$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS59245.roa File: AS59245.roa (raw, json) Hash identifier: Eee5bTEZG4H1+Xb40JVwYhhWvR35NAayxhaZcujtWHA= Subject key identifier: 7F:E7:76:83:54:A2:70:E7:FA:DA:F0:B1:9B:B2:78:13:ED:2B:BA:66 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7CCB3DEA6CF6E967E287847653DD4BECBF4504DA Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS59245.roa Signing time: Sat 31 Oct 2026 10:36:18 +0000 ROA not before: Sat 31 Oct 2026 10:31:18 +0000 ROA not after: Sat 30 Oct 2027 10:36:18 +0000 asID: 59245 IP address blocks: 179.254.211.0/24 maxlen: 24 179.254.222.0/24 maxlen: 24 187.14.162.0/24 maxlen: 24 200.138.17.0/24 maxlen: 24 200.180.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cb:3d:ea:6c:f6:e9:67:e2:87:84:76:53:dd:4b:ec:bf:45:04:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 31 10:31:18 2026 GMT Not After : Oct 30 10:36:18 2027 GMT Subject: CN=7FE7768354A270E7FADAF0B19BB27813ED2BBA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:d1:43:6b:30:ed:42:7b:8a:ae:7a:05:fb: 4d:44:29:de:c2:8a:df:d9:62:ce:bb:77:a0:8f:b0: 14:cd:bd:eb:07:12:d4:a5:61:c6:a4:63:27:ef:c2: 3b:d9:55:c4:36:b1:c2:f0:cf:34:a1:31:dd:f7:90: e2:43:65:48:2e:be:50:e2:f1:64:19:28:ef:fa:b9: f0:c9:45:01:be:70:94:a4:09:8c:47:83:d9:d4:3c: 46:37:ab:f2:fb:f2:47:7c:54:a5:c6:bb:e0:c4:8e: 04:de:63:da:e2:a9:9d:40:8c:d7:48:36:fc:d1:b8: 14:5c:fa:b3:af:ba:b5:f8:e4:ab:9c:10:14:5c:e0: 35:fc:42:ad:9d:8d:62:da:db:15:70:84:b5:ea:3d: bd:cf:2f:17:f3:cc:7f:f2:7c:bc:b8:59:26:13:a6: 0e:23:f2:37:d5:22:6d:6b:2c:78:4c:bc:c7:5a:19: 35:9e:3e:15:74:08:c7:80:a2:5a:4f:18:53:00:21: 38:3b:ad:76:61:47:b1:80:65:29:f9:51:d5:5a:91: ce:c0:a8:63:44:e7:49:8f:2e:10:30:2c:e3:54:28: 53:99:1e:76:cb:4a:46:eb:f6:c7:a3:0c:86:28:d7: 79:6b:c8:03:cf:0d:a2:7e:41:54:e7:95:87:7d:ae: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E7:76:83:54:A2:70:E7:FA:DA:F0:B1:9B:B2:78:13:ED:2B:BA:66 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS59245.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.211.0/24 179.254.222.0/24 187.14.162.0/24 200.138.17.0/24 200.180.175.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7a:be:14:61:66:46:f7:5c:93:b3:ce:41:d6:56:06:84:f4: b7:36:f8:3f:b1:80:c9:c5:78:df:06:00:d1:9b:1c:55:4d:85: 9f:d3:df:7e:9d:dd:c1:bd:e8:f6:b8:88:17:33:8e:d0:44:d0: 52:29:dd:65:3b:3b:09:67:cc:0e:93:f4:6d:4f:36:36:10:4c: 26:ea:63:aa:50:45:4d:55:31:0a:56:d3:7c:5e:42:09:56:59: bf:f6:11:41:5c:da:c6:cc:66:aa:35:4d:e1:22:ab:02:ff:e3: 50:a0:1a:57:55:4e:59:ef:e8:9f:63:71:80:b4:15:68:7c:b4: f3:e9:81:0b:4d:09:55:af:5b:9d:d2:98:b9:79:69:d4:5d:58: 4f:54:a6:26:e5:a7:df:d0:09:d1:eb:99:e5:15:da:7e:eb:aa: 2d:a3:f6:f7:65:46:d5:f7:98:79:28:3e:43:b8:8b:2f:b1:8f: 39:af:28:24:f0:c0:a3:80:90:a0:30:19:92:6c:c8:7d:3b:b3: 9e:51:47:e8:19:d2:52:13:3b:a1:0f:79:bf:33:c9:44:44:57: 63:69:35:9e:2f:19:4c:53:d5:a8:6b:3f:fd:cd:cd:d2:9b:5a: fe:c4:dd:c9:16:81:7a:fc:4f:cc:be:e0:6b:3f:7f:de:7b:f4: c8:df:c1:3f -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUfMs96mz26Wfih4R2U91L7L9FBNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMzExMDMxMThaFw0yNzEwMzAxMDM2MThaMDMxMTAvBgNV BAMTKDdGRTc3NjgzNTRBMjcwRTdGQURBRjBCMTlCQjI3ODEzRUQyQkJBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQNFDazDtQnuKrnoF+01EKd7C it/ZYs67d6CPsBTNvesHEtSlYcakYyfvwjvZVcQ2scLwzzShMd33kOJDZUguvlDi 8WQZKO/6ufDJRQG+cJSkCYxHg9nUPEY3q/L78kd8VKXGu+DEjgTeY9riqZ1AjNdI NvzRuBRc+rOvurX45KucEBRc4DX8Qq2djWLa2xVwhLXqPb3PLxfzzH/yfLy4WSYT pg4j8jfVIm1rLHhMvMdaGTWePhV0CMeAolpPGFMAITg7rXZhR7GAZSn5UdVakc7A qGNE50mPLhAwLONUKFOZHnbLSkbr9sejDIYo13lryAPPDaJ+QVTnlYd9roV3AgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUf+d2g1SicOf62vCxm7J4E+0rumYwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM1OTI0NS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQC AAEwHgMEALP+0wMEALP+3gMEALsOogMEAMiKEQMEAMi0rzANBgkqhkiG9w0BAQsF AAOCAQEAU3q+FGFmRvdck7POQdZWBoT0tzb4P7GAycV43wYA0ZscVU2Fn9Pffp3d wb3o9riIFzOO0ETQUindZTs7CWfMDpP0bU82NhBMJupjqlBFTVUxClbTfF5CCVZZ v/YRQVzaxsxmqjVN4SKrAv/jUKAaV1VOWe/on2NxgLQVaHy08+mBC00JVa9bndKY uXlp1F1YT1SmJuWn39AJ0euZ5RXafuuqLaP292VG1feYeSg+Q7iLL7GPOa8oJPDA o4CQoDAZkmzIfTuznlFH6BnSUhM7oQ95vzPJRERXY2k1ni8ZTFPVqGs//c3N0pta /sTdyRaBevxPzL7gaz9/3nv0yN/BPw== -----END CERTIFICATE-----Generated at Thu Nov 5 08:50:59 2026 by rpki-client