$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: JUeFRuw5VVjqDSaUFMhVkwGKkv8Y21xZlYHNVBwYF9U= Subject key identifier: B6:FF:00:49:EB:34:F6:69:8D:50:E1:77:4C:77:29:91:ED:A5:8A:EE Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4D0767BBF80BF68277E3A5C109AA693FECE28B0A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25198.roa Signing time: Sat 03 Oct 2026 03:47:42 +0000 ROA not before: Sat 03 Oct 2026 03:42:42 +0000 ROA not after: Sat 02 Oct 2027 03:47:42 +0000 asID: 25198 IP address blocks: 179.69.80.0/24 maxlen: 24 179.69.112.0/24 maxlen: 24 179.254.208.0/24 maxlen: 24 187.14.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 11:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:07:67:bb:f8:0b:f6:82:77:e3:a5:c1:09:aa:69:3f:ec:e2:8b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 3 03:42:42 2026 GMT Not After : Oct 2 03:47:42 2027 GMT Subject: CN=B6FF0049EB34F6698D50E1774C772991EDA58AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:06:0b:75:b9:3b:f4:3b:09:33:64:e9:08: 3c:c5:78:9a:ea:a4:47:24:1d:32:dc:4f:8d:55:7d: 12:10:b2:c1:91:ee:a6:05:13:0c:63:27:c3:15:fd: a5:f0:9d:be:73:ad:54:c0:79:46:3a:ac:80:2c:c4: 1b:58:bf:a6:41:49:01:15:ad:00:f0:88:20:5d:7e: b3:00:d3:e6:b8:05:b2:fc:39:1a:2c:9e:96:04:40: 5a:e2:72:02:5e:88:1a:11:ca:49:ac:49:98:ce:15: 6b:fe:99:73:56:e9:8f:df:04:44:74:d4:93:42:c3: 2c:55:23:ac:40:ef:c6:71:d1:fc:11:a6:c2:6e:cb: 63:78:97:da:4a:d9:1d:25:66:e7:ad:f2:ad:a5:79: b9:41:73:29:68:69:06:05:33:08:2c:de:06:4d:d1: 41:e8:09:cb:b8:27:18:14:3e:c6:f0:64:77:26:7b: aa:b0:7a:b4:19:62:f5:77:9c:d4:6a:8f:64:4e:14: e6:e0:3d:62:60:26:a2:48:13:86:fc:eb:33:f8:4e: 77:8c:91:17:1a:f6:26:a7:dd:70:3c:16:ee:0c:fa: f8:6d:99:29:a2:fc:d7:71:70:89:c6:c7:f0:5b:44: b8:ca:0d:cd:3e:aa:67:8c:b2:c1:30:25:2f:a8:fc: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FF:00:49:EB:34:F6:69:8D:50:E1:77:4C:77:29:91:ED:A5:8A:EE X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.69.80.0/24 179.69.112.0/24 179.254.208.0/24 187.14.176.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a7:f3:8b:83:e4:54:ee:12:62:11:45:cc:60:14:51:52:2a: ca:60:e3:ee:97:2a:ac:1b:10:ec:ba:66:40:c8:d1:0a:69:53: a7:56:d5:9b:b9:f3:c8:38:ef:05:3b:66:82:e5:88:ac:65:96: a9:99:3a:16:6f:30:27:f1:15:f9:83:7b:14:73:89:6c:1d:0b: 28:62:ae:71:f9:4a:9f:e1:f2:b9:26:66:0c:ea:4d:92:8b:29: 6c:13:4f:c0:e8:c0:c0:c6:bc:a9:11:41:b6:55:82:b0:2b:3f: 3a:2b:a9:4c:d5:df:95:87:4e:ac:4a:dc:d4:46:d9:5d:f6:56: 0b:82:e2:a6:17:96:50:ba:3e:4b:8d:ad:46:2b:3b:71:96:16: c3:e5:82:4b:2d:2d:f3:fa:81:2e:1f:60:40:36:22:fd:62:8e: 4e:5d:5a:17:91:8a:4a:e7:11:22:20:09:e5:fd:ae:c3:8c:63: 92:44:c9:c1:f1:53:08:b7:bf:28:1e:61:07:bf:16:e6:46:d5: c3:97:f9:ba:4b:08:1f:d6:08:19:7d:2b:0e:85:90:1c:fd:78: 93:b5:3e:7b:21:bf:a1:19:16:7d:62:8c:d1:74:78:a0:d8:96: 19:f2:e7:2a:aa:9d:61:20:4d:e1:16:82:d5:40:43:fe:5b:fe: 6b:fc:9e:e0 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTQdnu/gL9oJ346XBCappP+ziiwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMDMwMzQyNDJaFw0yNzEwMDIwMzQ3NDJaMDMxMTAvBgNV BAMTKEI2RkYwMDQ5RUIzNEY2Njk4RDUwRTE3NzRDNzcyOTkxRURBNThBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGPgYLdbk79DsJM2TpCDzFeJrq pEckHTLcT41VfRIQssGR7qYFEwxjJ8MV/aXwnb5zrVTAeUY6rIAsxBtYv6ZBSQEV rQDwiCBdfrMA0+a4BbL8ORosnpYEQFricgJeiBoRykmsSZjOFWv+mXNW6Y/fBER0 1JNCwyxVI6xA78Zx0fwRpsJuy2N4l9pK2R0lZuet8q2leblBcyloaQYFMwgs3gZN 0UHoCcu4JxgUPsbwZHcme6qwerQZYvV3nNRqj2ROFObgPWJgJqJIE4b86zP4TneM kRca9ian3XA8Fu4M+vhtmSmi/NdxcInGx/BbRLjKDc0+qmeMssEwJS+o/DgBAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUtv8ASes09mmNUOF3THcpke2liu4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyNTE5OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQC AAEwGAMEALNFUAMEALNFcAMEALP+0AMEALsOsDANBgkqhkiG9w0BAQsFAAOCAQEA Pqfzi4PkVO4SYhFFzGAUUVIqymDj7pcqrBsQ7LpmQMjRCmlTp1bVm7nzyDjvBTtm guWIrGWWqZk6Fm8wJ/EV+YN7FHOJbB0LKGKucflKn+HyuSZmDOpNkospbBNPwOjA wMa8qRFBtlWCsCs/OiupTNXflYdOrErc1EbZXfZWC4LipheWULo+S42tRis7cZYW w+WCSy0t8/qBLh9gQDYi/WKOTl1aF5GKSucRIiAJ5f2uw4xjkkTJwfFTCLe/KB5h B78W5kbVw5f5uksIH9YIGX0rDoWQHP14k7U+eyG/oRkWfWKM0XR4oNiWGfLnKqqd YSBN4RaC1UBD/lv+a/ye4A== -----END CERTIFICATE-----Generated at Tue Oct 20 04:25:27 2026 by rpki-client