$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS31715.roa File: AS31715.roa (raw, json) Hash identifier: g9CaUmiScItaoKONnctkS0oG7rqYU0+Al0f3vriSx98= Subject key identifier: B0:BE:95:2B:E0:93:83:7A:AD:75:22:45:6C:E4:09:2F:28:08:46:50 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0AB60131F0278C536251355207ADAEB2251AAB6A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS31715.roa Signing time: Mon 26 Oct 2026 09:37:44 +0000 ROA not before: Mon 26 Oct 2026 09:32:44 +0000 ROA not after: Mon 25 Oct 2027 09:37:44 +0000 asID: 31715 IP address blocks: 179.254.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b6:01:31:f0:27:8c:53:62:51:35:52:07:ad:ae:b2:25:1a:ab:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 09:32:44 2026 GMT Not After : Oct 25 09:37:44 2027 GMT Subject: CN=B0BE952BE093837AAD7522456CE4092F28084650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:f7:69:4f:80:0b:20:6f:b9:cf:48:72:a3: 26:ae:40:06:e2:2c:07:05:2a:65:a5:57:e4:61:01: 9b:e7:84:39:f2:c0:f1:b9:40:6e:d5:ea:7b:60:4d: 8c:cd:3c:f3:72:a4:90:81:7d:6b:b5:5c:e8:b1:6e: cc:c8:8e:2d:13:26:40:74:33:98:9d:16:3e:0d:85: b5:04:93:58:3a:e8:28:b5:57:f4:5e:c7:f2:e3:b0: 4b:3a:4d:b2:ff:16:32:61:0d:86:e7:2a:08:35:f1: 5f:08:13:0f:56:70:7c:ba:74:2a:7f:25:29:44:f7: 14:2d:34:bd:35:06:d0:9d:03:7c:bf:b7:f3:f7:36: 5c:bf:ca:99:cd:39:db:34:14:59:9e:8d:be:e1:6f: 4b:df:58:83:33:a4:d2:a2:1f:3c:c3:22:a4:79:0e: 79:6f:e4:e6:a7:b3:8a:30:ae:0f:75:a3:47:92:7d: 11:4e:14:5d:e7:f1:c2:9a:7f:64:16:cf:ce:f0:d4: a7:69:2a:5a:26:e4:ee:8d:fe:24:2e:1f:d2:fb:f2: 14:2c:fc:ba:74:72:c9:c5:95:8e:3d:0c:65:1c:2a: 5e:98:2f:c4:3f:c7:73:f6:31:97:f6:ff:60:09:07: 16:48:aa:ff:5a:c2:ef:e6:fd:80:c8:74:e6:be:a0: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:95:2B:E0:93:83:7A:AD:75:22:45:6C:E4:09:2F:28:08:46:50 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS31715.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.209.0/24 Signature Algorithm: sha256WithRSAEncryption be:54:15:05:68:f4:d6:f8:92:ca:e6:6e:ac:93:f1:6a:41:0f: 56:cd:a1:20:b1:e3:f9:bb:f6:0c:b3:a9:b7:8c:9e:d7:55:03: 61:1b:f3:33:41:60:ad:57:64:c8:4d:f6:62:57:12:21:c7:13: 01:a4:4a:3e:11:2f:8b:d3:d4:09:a1:62:73:20:d7:c6:02:a9: a6:df:30:01:4d:6f:c0:1d:12:b4:a0:fe:97:54:8c:c8:1e:f5: 4c:b9:1d:4e:4f:94:68:7d:f6:88:d6:3e:2c:2b:c1:2f:d6:e8: ee:d9:e1:f9:44:57:c8:f7:c3:4a:c5:b0:6d:8d:aa:d9:73:60: 37:4d:48:c7:82:a8:7e:e3:bc:6e:a9:20:50:df:60:28:80:4d: f4:0f:1c:fa:3d:f4:49:01:b9:cd:05:ec:d8:52:1d:1a:17:22: b4:9c:97:3a:a3:10:78:8e:36:a4:58:74:b3:21:2c:bb:2f:37: dd:db:3c:8f:4c:92:3d:09:b4:81:87:7d:a4:e6:34:60:dd:af: 09:10:c7:a3:74:9b:85:2d:74:58:7f:2f:09:51:5a:88:ac:7c: 76:ae:2b:ca:66:12:b1:52:c5:ba:b9:c7:52:79:fa:14:31:17: 2e:3e:d3:cc:c3:44:a7:8d:72:4e:27:92:e0:d7:36:15:74:64: 80:08:03:a9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUCrYBMfAnjFNiUTVSB62usiUaq2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYwOTMyNDRaFw0yNzEwMjUwOTM3NDRaMDMxMTAvBgNV BAMTKEIwQkU5NTJCRTA5MzgzN0FBRDc1MjI0NTZDRTQwOTJGMjgwODQ2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6/dpT4ALIG+5z0hyoyauQAbi LAcFKmWlV+RhAZvnhDnywPG5QG7V6ntgTYzNPPNypJCBfWu1XOixbszIji0TJkB0 M5idFj4NhbUEk1g66Ci1V/Rex/LjsEs6TbL/FjJhDYbnKgg18V8IEw9WcHy6dCp/ JSlE9xQtNL01BtCdA3y/t/P3Nly/ypnNOds0FFmejb7hb0vfWIMzpNKiHzzDIqR5 Dnlv5Oans4owrg91o0eSfRFOFF3n8cKaf2QWz87w1KdpKlom5O6N/iQuH9L78hQs /Lp0csnFlY49DGUcKl6YL8Q/x3P2MZf2/2AJBxZIqv9awu/m/YDIdOa+oBBnAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUsL6VK+CTg3qtdSJFbOQJLygIRlAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMzMTcxNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALP+0TANBgkqhkiG9w0BAQsFAAOCAQEAvlQVBWj01viSyuZurJPxakEP Vs2hILHj+bv2DLOpt4ye11UDYRvzM0FgrVdkyE32YlcSIccTAaRKPhEvi9PUCaFi cyDXxgKppt8wAU1vwB0StKD+l1SMyB71TLkdTk+UaH32iNY+LCvBL9bo7tnh+URX yPfDSsWwbY2q2XNgN01Ix4KofuO8bqkgUN9gKIBN9A8c+j30SQG5zQXs2FIdGhci tJyXOqMQeI42pFh0syEsuy833ds8j0ySPQm0gYd9pOY0YN2vCRDHo3SbhS10WH8v CVFaiKx8dq4rymYSsVLFurnHUnn6FDEXLj7TzMNEp41yTieS4Nc2FXRkgAgDqQ== -----END CERTIFICATE-----Generated at Sat Oct 31 18:28:57 2026 by rpki-client