$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: RUnpmVEYUVyEQ8Yzdsp907zH5saHxG9Xpv00e+d+aN4= Subject key identifier: FA:B1:7A:52:C3:87:FC:45:1C:A5:11:28:7B:40:C4:59:17:FC:E7:60 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5BFD37083611E5EEF86B2007389AC3319B3166EC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS147281.roa Signing time: Tue 22 Sep 2026 08:47:06 +0000 ROA not before: Tue 22 Sep 2026 08:42:06 +0000 ROA not after: Tue 21 Sep 2027 08:47:06 +0000 asID: 147281 IP address blocks: 200.141.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fd:37:08:36:11:e5:ee:f8:6b:20:07:38:9a:c3:31:9b:31:66:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:06 2026 GMT Not After : Sep 21 08:47:06 2027 GMT Subject: CN=FAB17A52C387FC451CA511287B40C45917FCE760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:33:52:7d:80:7d:02:56:75:35:60:0b:44: 0b:bb:33:e7:3f:eb:d8:ba:57:f7:0b:9e:1c:53:09: f2:f2:59:af:5d:23:3a:cd:8c:74:6b:fc:e1:fa:c3: 49:be:4a:b4:f5:a0:01:77:d6:5a:66:d3:66:3f:37: 43:b8:df:d6:f2:0a:3b:a3:a3:36:6d:fd:90:e7:6c: eb:b5:84:f4:d0:9b:24:48:12:83:7e:d5:1f:99:dc: ec:96:29:7e:81:83:94:be:0e:8c:1e:5c:51:b0:47: 25:73:da:10:46:5e:f4:8d:93:0a:9a:77:ab:7c:61: e6:60:05:6e:c5:2a:84:91:c4:9a:15:24:c4:8a:24: 52:7e:da:05:d6:41:b2:23:b0:2b:87:e7:0e:5c:be: cf:37:7e:34:92:af:e4:ec:c2:64:2d:19:cb:21:e9: f3:81:5a:14:47:e8:d2:2b:4d:fa:30:68:ae:c2:1e: b0:3f:2a:67:31:34:ab:1a:cd:03:c1:50:2e:11:fa: 49:15:b9:73:2f:2c:49:ef:5c:98:f8:7a:0c:be:49: eb:40:47:d9:f3:8c:04:54:1b:cd:dc:f3:0a:e0:0b: 07:c0:2e:d8:2f:a8:53:4a:a6:be:b9:e6:f6:45:70: 23:f1:8e:77:cd:18:84:b5:4f:ec:04:a8:8e:cb:9a: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:7A:52:C3:87:FC:45:1C:A5:11:28:7B:40:C4:59:17:FC:E7:60 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.185.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:da:3a:32:6b:19:b9:e3:31:e3:41:ea:5c:ad:8a:bd:c0:85: 51:9a:68:43:93:9f:dd:1a:f0:34:56:29:b8:d6:dc:c7:bf:18: 11:21:de:6e:7a:11:e0:74:c8:2d:37:5a:48:ea:82:44:6a:d3: 8b:89:98:fe:ac:09:80:1b:1d:9b:97:53:3b:e4:f4:72:a7:52: 04:0b:f5:55:6e:78:f7:92:3b:01:ae:b1:e3:5b:8b:b6:b8:9f: d1:18:72:44:18:91:10:96:a1:05:b1:93:f5:14:e9:57:4e:2a: bb:60:2b:9f:4c:c7:ff:2a:d2:dd:09:e3:aa:f1:37:8a:b5:ee: 73:c3:7f:e1:f0:66:07:4c:f2:c7:e0:43:9a:67:4e:43:27:9b: 8f:91:33:74:11:00:a8:fa:51:04:32:ef:65:06:52:29:79:43: 2b:98:c2:f1:92:e2:3b:c8:b7:04:8b:42:56:86:fb:fc:4c:8a: b7:4a:02:76:3e:2f:64:04:bd:5b:c6:30:84:6a:41:21:03:dd: 1a:f6:80:f9:18:0f:ac:f3:5a:00:e6:58:0c:c4:6a:2b:84:c8: c6:2b:98:17:47:e8:60:63:ae:5d:4c:e6:cc:0d:02:77:10:03: 6b:cb:7b:f7:30:e1:4d:47:f7:eb:87:27:fb:f9:ef:ea:80:d1: d5:63:cf:69 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUW/03CDYR5e74ayAHOJrDMZsxZuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDZaFw0yNzA5MjEwODQ3MDZaMDMxMTAvBgNV BAMTKEZBQjE3QTUyQzM4N0ZDNDUxQ0E1MTEyODdCNDBDNDU5MTdGQ0U3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybTNSfYB9AlZ1NWALRAu7M+c/ 69i6V/cLnhxTCfLyWa9dIzrNjHRr/OH6w0m+SrT1oAF31lpm02Y/N0O439byCjuj ozZt/ZDnbOu1hPTQmyRIEoN+1R+Z3OyWKX6Bg5S+DoweXFGwRyVz2hBGXvSNkwqa d6t8YeZgBW7FKoSRxJoVJMSKJFJ+2gXWQbIjsCuH5w5cvs83fjSSr+TswmQtGcsh 6fOBWhRH6NIrTfowaK7CHrA/KmcxNKsazQPBUC4R+kkVuXMvLEnvXJj4egy+SetA R9nzjARUG83c8wrgCwfALtgvqFNKpr655vZFcCPxjnfNGIS1T+wEqI7LmsHxAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU+rF6UsOH/EUcpREoe0DEWRf852AwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIjbkwDQYJKoZIhvcNAQELBQADggEBAG3aOjJrGbnjMeNB6lytir3A hVGaaEOTn90a8DRWKbjW3Me/GBEh3m56EeB0yC03WkjqgkRq04uJmP6sCYAbHZuX Uzvk9HKnUgQL9VVuePeSOwGuseNbi7a4n9EYckQYkRCWoQWxk/UU6VdOKrtgK59M x/8q0t0J46rxN4q17nPDf+HwZgdM8sfgQ5pnTkMnm4+RM3QRAKj6UQQy72UGUil5 QyuYwvGS4jvItwSLQlaG+/xMirdKAnY+L2QEvVvGMIRqQSED3Rr2gPkYD6zzWgDm WAzEaiuEyMYrmBdH6GBjrl1M5swNAncQA2vLe/cw4U1H9+uHJ/v57+qA0dVjz2k= -----END CERTIFICATE-----Generated at Wed Sep 23 09:39:56 2026 by rpki-client