$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS137410.roa File: AS137410.roa (raw, json) Hash identifier: OwKRIHyksiOYK+v/7fnQ6+R+FYhJYPxooAvUpWb2OqA= Subject key identifier: 17:CF:EF:19:2E:8D:F8:CB:F9:51:E9:F7:33:AC:69:26:ED:10:3E:90 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5DE099CBCE83F0B78A68421D8E4AB3C1CEC9BB5C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS137410.roa Signing time: Sat 14 Nov 2026 10:22:58 +0000 ROA not before: Sat 14 Nov 2026 10:17:58 +0000 ROA not after: Sat 13 Nov 2027 10:22:58 +0000 asID: 137410 IP address blocks: 177.201.212.0/24 maxlen: 24 179.254.214.0/24 maxlen: 24 189.12.149.0/24 maxlen: 24 189.30.97.0/24 maxlen: 24 189.30.98.0/24 maxlen: 24 189.31.21.0/24 maxlen: 24 191.45.37.0/24 maxlen: 24 200.141.187.0/24 maxlen: 24 200.180.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e0:99:cb:ce:83:f0:b7:8a:68:42:1d:8e:4a:b3:c1:ce:c9:bb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 14 10:17:58 2026 GMT Not After : Nov 13 10:22:58 2027 GMT Subject: CN=17CFEF192E8DF8CBF951E9F733AC6926ED103E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:34:d7:42:03:19:4c:3b:08:be:e9:78:e9: 3f:22:4d:df:e9:2f:47:1c:62:e0:e7:4d:37:42:ed: 35:1e:fb:5f:a4:d5:f4:84:f9:f9:69:cf:67:82:50: 4d:a1:bc:6a:e4:c5:74:e9:32:17:b2:5b:9c:99:21: f1:e8:f8:66:33:3e:a2:83:1b:0b:f8:23:b3:00:dc: 7d:79:c9:86:53:ed:13:7a:32:7b:61:83:58:55:76: 3a:5a:cd:32:ca:d2:55:f3:50:76:7c:32:1f:05:bf: 49:aa:03:52:e8:b4:9e:d2:f5:0e:17:40:ca:67:0d: be:cf:12:4a:46:9e:81:6a:ef:f5:05:7e:46:70:4f: a8:25:24:87:51:1f:52:b5:7d:68:09:67:2c:cc:7e: 42:d0:29:ff:78:83:e3:eb:ae:b8:52:f5:13:d7:1b: e9:2e:71:2a:3d:13:aa:21:ed:da:1b:d2:b8:62:a5: c9:f5:cd:85:3b:33:d6:ba:9a:8c:34:c2:32:ac:8d: 46:74:9f:2b:57:8c:57:79:d1:0c:29:cc:6e:06:0d: a9:dc:53:9b:57:ec:d1:d6:cf:b3:9c:e6:ee:93:a3: 3a:48:0a:af:fc:4f:f6:60:64:44:cc:ae:44:34:64: ff:30:17:0a:67:51:64:64:94:ea:1c:8c:3a:a7:11: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CF:EF:19:2E:8D:F8:CB:F9:51:E9:F7:33:AC:69:26:ED:10:3E:90 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS137410.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.212.0/24 179.254.214.0/24 189.12.149.0/24 189.30.97.0-189.30.98.255 189.31.21.0/24 191.45.37.0/24 200.141.187.0/24 200.180.174.0/24 Signature Algorithm: sha256WithRSAEncryption 90:20:eb:ec:54:a5:b0:90:40:77:76:f6:83:85:51:50:23:8f: 80:e0:fe:59:b4:bc:61:34:d8:0e:e8:cc:75:61:0f:3d:51:68: 2b:28:bf:5e:a0:43:28:c3:be:5c:f6:0d:5f:b9:97:55:3c:80: be:46:40:90:27:7b:d7:fb:81:43:67:e4:a7:29:b0:d0:05:26: 34:ec:98:95:90:fc:d6:21:e9:b0:39:d0:cb:32:51:10:71:dd: 85:0b:24:7d:d2:63:ea:2c:ff:98:07:3d:32:36:47:7c:89:bb: 32:49:bb:8e:98:49:47:75:1f:cf:e3:ec:f5:0d:48:62:60:b8: 43:71:4e:15:ce:80:11:2a:c2:28:cc:87:7f:e0:50:71:f7:2e: c0:a2:f3:2f:0a:60:a4:c1:69:6e:ee:a3:9b:cf:fc:d1:9e:b0: 7a:a9:78:4f:ff:aa:e2:00:71:97:64:2e:98:79:53:55:b3:50: f5:da:1d:ab:cd:0c:ab:97:54:0f:62:b2:b4:66:4b:0d:e4:b7: 93:6f:ae:68:89:0c:64:58:90:2e:9e:99:67:ff:98:3f:ea:72: d2:29:58:0b:8f:9a:1d:95:d4:dd:30:50:87:c6:9c:b4:81:54: 87:14:6d:15:5e:7d:98:c9:28:dd:f7:92:80:2d:ec:1b:3a:36: c0:6f:e3:f1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXeCZy86D8LeKaEIdjkqzwc7Ju1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTQxMDE3NThaFw0yNzExMTMxMDIyNThaMDMxMTAvBgNV BAMTKDE3Q0ZFRjE5MkU4REY4Q0JGOTUxRTlGNzMzQUM2OTI2RUQxMDNFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvjTXQgMZTDsIvul46T8iTd/p L0ccYuDnTTdC7TUe+1+k1fSE+flpz2eCUE2hvGrkxXTpMheyW5yZIfHo+GYzPqKD Gwv4I7MA3H15yYZT7RN6Mnthg1hVdjpazTLK0lXzUHZ8Mh8Fv0mqA1LotJ7S9Q4X QMpnDb7PEkpGnoFq7/UFfkZwT6glJIdRH1K1fWgJZyzMfkLQKf94g+PrrrhS9RPX G+kucSo9E6oh7dob0rhipcn1zYU7M9a6mow0wjKsjUZ0nytXjFd50QwpzG4GDanc U5tX7NHWz7Oc5u6TozpICq/8T/ZgZETMrkQ0ZP8wFwpnUWRklOocjDqnEStJAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUF8/vGS6N+Mv5Uen3M6xpJu0QPpAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxMzc0MTAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUQYIKwYBBQUHAQcBAf8EQjBAMD4E AgABMDgDBACxydQDBACz/tYDBAC9DJUwDAMEAL0eYQMEAL0eYgMEAL0fFQMEAL8t JQMEAMiNuwMEAMi0rjANBgkqhkiG9w0BAQsFAAOCAQEAkCDr7FSlsJBAd3b2g4VR UCOPgOD+WbS8YTTYDujMdWEPPVFoKyi/XqBDKMO+XPYNX7mXVTyAvkZAkCd71/uB Q2fkpymw0AUmNOyYlZD81iHpsDnQyzJREHHdhQskfdJj6iz/mAc9MjZHfIm7Mkm7 jphJR3Ufz+Ps9Q1IYmC4Q3FOFc6AESrCKMyHf+BQcfcuwKLzLwpgpMFpbu6jm8/8 0Z6weql4T/+q4gBxl2QumHlTVbNQ9dodq80Mq5dUD2KytGZLDeS3k2+uaIkMZFiQ Lp6ZZ/+YP+py0ilYC4+aHZXU3TBQh8actIFUhxRtFV59mMko3feSgC3sGzo2wG/j 8Q== -----END CERTIFICATE-----Generated at Sun Nov 15 01:55:37 2026 by rpki-client