$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS151331.roa File: AS151331.roa (raw, json) Hash identifier: KOIDyP+B3v1bNYePZw0W2UPgD2RDFCVVZvkbAyjty6M= Subject key identifier: E3:98:52:4D:33:8B:30:F3:49:2A:7B:B9:C0:89:D5:ED:64:86:26:81 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0485C614C9CC844BCFAFD60ACEB308B59731A34E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS151331.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 151331 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:85:c6:14:c9:cc:84:4b:cf:af:d6:0a:ce:b3:08:b5:97:31:a3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=E398524D338B30F3492A7BB9C089D5ED64862681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fd:0f:47:f0:b9:b1:4a:46:a5:44:7d:66:d3: 3d:1c:a5:71:f4:8f:20:7f:2a:6c:48:30:ec:83:33: de:d1:d8:b4:c1:af:47:2c:6d:0e:ae:2b:56:cb:1b: e3:5e:96:df:80:6e:d5:fe:38:ce:85:5d:04:6e:f8: af:ac:99:8f:21:69:eb:80:c2:91:8c:c2:1a:03:46: d6:70:fe:b4:3d:69:5d:18:15:91:fd:6d:34:06:e5: 82:d5:f4:d5:84:91:e2:60:2e:d3:2d:f6:f6:9f:6d: fc:af:b6:c2:07:10:cd:15:9f:1d:1d:1f:ce:ac:60: 41:d1:7c:35:88:36:7a:12:8d:f3:1f:d4:cb:46:1f: e6:b1:cd:7f:b9:be:2d:17:c3:1c:e2:a3:3b:0d:42: 7b:95:53:d1:53:c1:91:87:7a:ee:30:c3:7c:94:eb: ee:01:b7:17:73:3e:a7:ca:c9:67:d2:3d:62:11:75: 2f:30:a3:1a:f8:3a:6b:3e:5f:a2:05:e9:e7:2a:31: 5e:70:40:9e:5b:f8:4e:54:70:77:52:5a:d0:5c:6a: 2d:99:cd:73:26:cb:d8:a8:9e:77:f6:5f:0b:90:ca: d5:5f:45:1d:82:f0:24:6f:9f:3c:62:09:20:bc:01: b1:e7:cc:d0:0a:7d:6d:3d:e7:5d:63:4d:68:c2:5b: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:52:4D:33:8B:30:F3:49:2A:7B:B9:C0:89:D5:ED:64:86:26:81 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS151331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption a3:a8:90:11:ba:3b:7d:ee:2c:0f:2f:9f:7a:5c:93:e9:09:94: 00:f2:a8:25:9a:13:19:25:62:8d:b7:87:58:b7:87:2f:80:2c: 5d:08:0b:a1:9b:94:65:d5:b1:48:66:9c:82:4e:5c:7d:e0:e0: 4e:33:dd:19:d1:29:d6:bc:ab:f9:a0:2d:3e:82:be:4b:39:60: 19:d3:44:92:cf:37:4a:e6:ab:ab:fb:82:8f:09:08:04:aa:75: 24:28:8e:df:38:5d:57:b4:fe:a9:57:36:cf:cc:5d:96:3f:a1: 00:25:73:b9:85:53:4e:54:7f:71:26:2b:c3:f2:05:04:19:ab: c3:5e:45:c5:e3:b8:a5:f0:79:1d:08:ba:73:b0:92:69:1f:23: ec:14:37:c5:c7:6f:2e:ae:81:e7:c5:d4:d3:cd:69:bc:2f:73: 9b:f6:04:a6:19:b3:42:b5:2a:d5:e8:5f:fe:31:9f:c3:36:15: 4f:9a:33:e6:4e:7d:bb:81:dc:23:d7:47:8d:31:f1:f9:85:c4: 79:fd:b5:ed:b6:7f:3e:c0:63:6f:6e:00:c7:0a:77:99:db:94: f8:1e:1f:1f:86:c1:af:46:e9:91:6f:33:3c:e9:db:21:56:5e: e7:29:51:07:80:ef:76:9a:25:0f:80:f1:99:02:27:37:1e:46: 0e:d5:e1:1c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUBIXGFMnMhEvPr9YKzrMItZcxo04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKEUzOTg1MjREMzM4QjMwRjM0OTJBN0JCOUMwODlENUVENjQ4NjI2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy/Q9H8LmxSkalRH1m0z0cpXH0 jyB/KmxIMOyDM97R2LTBr0csbQ6uK1bLG+Nelt+AbtX+OM6FXQRu+K+smY8haeuA wpGMwhoDRtZw/rQ9aV0YFZH9bTQG5YLV9NWEkeJgLtMt9vafbfyvtsIHEM0Vnx0d H86sYEHRfDWINnoSjfMf1MtGH+axzX+5vi0XwxziozsNQnuVU9FTwZGHeu4ww3yU 6+4BtxdzPqfKyWfSPWIRdS8woxr4Oms+X6IF6ecqMV5wQJ5b+E5UcHdSWtBcai2Z zXMmy9ionnf2XwuQytVfRR2C8CRvnzxiCSC8AbHnzNAKfW09511jTWjCW++XAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU45hSTTOLMPNJKnu5wInV7WSGJoEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTEzMzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPItKAwDQYJKoZIhvcNAQELBQADggEBAKOokBG6O33uLA8vn3pck+kJ lADyqCWaExklYo23h1i3hy+ALF0IC6GblGXVsUhmnIJOXH3g4E4z3RnRKda8q/mg LT6Cvks5YBnTRJLPN0rmq6v7go8JCASqdSQojt84XVe0/qlXNs/MXZY/oQAlc7mF U05Uf3EmK8PyBQQZq8NeRcXjuKXweR0IunOwkmkfI+wUN8XHby6ugefF1NPNabwv c5v2BKYZs0K1KtXoX/4xn8M2FU+aM+ZOfbuB3CPXR40x8fmFxHn9te22fz7AY29u AMcKd5nblPgeHx+Gwa9G6ZFvMzzp2yFWXucpUQeA73aaJQ+A8ZkCJzceRg7V4Rw= -----END CERTIFICATE-----Generated at Wed Sep 23 11:44:52 2026 by rpki-client