$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS61622.roa File: AS61622.roa (raw, json) Hash identifier: 0Jg0bvBsiEPDacUkfgQqhtFa5vg0H527IcIuH+gE9Bc= Subject key identifier: 82:58:B8:D2:E3:4A:79:EB:B0:47:4F:26:56:BC:56:22:17:BD:C1:CB Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 21868F31473F54CB372BDC81F6250F9569EF7F43 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS61622.roa Signing time: Tue 03 Nov 2026 14:59:48 +0000 ROA not before: Tue 03 Nov 2026 14:54:48 +0000 ROA not after: Tue 02 Nov 2027 14:59:48 +0000 asID: 61622 IP address blocks: 200.180.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:86:8f:31:47:3f:54:cb:37:2b:dc:81:f6:25:0f:95:69:ef:7f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 3 14:54:48 2026 GMT Not After : Nov 2 14:59:48 2027 GMT Subject: CN=8258B8D2E34A79EBB0474F2656BC562217BDC1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:ae:5b:5c:94:28:99:a9:7f:b3:eb:aa:69: 46:6e:09:d4:e9:e5:06:43:66:66:9a:3e:56:ea:6f: 98:d3:ba:67:73:60:3d:6a:04:6b:de:4c:fd:16:54: b6:d7:85:3b:81:6d:a9:00:e4:7f:e1:10:a6:2b:0c: ea:c2:ec:2c:f2:e8:08:84:4b:e4:56:11:50:55:9b: 10:b8:74:d2:01:1f:d2:9a:40:3b:73:44:ed:1b:48: eb:b7:14:c3:ed:50:cb:e9:54:c1:39:67:89:5f:46: ec:15:a3:bb:da:f2:9b:bb:be:5c:2c:70:27:63:37: 37:57:d7:cf:93:c5:da:eb:f1:d2:13:48:fd:c7:3e: 37:5a:4b:7c:38:f4:dd:9d:a4:aa:20:9e:23:1a:2a: 33:6a:b3:f6:fb:a8:f4:9d:2c:45:7e:29:ed:18:b6: 8d:91:c3:5c:bd:f7:12:77:fa:53:4a:38:2b:7b:20: 50:99:4f:39:3e:23:2c:bd:96:8e:48:e5:f5:ce:49: 34:50:59:8f:33:8d:f6:ec:fb:31:b7:57:07:1e:af: 0b:a1:5c:c7:bc:ee:11:a5:ed:bb:f6:b4:b8:24:67: 1d:7d:1b:5c:45:90:85:46:07:de:58:89:f0:af:48: 26:75:a7:51:db:37:ea:c2:72:a0:f7:3a:2d:cb:29: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:B8:D2:E3:4A:79:EB:B0:47:4F:26:56:BC:56:22:17:BD:C1:CB X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS61622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.170.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:16:13:58:df:23:f2:04:76:4b:f4:1a:4f:1f:75:47:2d:57: 87:af:a3:b4:1a:19:a9:4e:28:35:53:a9:0b:31:a6:9f:76:23: e7:50:6b:c9:08:f0:8c:58:5b:93:cc:03:bf:35:33:7e:17:49: 1e:13:8f:40:72:5f:cf:d9:2f:55:d1:9e:b5:d4:72:52:a6:4e: 4f:a8:bb:85:0d:5e:52:65:4e:2e:8a:4f:a7:db:ed:ea:ca:c2: d6:69:1d:1c:c9:66:99:d7:2e:81:8b:20:97:4e:1a:27:9e:c6: 05:c1:bc:c2:aa:63:55:ce:52:e6:ec:e7:d2:78:5a:90:2d:e7: 23:d7:a9:0a:02:99:9b:22:7e:69:5b:6d:8b:ae:7d:12:4d:d5: e4:7b:06:d6:ce:fc:c2:7e:2d:b7:27:22:56:c1:3c:e0:0b:25: f9:92:cf:a7:51:12:1d:27:56:0a:4d:12:5b:a1:99:8d:81:5d: 41:07:e0:21:83:90:af:05:c2:53:39:d5:97:29:ab:bf:25:a7: 47:b2:cb:be:f3:4b:4c:0b:6a:10:dd:0b:22:25:73:85:b6:c4: 32:9e:80:5d:aa:0a:7f:69:df:9c:30:29:ba:13:70:ef:6b:99: 57:b7:7e:a6:15:aa:6d:29:72:9f:ea:2d:8f:aa:27:10:03:65: c9:f8:19:12 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUIYaPMUc/VMs3K9yB9iUPlWnvf0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDMxNDU0NDhaFw0yNzExMDIxNDU5NDhaMDMxMTAvBgNV BAMTKDgyNThCOEQyRTM0QTc5RUJCMDQ3NEYyNjU2QkM1NjIyMTdCREMxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAq5bXJQomal/s+uqaUZuCdTp 5QZDZmaaPlbqb5jTumdzYD1qBGveTP0WVLbXhTuBbakA5H/hEKYrDOrC7Czy6AiE S+RWEVBVmxC4dNIBH9KaQDtzRO0bSOu3FMPtUMvpVME5Z4lfRuwVo7va8pu7vlws cCdjNzdX18+Txdrr8dITSP3HPjdaS3w49N2dpKogniMaKjNqs/b7qPSdLEV+Ke0Y to2Rw1y99xJ3+lNKOCt7IFCZTzk+Iyy9lo5I5fXOSTRQWY8zjfbs+zG3Vwcerwuh XMe87hGl7bv2tLgkZx19G1xFkIVGB95YifCvSCZ1p1HbN+rCcqD3Oi3LKapXAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUgli40uNKeeuwR08mVrxWIhe9wcswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM2MTYyMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMi0qjANBgkqhkiG9w0BAQsFAAOCAQEAexYTWN8j8gR2S/QaTx91Ry1X h6+jtBoZqU4oNVOpCzGmn3Yj51BryQjwjFhbk8wDvzUzfhdJHhOPQHJfz9kvVdGe tdRyUqZOT6i7hQ1eUmVOLopPp9vt6srC1mkdHMlmmdcugYsgl04aJ57GBcG8wqpj Vc5S5uzn0nhakC3nI9epCgKZmyJ+aVtti659Ek3V5HsG1s78wn4ttyciVsE84Asl +ZLPp1ESHSdWCk0SW6GZjYFdQQfgIYOQrwXCUznVlymrvyWnR7LLvvNLTAtqEN0L IiVzhbbEMp6AXaoKf2nfnDApuhNw72uZV7d+phWqbSlyn+otj6onEANlyfgZEg== -----END CERTIFICATE-----Generated at Thu Nov 5 08:49:23 2026 by rpki-client