$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219075.roa File: AS219075.roa (raw, json) Hash identifier: V0/QzxP2FjctalEyLxbAfkREpWS0DPfR2DGEWIiE6EI= Subject key identifier: 7A:FB:A2:87:88:36:3C:A0:61:F2:8A:A0:BB:74:B3:81:0B:F1:B9:BC Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 16A3A2980D816A173D76AE711C9ECEE4AF51F1F8 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219075.roa Signing time: Mon 26 Oct 2026 13:24:14 +0000 ROA not before: Mon 26 Oct 2026 13:19:14 +0000 ROA not after: Mon 25 Oct 2027 13:24:14 +0000 asID: 219075 IP address blocks: 187.55.7.0/24 maxlen: 24 189.31.3.0/24 maxlen: 24 200.149.180.0/24 maxlen: 24 200.149.181.0/24 maxlen: 24 200.149.182.0/24 maxlen: 24 200.149.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a3:a2:98:0d:81:6a:17:3d:76:ae:71:1c:9e:ce:e4:af:51:f1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 13:19:14 2026 GMT Not After : Oct 25 13:24:14 2027 GMT Subject: CN=7AFBA28788363CA061F28AA0BB74B3810BF1B9BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:71:7a:60:c0:dd:0e:05:7c:c7:40:ea:3c: 77:b5:05:40:6a:fb:47:86:44:41:2e:56:a3:3f:fa: 88:ea:7b:60:c8:cf:22:13:61:a0:42:97:27:5c:0d: c9:9f:c0:25:07:29:2d:5b:59:9b:16:9f:33:6b:55: 76:9d:99:bf:f6:ed:72:59:e6:aa:fc:5f:08:99:8c: 7f:9b:63:21:97:37:2a:be:18:06:77:3e:14:c4:68: 30:d9:4e:e9:65:f3:8d:7c:ce:a8:1c:33:f8:49:b3: 7e:46:c5:e2:3c:fd:36:8d:64:09:3f:16:58:3f:a2: ae:df:2c:d8:7a:f6:7a:16:f9:1d:37:61:8c:48:25: 71:98:fb:7f:d8:a1:e1:65:b0:0f:65:4d:2c:ea:44: 4c:bd:27:d3:ec:3d:30:97:ec:2d:9d:e0:aa:34:07: 67:70:8e:55:24:98:6b:6c:8b:97:b1:d7:27:ee:c8: ac:2a:d0:8e:7e:2f:29:84:17:87:f2:bd:f3:11:ab: 85:82:9c:11:5f:10:79:83:59:64:4b:d8:9f:e2:72: c8:0c:13:bb:57:8f:71:bc:91:64:77:38:2f:1d:cd: e2:d7:1d:6e:91:34:bf:95:a7:11:7e:9a:ba:91:5f: 35:2a:48:b0:3b:7a:36:6d:ed:ba:6b:2f:af:20:7a: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:A2:87:88:36:3C:A0:61:F2:8A:A0:BB:74:B3:81:0B:F1:B9:BC X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.55.7.0/24 189.31.3.0/24 200.149.180.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:29:62:f7:e6:94:03:4b:71:e0:62:ac:99:af:8e:6e:6a:71: 80:68:38:ef:19:49:e4:b0:f5:42:75:a0:5d:5d:6a:0d:01:9e: 21:4f:41:84:4c:aa:b1:fb:e9:23:49:bb:8b:f4:9c:72:63:6d: 7d:a4:38:42:35:3f:a5:ee:a5:5c:e2:79:ec:ec:d4:a7:bc:08: 71:ae:ed:13:ee:1c:11:d9:ea:04:af:80:0f:c8:8b:f8:9f:71: d7:f9:1b:fd:0c:6f:b8:58:c9:eb:4b:a8:68:0a:82:cd:2c:0d: e2:e5:0b:fd:64:2c:43:d5:ad:59:c0:3c:0a:00:dc:7c:90:fc: c7:ea:23:1f:ea:19:4d:26:3c:a3:e5:53:d9:a2:14:17:a3:30: 8d:f2:7b:f3:f0:6d:64:64:57:ae:66:05:15:87:2c:7c:54:b4: 4e:4a:04:41:3e:c6:84:7c:6c:88:60:b9:88:af:4c:94:f0:94: e5:73:3a:05:36:7b:12:58:63:d3:1e:86:4b:0d:52:9e:20:fd: 4e:c9:f3:b5:10:99:70:7c:22:64:48:4d:bb:8c:bb:a7:ec:8d: 25:38:d9:96:f6:07:04:ae:79:75:92:e8:56:6e:ae:81:bb:16: cc:01:8c:3f:8c:e6:a3:ab:97:05:80:20:c8:45:1d:5f:1f:a1: f2:c0:a2:ef -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUFqOimA2Bahc9dq5xHJ7O5K9R8fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYxMzE5MTRaFw0yNzEwMjUxMzI0MTRaMDMxMTAvBgNV BAMTKDdBRkJBMjg3ODgzNjNDQTA2MUYyOEFBMEJCNzRCMzgxMEJGMUI5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIXF6YMDdDgV8x0DqPHe1BUBq +0eGREEuVqM/+ojqe2DIzyITYaBClydcDcmfwCUHKS1bWZsWnzNrVXadmb/27XJZ 5qr8XwiZjH+bYyGXNyq+GAZ3PhTEaDDZTull8418zqgcM/hJs35GxeI8/TaNZAk/ Flg/oq7fLNh69noW+R03YYxIJXGY+3/YoeFlsA9lTSzqREy9J9PsPTCX7C2d4Ko0 B2dwjlUkmGtsi5ex1yfuyKwq0I5+LymEF4fyvfMRq4WCnBFfEHmDWWRL2J/icsgM E7tXj3G8kWR3OC8dzeLXHW6RNL+VpxF+mrqRXzUqSLA7ejZt7bprL68gelQHAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUevuih4g2PKBh8oqgu3SzgQvxubwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTkwNzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAC7NwcDBAC9HwMDBALIlbQwDQYJKoZIhvcNAQELBQADggEBAAspYvfm lANLceBirJmvjm5qcYBoOO8ZSeSw9UJ1oF1dag0BniFPQYRMqrH76SNJu4v0nHJj bX2kOEI1P6XupVzieezs1Ke8CHGu7RPuHBHZ6gSvgA/Ii/ifcdf5G/0Mb7hYyetL qGgKgs0sDeLlC/1kLEPVrVnAPAoA3HyQ/MfqIx/qGU0mPKPlU9miFBejMI3ye/Pw bWRkV65mBRWHLHxUtE5KBEE+xoR8bIhguYivTJTwlOVzOgU2exJYY9MehksNUp4g /U7J87UQmXB8ImRITbuMu6fsjSU42Zb2BwSueXWS6FZuroG7FswBjD+M5qOrlwWA IMhFHV8fofLAou8= -----END CERTIFICATE-----Generated at Thu Nov 5 08:48:48 2026 by rpki-client