$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS142146.roa File: AS142146.roa (raw, json) Hash identifier: 7myjmY/+xitRLiUrkrL/yl4tHj7WjFZpxQNplov4OQY= Subject key identifier: E3:0F:D7:C7:17:D2:C1:DE:CC:D5:2B:C4:6F:3C:8F:7B:56:8C:2F:0E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 67E013F868FE6A8ECE955762613C53439410565B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS142146.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 142146 IP address blocks: 200.141.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e0:13:f8:68:fe:6a:8e:ce:95:57:62:61:3c:53:43:94:10:56:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=E30FD7C717D2C1DECCD52BC46F3C8F7B568C2F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:d3:88:33:64:50:b7:2b:04:66:c8:2e:04: 67:ac:d4:7f:bb:3e:b4:23:24:74:be:c8:ef:10:64: 12:46:b9:8e:87:5f:93:79:ce:a4:60:4b:be:a2:96: 02:04:27:32:8d:9e:6f:d3:30:9b:52:59:be:8a:fd: 27:bd:3c:05:e3:d2:2b:fd:d5:66:cb:21:22:25:5e: 80:a4:12:39:07:a9:c7:0a:06:0c:00:65:eb:4d:a9: 9e:4f:d4:97:6d:b5:bf:bd:13:f6:82:00:50:d6:42: 12:ef:5f:75:e1:ae:9f:3d:b0:fb:06:d4:9b:05:a0: e2:b9:64:b3:56:e3:99:87:27:03:dd:fe:03:ef:bc: 38:3b:1b:c9:22:f7:b2:c1:d9:6f:e8:83:5f:f7:d2: 72:6c:10:0f:55:f3:dc:b8:94:3f:7f:c9:79:2d:d8: b5:7d:87:7e:ac:91:70:6d:94:94:b6:ea:9d:fa:2e: 27:38:9b:6f:a9:d3:73:bf:86:68:2b:b1:dc:7a:6c: d6:0c:2d:5a:f9:fd:aa:c1:93:e3:02:e6:7e:7e:0b: a3:0f:e6:36:77:28:99:0e:5a:df:25:f2:59:92:fb: 8f:76:ea:93:08:4a:b3:78:f8:e5:24:28:16:4c:39: 6a:25:ee:b1:94:dd:9c:ec:4e:e1:d3:40:63:25:2b: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0F:D7:C7:17:D2:C1:DE:CC:D5:2B:C4:6F:3C:8F:7B:56:8C:2F:0E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS142146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.183.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:a9:25:4b:60:f9:87:16:84:88:cd:e8:1e:3e:ae:56:a5:d8: 9f:64:15:4a:fd:22:0a:a6:8e:94:94:b5:7b:82:78:d3:55:4b: cc:c2:2d:6d:5d:38:a8:62:c0:d1:e5:ec:67:e5:f4:66:a9:ec: ab:70:c3:a5:8c:38:58:8c:21:8b:eb:12:0b:03:a0:60:52:63: 96:7c:65:ed:13:8a:bf:33:0c:1b:11:b1:6f:2b:89:0d:90:b1: 28:0c:12:8f:9c:3f:e4:96:cd:22:94:51:48:88:49:b4:04:24: a0:77:e3:6c:bc:0c:ff:3e:76:09:a4:90:8e:17:bf:3a:bd:c0: c3:02:b9:d6:5a:9c:dc:66:40:03:b0:e7:35:db:0e:ae:30:9a: 5b:ef:40:02:7c:d8:04:f8:7f:e8:e7:0d:00:62:40:2e:5e:4b: 5a:8e:f1:d5:0b:d6:c1:68:c9:bb:fb:d4:de:4b:ac:ea:0a:88: e8:71:55:17:e4:e1:43:a7:5b:43:59:00:c8:f3:e5:e7:67:4d: 2f:03:e1:1d:46:2c:36:53:1a:c2:63:14:3e:c2:48:0f:2e:82: d2:73:3c:33:52:ec:48:8f:ff:fe:85:25:ee:5b:15:c9:1a:2f: 30:f9:20:d9:6a:e9:e2:cd:24:3a:c5:b6:84:6b:12:86:cd:a5: fd:7a:78:fb -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUZ+AT+Gj+ao7OlVdiYTxTQ5QQVlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKEUzMEZEN0M3MTdEMkMxREVDQ0Q1MkJDNDZGM0M4RjdCNTY4QzJGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXtOIM2RQtysEZsguBGes1H+7 PrQjJHS+yO8QZBJGuY6HX5N5zqRgS76ilgIEJzKNnm/TMJtSWb6K/Se9PAXj0iv9 1WbLISIlXoCkEjkHqccKBgwAZetNqZ5P1Jdttb+9E/aCAFDWQhLvX3Xhrp89sPsG 1JsFoOK5ZLNW45mHJwPd/gPvvDg7G8ki97LB2W/og1/30nJsEA9V89y4lD9/yXkt 2LV9h36skXBtlJS26p36Lic4m2+p03O/hmgrsdx6bNYMLVr5/arBk+MC5n5+C6MP 5jZ3KJkOWt8l8lmS+4926pMISrN4+OUkKBZMOWol7rGU3ZzsTuHTQGMlK1SxAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU4w/XxxfSwd7M1SvEbzyPe1aMLw4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNDIxNDYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIjbcwDQYJKoZIhvcNAQELBQADggEBAB+pJUtg+YcWhIjN6B4+rlal 2J9kFUr9IgqmjpSUtXuCeNNVS8zCLW1dOKhiwNHl7Gfl9Gap7Ktww6WMOFiMIYvr EgsDoGBSY5Z8Ze0Tir8zDBsRsW8riQ2QsSgMEo+cP+SWzSKUUUiISbQEJKB342y8 DP8+dgmkkI4Xvzq9wMMCudZanNxmQAOw5zXbDq4wmlvvQAJ82AT4f+jnDQBiQC5e S1qO8dUL1sFoybv71N5LrOoKiOhxVRfk4UOnW0NZAMjz5ednTS8D4R1GLDZTGsJj FD7CSA8ugtJzPDNS7EiP//6FJe5bFckaLzD5INlq6eLNJDrFtoRrEobNpf16ePs= -----END CERTIFICATE-----Generated at Thu Sep 24 08:17:39 2026 by rpki-client