$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: KO88tmKeYRWAwmGhbArmnnYDZQkdq7t7xYpm20E/hSM= Subject key identifier: 9F:81:8E:9E:47:7E:ED:C9:B4:2B:7A:04:58:23:6B:49:E4:31:DB:D3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 73DCF87FE7084DA8CAC5601DF526543E39A2544F Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS393942.roa Signing time: Mon 26 Oct 2026 09:38:05 +0000 ROA not before: Mon 26 Oct 2026 09:33:05 +0000 ROA not after: Mon 25 Oct 2027 09:38:05 +0000 asID: 393942 IP address blocks: 177.201.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dc:f8:7f:e7:08:4d:a8:ca:c5:60:1d:f5:26:54:3e:39:a2:54:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 09:33:05 2026 GMT Not After : Oct 25 09:38:05 2027 GMT Subject: CN=9F818E9E477EEDC9B42B7A0458236B49E431DBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:f1:e1:58:bc:f2:0f:d0:00:c6:83:34:ca: 34:34:ed:af:5c:fd:4c:ce:b8:09:f5:9a:0d:72:4a: 20:c0:27:97:b0:c5:13:64:50:29:20:88:74:f3:91: f3:b3:3a:6e:59:60:19:7d:5a:d8:46:c3:39:9b:34: be:c4:15:a0:8b:55:b5:f5:cc:d6:32:a2:98:92:a9: a9:f9:07:98:08:00:da:e3:9d:36:3d:dd:0e:f5:3d: 82:07:8d:84:75:8b:6f:11:a1:b3:17:3f:32:82:b2: 31:ce:71:1f:71:aa:0d:42:21:a3:5c:86:5f:95:01: 48:5c:2c:94:41:0d:36:b2:05:a5:63:28:63:06:2e: 1a:a0:42:75:d4:c0:10:d0:90:50:3d:ff:e6:ea:2a: 8d:50:08:33:16:63:65:00:a6:d4:3c:78:6f:e3:29: 59:ea:00:ba:76:c8:65:b4:1e:24:1a:7b:98:3e:27: 5f:09:40:93:0c:a2:d5:94:54:85:9a:b5:79:e7:f0: 14:86:8a:03:f7:0a:7b:ba:02:3e:e5:c0:a0:3a:26: 09:d5:03:b7:cc:43:29:e4:76:29:79:8a:d8:f1:96: 30:a9:e5:0b:30:26:16:3b:63:08:85:e0:99:d0:70: 55:b3:3b:bd:37:b3:17:02:5b:f5:80:30:c9:ad:0e: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:81:8E:9E:47:7E:ED:C9:B4:2B:7A:04:58:23:6B:49:E4:31:DB:D3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.223.0/24 Signature Algorithm: sha256WithRSAEncryption c0:06:66:9d:e7:e0:14:d3:50:3d:50:31:4a:1f:80:78:27:e5: 77:79:16:0e:5d:bb:d5:0c:63:7f:4d:0a:6b:ce:dd:6a:6e:f2: 65:ac:91:25:b9:bb:21:be:01:82:4d:18:80:67:76:dd:9a:a0: 74:36:c5:6f:c9:ed:ca:c6:57:95:a8:d7:24:c4:93:72:20:25: 45:34:d3:ca:25:95:24:ea:44:dc:3e:c1:d1:ba:a6:2d:23:7b: 8c:33:38:54:55:69:74:26:bc:eb:da:f5:fb:7a:aa:36:ab:88: 43:68:c7:5a:ce:f7:1f:07:59:05:90:da:ba:fc:d3:25:9f:65: 12:9f:94:ec:08:ff:3e:8b:74:bf:b4:3b:f9:b3:2b:7f:2c:11: d1:d9:a9:ed:91:4d:f3:0d:44:cb:d6:98:35:54:8e:9f:e9:67: 46:8d:b3:41:2f:d3:4f:ac:63:5a:50:ae:f3:51:fa:7a:4f:7f: 85:53:bf:b4:22:a8:92:dc:20:c3:f9:0a:4d:24:2b:6d:ad:21: de:89:87:cc:35:ac:a8:3f:03:6e:81:ff:0c:80:63:77:e9:d3: 53:bc:b3:fa:f2:af:a7:86:32:08:bf:5e:3b:2e:81:76:32:68: 3d:fe:fa:55:05:fe:50:60:71:67:1e:2d:07:63:62:d2:c2:77: a5:5d:60:4d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUc9z4f+cITajKxWAd9SZUPjmiVE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYwOTMzMDVaFw0yNzEwMjUwOTM4MDVaMDMxMTAvBgNV BAMTKDlGODE4RTlFNDc3RUVEQzlCNDJCN0EwNDU4MjM2QjQ5RTQzMURCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Y/HhWLzyD9AAxoM0yjQ07a9c /UzOuAn1mg1ySiDAJ5ewxRNkUCkgiHTzkfOzOm5ZYBl9WthGwzmbNL7EFaCLVbX1 zNYyopiSqan5B5gIANrjnTY93Q71PYIHjYR1i28RobMXPzKCsjHOcR9xqg1CIaNc hl+VAUhcLJRBDTayBaVjKGMGLhqgQnXUwBDQkFA9/+bqKo1QCDMWY2UAptQ8eG/j KVnqALp2yGW0HiQae5g+J18JQJMMotWUVIWatXnn8BSGigP3Cnu6Aj7lwKA6JgnV A7fMQynkdil5itjxljCp5QswJhY7YwiF4JnQcFWzO703sxcCW/WAMMmtDjP5AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUn4GOnkd+7cm0K3oEWCNrSeQx29MwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMzOTM5NDIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxyd8wDQYJKoZIhvcNAQELBQADggEBAMAGZp3n4BTTUD1QMUofgHgn 5Xd5Fg5du9UMY39NCmvO3Wpu8mWskSW5uyG+AYJNGIBndt2aoHQ2xW/J7crGV5Wo 1yTEk3IgJUU008ollSTqRNw+wdG6pi0je4wzOFRVaXQmvOva9ft6qjariENox1rO 9x8HWQWQ2rr80yWfZRKflOwI/z6LdL+0O/mzK38sEdHZqe2RTfMNRMvWmDVUjp/p Z0aNs0Ev00+sY1pQrvNR+npPf4VTv7QiqJLcIMP5Ck0kK22tId6Jh8w1rKg/A26B /wyAY3fp01O8s/ryr6eGMgi/XjsugXYyaD3++lUF/lBgcWceLQdjYtLCd6VdYE0= -----END CERTIFICATE-----Generated at Thu Nov 5 08:54:05 2026 by rpki-client