24:25:a8:14:68:ff:65:76:d5:5e:e9:1c: 66:94:32:d5:c6:3c:5e:67:a2:1c:82:5d:32:e3:fb: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:F4:97:79:B3:88:65:A3:30:A3:7D:5B:13:FB:51:88:8A:F5:A3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219047.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.134.0/24 189.12.130.0/24 Signature Algorithm: sha256WithRSAEncryption 80:d4:6d:85:54:9e:d7:a1:2e:21:d7:56:eb:f7:3a:b2:b2:ce: fd:f8:ab:bf:18:83:76:9d:88:86:72:3b:7c:6c:e0:0c:5f:de: e8:e9:52:5b:aa:32:6b:f9:de:b3:94:4b:ac:83:14:fa:e5:a5: 54:fe:50:92:9f:b1:e8:63:f3:1f:be:ee:ed:42:18:22:50:c7: 5d:fe:ca:e9:27:b2:fc:8d:5e:b2:44:74:0b:ef:9f:dc:b6:40: 29:04:75:af:66:3c:c0:3d:92:cb:06:23:6b:ba:6e:d4:9b:ff: b3:61:86:d8:ed:ff:51:da:b2:c9:18:a1:a0:3e:25:df:1f:dd: 73:5b:53:63:1b:f1:cd:fd:74:84:31:1a:e0:4f:4a:d3:02:f2: e1:eb:c4:9c:0b:1d:5f:cf:85:6b:c3:9c:60:53:56:ef:3d:b4: 9e:0f:4d:7b:77:39:dd:cd:e4:2c:c1:78:fe:f5:56:22:f4:d2: 08:fa:b7:a5:42:23:6e:74:94:01:e1:b0:da:2f:c1:d5:c8:5a: 8b:19:14:78:d4:5f:90:b1:ba:a9:e9:21:97:48:9e:a8:66:a4: ff:d5:92:a5:2a:07:6b:33:39:9d:c0:42:7f:d6:4f:45:6a:ae: 2b:65:0a:06:4d:f5:2d:d5:1d:7d:78:c1:a2:e4:91:55:47:d7: bc:a7:c8:6f -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUR1y8NbTrNDTXSgqK6DIbU60YjE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMTYwNzMzMzVaFw0yNzEwMTUwNzM4MzVaMDMxMTAvBgNV BAMTKDBDRUVGNDk3NzlCMzg4NjVBMzMwQTM3RDVCMTNGQjUxODg4QUY1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyApZmuzPihpnMJacyb+qqzscz V4hLUq1n6SSaOqmlCrlXkfRrzaEu4jMOO5Rjobxg/+NarS1/HKZBrL9zpFqeJq0H pZ00YgUycqxtX4XeeG4dT93O/OjoTbAn6DA+F74i1ANKXTSNS1LrGpuOuQswxLw6 PYGx7UaAlTCZv4Cv6QIWLskN6VBsqKgEJ75dPvWlgpaqzgIgJp/jT37neRygNzeP dHtCxSzjY7lmytBbrzbJgLi6BR3kSkw5t8ITTzHGKALd6Per/Ta8ScolxyMXQEJE HmvuwF/yYvdo3xkG4ERUEyQlqBRo/2V21V7pHGaUMtXGPF5nohyCXTLj+2XlAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUDO70l3mziGWjMKN9WxP7UYiK9aMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTkwNDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACY6oYDBAC9DIIwDQYJKoZIhvcNAQELBQADggEBAIDUbYVUntehLiHX Vuv3OrKyzv34q78Yg3adiIZyO3xs4Axf3ujpUluqMmv53rOUS6yDFPrlpVT+UJKf sehj8x++7u1CGCJQx13+yuknsvyNXrJEdAvvn9y2QCkEda9mPMA9kssGI2u6btSb /7Nhhtjt/1HasskYoaA+Jd8f3XNbU2Mb8c39dIQxGuBPStMC8uHrxJwLHV/PhWvD nGBTVu89tJ4PTXt3Od3N5CzBeP71ViL00gj6t6VCI250lAHhsNovwdXIWosZFHjU X5CxuqnpIZdInqhmpP/VkqUqB2szOZ3AQn/WT0VqritlCgZN9S3VHX14waLkkVVH 17ynyG8= -----END CERTIFICATE-----Generated at Thu Oct 22 23:13:15 2026 by rpki-client