$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25369.roa File: AS25369.roa (raw, json) Hash identifier: 4O/x3m+PMMxZNngeka9f4qmAW583yBfzP5UiuPcywTc= Subject key identifier: F2:70:91:50:CB:60:D6:49:FC:86:44:3C:00:57:94:1E:56:A7:3A:E1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4CFB6A7774620BB2009AE446D52807A66ABDBE94 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25369.roa Signing time: Mon 05 Oct 2026 16:11:06 +0000 ROA not before: Mon 05 Oct 2026 16:06:06 +0000 ROA not after: Mon 04 Oct 2027 16:11:06 +0000 asID: 25369 IP address blocks: 200.138.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 11:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fb:6a:77:74:62:0b:b2:00:9a:e4:46:d5:28:07:a6:6a:bd:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 5 16:06:06 2026 GMT Not After : Oct 4 16:11:06 2027 GMT Subject: CN=F2709150CB60D649FC86443C0057941E56A73AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:93:7c:cf:3a:95:d8:f3:8f:02:83:e1:a8: 62:8c:d8:db:4e:a1:6e:8e:f2:82:62:7b:60:40:07: 94:54:3b:9f:d9:ef:bc:37:0f:da:d6:d3:ab:be:60: 59:72:f3:a2:92:3c:0b:4b:9c:c5:bd:1b:db:05:41: da:db:c9:49:80:0c:fa:52:bc:3b:97:7a:b6:44:40: b7:3d:63:df:ae:84:fb:ac:e4:d1:31:6e:bd:d7:18: 61:f5:96:28:11:3b:9d:09:b0:a0:d2:22:b5:1f:6c: 1a:7a:c0:cf:91:68:5b:55:3d:7a:99:6b:06:b8:c6: d4:96:06:3b:08:d4:4e:38:8f:a5:13:91:9f:26:c8: 4e:50:ee:32:f4:36:53:f1:4f:9f:5f:04:4b:bc:4a: 2d:07:bb:66:4f:9d:53:c9:f4:5e:ae:95:4b:cd:9c: 98:58:ed:f1:9e:0b:71:b9:33:f2:0d:c1:77:3f:4f: 39:8c:8c:4d:cf:94:57:1a:00:30:f8:a2:89:12:89: 94:21:0f:ac:77:56:ff:04:12:34:1c:c3:63:0f:8b: 95:f9:69:9b:11:5d:47:72:bf:f2:78:0b:e2:b9:1f: 17:7f:a9:cc:9e:30:4e:37:f3:61:67:07:58:70:db: 93:ee:31:c6:17:fe:75:e3:65:d3:b8:96:a1:9c:98: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:70:91:50:CB:60:D6:49:FC:86:44:3C:00:57:94:1E:56:A7:3A:E1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.138.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:96:b0:88:f8:79:82:6d:c2:36:53:fd:bf:59:c4:f3:b8:d5: 60:bb:94:09:06:f3:e4:b8:fc:79:df:c5:0b:b4:cd:e3:b4:28: 54:14:23:15:72:19:80:7e:24:fa:b6:1c:b4:d4:8a:9a:d7:39: 18:f2:9e:0c:b3:39:54:96:f4:77:84:b6:45:64:2b:3d:30:ad: 84:25:6d:e5:18:08:88:11:d6:14:dd:27:a8:1e:5e:d9:8a:b4: fc:15:1b:99:6e:83:65:05:5a:94:23:05:bd:d9:6f:d2:b3:b1: 9a:77:b9:db:54:13:77:dd:ed:df:ff:61:8f:b3:46:6f:2e:bc: d5:a7:5c:d5:37:b7:e0:43:ca:8b:8b:85:31:da:68:da:a1:8c: f4:15:24:fb:dc:05:cf:ec:4a:17:09:d0:7a:49:f9:29:d4:61: 81:c7:fa:71:bc:06:5d:8a:7f:49:fa:a0:7f:1c:88:05:47:0a: 16:98:f6:85:7a:33:af:b8:51:ba:6e:ee:5f:84:f2:b7:eb:33: fc:aa:d7:c5:b8:52:b2:55:3d:e3:ba:e7:34:52:52:43:7d:11: 72:c2:52:38:f9:2d:bb:e1:1a:a0:91:3d:6c:6e:c7:c6:f1:2d: 21:f8:7e:f6:9f:ab:cd:9b:31:3d:fc:5a:fd:40:55:ba:83:68: 01:27:b0:27 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUTPtqd3RiC7IAmuRG1SgHpmq9vpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMDUxNjA2MDZaFw0yNzEwMDQxNjExMDZaMDMxMTAvBgNV BAMTKEYyNzA5MTUwQ0I2MEQ2NDlGQzg2NDQzQzAwNTc5NDFFNTZBNzNBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspJN8zzqV2POPAoPhqGKM2NtO oW6O8oJie2BAB5RUO5/Z77w3D9rW06u+YFly86KSPAtLnMW9G9sFQdrbyUmADPpS vDuXerZEQLc9Y9+uhPus5NExbr3XGGH1ligRO50JsKDSIrUfbBp6wM+RaFtVPXqZ awa4xtSWBjsI1E44j6UTkZ8myE5Q7jL0NlPxT59fBEu8Si0Hu2ZPnVPJ9F6ulUvN nJhY7fGeC3G5M/INwXc/TzmMjE3PlFcaADD4ookSiZQhD6x3Vv8EEjQcw2MPi5X5 aZsRXUdyv/J4C+K5Hxd/qcyeME4382FnB1hw25PuMcYX/nXjZdO4lqGcmMxnAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU8nCRUMtg1kn8hkQ8AFeUHlanOuEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyNTM2OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMiKLjANBgkqhkiG9w0BAQsFAAOCAQEAjZawiPh5gm3CNlP9v1nE87jV YLuUCQbz5Lj8ed/FC7TN47QoVBQjFXIZgH4k+rYctNSKmtc5GPKeDLM5VJb0d4S2 RWQrPTCthCVt5RgIiBHWFN0nqB5e2Yq0/BUbmW6DZQValCMFvdlv0rOxmne521QT d93t3/9hj7NGby681adc1Te34EPKi4uFMdpo2qGM9BUk+9wFz+xKFwnQekn5KdRh gcf6cbwGXYp/SfqgfxyIBUcKFpj2hXozr7hRum7uX4Tyt+sz/KrXxbhSslU947rn NFJSQ30RcsJSOPktu+EaoJE9bG7HxvEtIfh+9p+rzZsxPfxa/UBVuoNoASewJw== -----END CERTIFICATE-----Generated at Tue Oct 20 04:25:24 2026 by rpki-client