$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS134494.roa File: AS134494.roa (raw, json) Hash identifier: qkg48IXUmNINo1a3snzx4rxF7MtYXO23dTsfrMMaMuM= Subject key identifier: E0:EA:D2:5E:10:47:D5:D1:33:A9:FB:29:FD:2A:B6:C7:25:5D:BD:F3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 76D6F690F9F7EF8FD9AE0AF785318A1634AEBFFC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS134494.roa Signing time: Thu 12 Nov 2026 11:48:08 +0000 ROA not before: Thu 12 Nov 2026 11:43:08 +0000 ROA not after: Thu 11 Nov 2027 11:48:08 +0000 asID: 134494 IP address blocks: 152.234.128.0/24 maxlen: 24 177.201.209.0/24 maxlen: 24 177.201.210.0/24 maxlen: 24 179.69.98.0/24 maxlen: 24 179.253.32.0/24 maxlen: 24 179.254.192.0/24 maxlen: 24 187.14.129.0/24 maxlen: 24 187.15.194.0/24 maxlen: 24 187.55.1.0/24 maxlen: 24 189.12.132.0/24 maxlen: 24 189.31.0.0/24 maxlen: 24 189.31.16.0/24 maxlen: 24 191.45.32.0/24 maxlen: 24 200.138.33.0/24 maxlen: 24 200.141.186.0/24 maxlen: 24 200.180.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d6:f6:90:f9:f7:ef:8f:d9:ae:0a:f7:85:31:8a:16:34:ae:bf:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 12 11:43:08 2026 GMT Not After : Nov 11 11:48:08 2027 GMT Subject: CN=E0EAD25E1047D5D133A9FB29FD2AB6C7255DBDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:3b:35:40:8c:e2:52:8e:7e:b3:84:14:f1: cb:4a:3b:f4:48:1c:20:c5:3b:ff:cb:72:1b:19:31: 3b:19:8e:12:65:99:31:77:a9:7a:c4:9d:85:84:3d: c9:96:ca:4f:73:47:10:ec:bf:93:1b:05:40:65:9b: 34:c7:65:d7:2c:87:e7:70:f1:27:57:32:80:49:c8: 78:38:2b:c6:cb:7f:9e:27:e8:f1:09:bf:0f:34:bf: a4:c2:5a:b4:81:f0:80:ab:bf:09:fa:0f:0d:15:c9: e8:53:fd:7b:cb:74:71:7d:df:8e:63:18:00:65:a5: bb:65:a2:31:4f:1b:fe:10:0a:7e:bb:d3:a0:e3:41: d2:e3:c0:db:2f:44:2b:f3:4c:76:4e:24:e9:ed:37: 1f:0f:4e:79:51:be:5a:b1:5f:2e:37:d2:a0:f3:0b: 01:5d:87:e7:c7:4e:1d:52:7a:20:7d:10:77:55:d6: bb:61:82:e8:13:b9:d5:5d:de:68:e6:38:10:6b:a0: c7:5a:7d:f3:c2:64:96:7f:d0:e1:a3:a6:b6:79:f7: 2b:fd:c6:2e:4a:4e:e3:2f:41:0f:d9:11:62:fe:a6: 54:5a:25:e1:54:24:6c:1f:da:cd:7e:e7:c9:61:a7: c8:e7:e7:fe:ca:f0:18:39:b5:d8:3d:4f:03:11:2b: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:D2:5E:10:47:D5:D1:33:A9:FB:29:FD:2A:B6:C7:25:5D:BD:F3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS134494.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.128.0/24 177.201.209.0-177.201.210.255 179.69.98.0/24 179.253.32.0/24 179.254.192.0/24 187.14.129.0/24 187.15.194.0/24 187.55.1.0/24 189.12.132.0/24 189.31.0.0/24 189.31.16.0/24 191.45.32.0/24 200.138.33.0/24 200.141.186.0/24 200.180.177.0/24 Signature Algorithm: sha256WithRSAEncryption 88:59:e3:49:42:74:cf:4c:b0:55:bb:66:f8:ef:77:e7:42:cd: 2d:e3:d8:7b:c1:08:6f:53:c0:24:f1:11:3c:07:8d:c6:cd:37: 64:1c:32:2a:64:43:fa:95:a7:be:e5:5f:eb:3e:1c:84:7e:78: 99:66:20:fb:1f:57:57:3c:f7:d2:db:55:40:72:1c:08:78:25: e4:76:a3:ee:af:d9:ec:72:b3:7d:51:5e:36:e4:19:59:b7:b3: e6:08:8e:67:c0:e7:56:56:dc:10:bb:0a:f6:73:63:9f:06:af: 4a:99:55:cb:64:40:77:51:b1:9d:2e:8b:3a:03:a2:83:6a:18: 82:b5:d9:4c:0b:a5:29:6a:7f:d7:11:84:8d:9b:42:f7:7d:49: 2d:cd:af:69:fe:8e:07:17:6a:16:b3:9b:a2:4f:96:72:8e:bb: c1:c3:31:63:b8:7d:b5:be:35:62:c9:e1:56:fc:ba:1d:d2:3c: 03:c6:70:5e:51:8c:25:99:13:d7:f5:ac:e1:64:87:5e:1d:c3: 6a:b5:9c:50:51:89:98:9d:55:90:ff:fc:e5:9c:ee:a0:dd:1f: 6a:3b:89:42:1d:ba:e7:38:71:a2:e3:32:fd:23:5b:b7:ce:6c: bb:dd:8c:bf:8e:36:15:75:40:07:3f:5a:82:58:1d:40:48:38: 41:d9:2c:cc -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUdtb2kPn374/Zrgr3hTGKFjSuv/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTIxMTQzMDhaFw0yNzExMTExMTQ4MDhaMDMxMTAvBgNV BAMTKEUwRUFEMjVFMTA0N0Q1RDEzM0E5RkIyOUZEMkFCNkM3MjU1REJERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9Ts1QIziUo5+s4QU8ctKO/RI HCDFO//LchsZMTsZjhJlmTF3qXrEnYWEPcmWyk9zRxDsv5MbBUBlmzTHZdcsh+dw 8SdXMoBJyHg4K8bLf54n6PEJvw80v6TCWrSB8ICrvwn6Dw0VyehT/XvLdHF9345j GABlpbtlojFPG/4QCn6706DjQdLjwNsvRCvzTHZOJOntNx8PTnlRvlqxXy430qDz CwFdh+fHTh1SeiB9EHdV1rthgugTudVd3mjmOBBroMdaffPCZJZ/0OGjprZ59yv9 xi5KTuMvQQ/ZEWL+plRaJeFUJGwf2s1+58lhp8jn5/7K8Bg5tdg9TwMRK+cRAgMB AAGjggKhMIICnTAdBgNVHQ4EFgQU4OrSXhBH1dEzqfsp/Sq2xyVdvfMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxMzQ0OTQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwewYIKwYBBQUHAQcBAf8EbDBqMGgE AgABMGIDBACY6oAwDAMEALHJ0QMEALHJ0gMEALNFYgMEALP9IAMEALP+wAMEALsO gQMEALsPwgMEALs3AQMEAL0MhAMEAL0fAAMEAL0fEAMEAL8tIAMEAMiKIQMEAMiN ugMEAMi0sTANBgkqhkiG9w0BAQsFAAOCAQEAiFnjSUJ0z0ywVbtm+O9350LNLePY e8EIb1PAJPERPAeNxs03ZBwyKmRD+pWnvuVf6z4chH54mWYg+x9XVzz30ttVQHIc CHgl5Haj7q/Z7HKzfVFeNuQZWbez5giOZ8DnVlbcELsK9nNjnwavSplVy2RAd1Gx nS6LOgOig2oYgrXZTAulKWp/1xGEjZtC931JLc2vaf6OBxdqFrObok+Wco67wcMx Y7h9tb41YsnhVvy6HdI8A8ZwXlGMJZkT1/Ws4WSHXh3DarWcUFGJmJ1VkP/85Zzu oN0fajuJQh265zhxouMy/SNbt85su92Mv442FXVABz9aglgdQEg4QdkszA== -----END CERTIFICATE-----Generated at Sat Nov 14 21:34:10 2026 by rpki-client