$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa File: AS402857.roa (raw, json) Hash identifier: 4aZ9j3QLtKjf/ntke1t+OlbaxqQCbmma3y3+TTAKokA= Subject key identifier: DA:26:D6:63:D3:16:D2:E4:44:3D:53:48:0D:96:85:80:33:8C:C0:CD Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 10AA9D26C4EBF916F08609192AEC6F86CE89A87C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa Signing time: Sun 27 Sep 2026 01:37:46 +0000 ROA not before: Sun 27 Sep 2026 01:32:46 +0000 ROA not after: Sun 26 Sep 2027 01:37:46 +0000 asID: 402857 IP address blocks: 177.177.64.0/24 maxlen: 24 177.177.65.0/24 maxlen: 24 177.177.66.0/24 maxlen: 24 177.177.67.0/24 maxlen: 24 177.177.68.0/24 maxlen: 24 177.177.69.0/24 maxlen: 24 177.177.70.0/24 maxlen: 24 177.177.71.0/24 maxlen: 24 177.177.72.0/24 maxlen: 24 177.177.73.0/24 maxlen: 24 177.177.74.0/24 maxlen: 24 177.177.75.0/24 maxlen: 24 177.177.76.0/24 maxlen: 24 177.177.78.0/24 maxlen: 24 177.177.79.0/24 maxlen: 24 177.177.84.0/24 maxlen: 24 177.177.85.0/24 maxlen: 24 177.177.86.0/24 maxlen: 24 177.177.87.0/24 maxlen: 24 177.177.88.0/24 maxlen: 24 177.177.89.0/24 maxlen: 24 177.177.90.0/24 maxlen: 24 177.177.91.0/24 maxlen: 24 177.177.92.0/24 maxlen: 24 177.177.93.0/24 maxlen: 24 177.177.94.0/24 maxlen: 24 177.177.95.0/24 maxlen: 24 201.24.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 21:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:aa:9d:26:c4:eb:f9:16:f0:86:09:19:2a:ec:6f:86:ce:89:a8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 27 01:32:46 2026 GMT Not After : Sep 26 01:37:46 2027 GMT Subject: CN=DA26D663D316D2E4443D53480D968580338CC0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:67:83:9d:d9:c0:e6:c4:90:02:79:64:99: 88:c1:2e:ac:57:5f:cf:a2:99:9c:dc:91:a9:e4:de: dc:d8:cf:85:c5:9a:41:41:ee:34:7a:d6:a0:ce:de: 2d:9a:4b:6c:c8:a1:37:ad:e7:05:3f:15:9f:81:3a: 65:f6:68:9b:fa:00:f5:10:5c:75:4b:5e:16:4f:65: 5b:33:62:7f:cd:51:aa:9c:fa:f1:d0:6c:c6:69:9f: 28:67:30:24:cb:a7:9e:be:7e:83:89:38:84:d1:95: 30:aa:ff:7e:5f:52:66:88:d1:e3:19:37:4d:20:3f: 9f:d7:f8:f5:16:f6:7f:52:08:a3:7d:fd:6e:f1:84: e1:ca:5d:a7:b6:b2:85:d3:84:1f:ab:fd:9c:73:33: ad:59:b4:6e:b1:e4:5e:2e:a3:12:9d:f8:c9:ab:c0: 67:4d:fb:a0:43:cb:ba:71:8a:66:58:30:3f:cc:54: e0:a6:98:45:60:fd:75:fb:47:26:e2:b3:73:29:ab: c9:01:57:a5:22:e2:b4:12:5d:8e:7b:db:e5:66:7e: 08:2d:e5:fa:c0:37:c7:73:85:ce:33:9c:f9:0f:c8: 0a:06:9e:df:81:78:ca:aa:96:b0:2f:de:1a:55:b8: 31:a3:f2:fe:e7:30:11:d8:c8:0d:1f:ef:56:fa:98: ef:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:26:D6:63:D3:16:D2:E4:44:3D:53:48:0D:96:85:80:33:8C:C0:CD X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.64.0-177.177.76.255 177.177.78.0/23 177.177.84.0-177.177.95.255 201.24.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:42:83:eb:bc:a4:18:4f:79:67:42:19:57:e4:5e:39:a1:c2: 81:35:b6:02:be:7b:78:f0:2c:6b:64:5b:48:07:5f:66:b3:b2: 42:ab:69:46:3d:13:c6:15:da:46:72:c2:fb:e9:03:0c:75:11: 1c:d4:ea:02:d4:a0:c7:22:4f:30:c7:a1:a7:f1:c2:6d:3f:59: 13:6f:76:e6:8f:a1:81:4b:d3:43:35:8d:ea:83:41:1a:85:b6: c6:41:b1:a0:c9:3d:d3:35:ee:ed:03:9b:96:97:ef:29:d6:ad: da:ee:1f:1e:0a:42:f4:5e:96:9b:34:b5:58:40:6c:53:36:c5: 1f:6b:3b:26:97:c0:1c:db:bb:57:26:82:09:85:30:da:1d:cc: 62:62:7b:34:b7:ba:78:64:b0:b5:3f:9d:1e:d1:0f:49:9e:0d: 97:17:ed:6d:a3:27:73:c5:98:43:e0:b5:89:b2:4c:2e:64:94: ad:f6:c9:42:7f:92:23:bf:e9:3b:f4:2d:16:82:77:04:7f:bf: 5c:24:8c:e8:6c:16:7d:63:94:4a:74:9b:5a:4a:34:4b:fe:e7: 29:d6:f4:b5:3e:c8:fd:62:49:28:05:d2:0f:fd:e6:99:c0:3d: 91:23:e9:cb:5f:5a:88:ef:1a:60:a9:f2:21:25:9f:16:48:8e: 22:e4:20:40 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUEKqdJsTr+RbwhgkZKuxvhs6JqHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjcwMTMyNDZaFw0yNzA5MjYwMTM3NDZaMDMxMTAvBgNV BAMTKERBMjZENjYzRDMxNkQyRTQ0NDNENTM0ODBEOTY4NTgwMzM4Q0MwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFWeDndnA5sSQAnlkmYjBLqxX X8+imZzckank3tzYz4XFmkFB7jR61qDO3i2aS2zIoTet5wU/FZ+BOmX2aJv6APUQ XHVLXhZPZVszYn/NUaqc+vHQbMZpnyhnMCTLp56+foOJOITRlTCq/35fUmaI0eMZ N00gP5/X+PUW9n9SCKN9/W7xhOHKXae2soXThB+r/ZxzM61ZtG6x5F4uoxKd+Mmr wGdN+6BDy7pximZYMD/MVOCmmEVg/XX7Rybis3Mpq8kBV6Ui4rQSXY572+Vmfggt 5frAN8dzhc4znPkPyAoGnt+BeMqqlrAv3hpVuDGj8v7nMBHYyA0f71b6mO+xAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQU2ibWY9MW0uREPVNIDZaFgDOMwM0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4NTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMC4E AgABMCgwDAMEBrGxQAMEALGxTAMEAbGxTjAMAwQCsbFUAwQFsbFAAwQAyRjmMA0G CSqGSIb3DQEBCwUAA4IBAQBvQoPrvKQYT3lnQhlX5F45ocKBNbYCvnt48CxrZFtI B19ms7JCq2lGPRPGFdpGcsL76QMMdREc1OoC1KDHIk8wx6Gn8cJtP1kTb3bmj6GB S9NDNY3qg0EahbbGQbGgyT3TNe7tA5uWl+8p1q3a7h8eCkL0XpabNLVYQGxTNsUf azsml8Ac27tXJoIJhTDaHcxiYns0t7p4ZLC1P50e0Q9Jng2XF+1toydzxZhD4LWJ skwuZJSt9slCf5Ijv+k79C0WgncEf79cJIzobBZ9Y5RKdJtaSjRL/ucp1vS1Psj9 YkkoBdIP/eaZwD2RI+nLX1qI7xpgqfIhJZ8WSI4i5CBA -----END CERTIFICATE-----Generated at Thu Oct 8 07:19:30 2026 by rpki-client