$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS142482.roa File: AS142482.roa (raw, json) Hash identifier: Dc5Np2N/qmuMkBf6HZ9KC3hoIPYe+ydJFxqLEPVVIqs= Subject key identifier: 08:A2:4A:E5:82:30:B0:BE:24:3A:58:2F:D1:1B:45:98:F5:84:B0:BB Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7E3BC276FE2E63396775E10F39819CD8540A41E1 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS142482.roa Signing time: Thu 24 Sep 2026 05:47:06 +0000 ROA not before: Thu 24 Sep 2026 05:42:06 +0000 ROA not after: Thu 23 Sep 2027 05:47:06 +0000 asID: 142482 IP address blocks: 200.180.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 01:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3b:c2:76:fe:2e:63:39:67:75:e1:0f:39:81:9c:d8:54:0a:41:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 24 05:42:06 2026 GMT Not After : Sep 23 05:47:06 2027 GMT Subject: CN=08A24AE58230B0BE243A582FD11B4598F584B0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:50:48:33:a2:16:40:40:37:2e:af:02:7e: b8:a9:93:cd:04:7f:9d:3e:8e:6a:68:55:18:47:19: 9d:0e:67:40:ce:3b:b9:20:1d:0c:fb:35:2d:84:65: a5:e3:5e:6d:d6:dc:ad:96:f1:a6:4a:41:de:7d:17: 62:87:ab:45:2d:fc:1a:bd:89:42:1a:91:42:76:57: 06:6c:01:1e:f9:a3:2e:91:7f:2d:07:ec:3e:91:8c: 64:8f:a0:a2:73:f6:65:1f:65:fe:cd:9f:c3:79:f5: 73:b1:19:ec:72:78:c3:5d:46:9b:d6:2c:5f:6f:9c: 72:58:ba:29:1f:b7:5e:c3:11:99:66:63:c6:6d:b7: 67:4d:7a:40:7a:f5:dc:04:74:d8:e2:80:3c:7d:f6: d8:24:00:cf:29:a7:0d:5c:88:6b:1a:62:00:9d:d9: 90:36:71:7c:6f:f5:97:8f:3d:1f:74:27:7b:e0:c9: 40:93:ee:d4:4f:c5:bf:87:42:11:b4:a8:3b:69:f3: d2:d7:7e:85:3c:47:0f:51:d3:ac:38:a5:60:82:d9: 5f:77:56:ce:98:21:f9:5c:a5:b9:9e:43:d3:50:05: 2f:1e:f0:e8:cd:fa:31:52:a0:af:8b:0c:9f:57:56: e2:b8:14:89:fb:61:16:70:ec:49:52:ad:c9:ee:de: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:4A:E5:82:30:B0:BE:24:3A:58:2F:D1:1B:45:98:F5:84:B0:BB X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS142482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.176.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ec:9e:fe:85:6e:ad:af:cd:c5:88:66:2e:5b:d7:26:1d:32: 73:ca:c2:6f:d3:6d:9e:86:76:dc:b3:70:a6:41:66:70:5f:65: a8:5c:90:b4:28:f2:ef:25:76:ac:f5:91:2f:37:aa:08:84:ee: 85:de:85:46:c9:b8:7c:9d:17:00:b1:f3:18:87:05:eb:d3:d9: 51:36:05:fa:29:56:89:fe:03:b5:7f:88:37:7c:01:34:38:d0: 3e:53:9f:f3:1b:84:1a:57:b1:f1:df:08:65:38:e8:31:56:8c: d1:48:59:02:ad:6f:e9:1c:0d:b4:f6:68:72:1f:d4:88:88:85: cd:65:58:34:7a:2d:ab:86:0d:08:74:71:6c:ae:c7:79:80:70: 23:53:5f:cb:c7:d4:66:33:7f:c7:96:38:e6:df:54:6b:6f:9f: 9f:8d:07:a4:19:99:ce:99:78:6f:40:a9:f1:4e:ae:62:d7:a0: 86:54:c3:17:ac:e4:f5:e7:e6:d2:a8:14:40:ee:79:24:76:ae: 5c:18:95:de:77:f0:48:82:a6:7a:0b:a3:7d:1a:f2:0b:83:ed: 74:ca:f6:3d:9b:89:ca:10:37:43:09:63:95:1f:0f:bf:a9:59: f7:cd:7b:42:6b:ab:d7:d9:97:c8:a9:4f:27:0f:96:25:5c:32: 52:37:5d:3a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUfjvCdv4uYzlndeEPOYGc2FQKQeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjQwNTQyMDZaFw0yNzA5MjMwNTQ3MDZaMDMxMTAvBgNV BAMTKDA4QTI0QUU1ODIzMEIwQkUyNDNBNTgyRkQxMUI0NTk4RjU4NEIwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmlBIM6IWQEA3Lq8Cfripk80E f50+jmpoVRhHGZ0OZ0DOO7kgHQz7NS2EZaXjXm3W3K2W8aZKQd59F2KHq0Ut/Bq9 iUIakUJ2VwZsAR75oy6Rfy0H7D6RjGSPoKJz9mUfZf7Nn8N59XOxGexyeMNdRpvW LF9vnHJYuikft17DEZlmY8Ztt2dNekB69dwEdNjigDx99tgkAM8ppw1ciGsaYgCd 2ZA2cXxv9ZePPR90J3vgyUCT7tRPxb+HQhG0qDtp89LXfoU8Rw9R06w4pWCC2V93 Vs6YIflcpbmeQ9NQBS8e8OjN+jFSoK+LDJ9XVuK4FIn7YRZw7ElSrcnu3qfRAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUCKJK5YIwsL4kOlgv0RtFmPWEsLswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNDI0ODIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADItLAwDQYJKoZIhvcNAQELBQADggEBAHLsnv6Fbq2vzcWIZi5b1yYd MnPKwm/TbZ6GdtyzcKZBZnBfZahckLQo8u8ldqz1kS83qgiE7oXehUbJuHydFwCx 8xiHBevT2VE2BfopVon+A7V/iDd8ATQ40D5Tn/MbhBpXsfHfCGU46DFWjNFIWQKt b+kcDbT2aHIf1IiIhc1lWDR6LauGDQh0cWyux3mAcCNTX8vH1GYzf8eWOObfVGtv n5+NB6QZmc6ZeG9AqfFOrmLXoIZUwxes5PXn5tKoFEDueSR2rlwYld538EiCpnoL o30a8guD7XTK9j2bicoQN0MJY5UfD7+pWffNe0Jrq9fZl8ipTycPliVcMlI3XTo= -----END CERTIFICATE-----Generated at Thu Sep 24 18:44:51 2026 by rpki-client