$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152179.roa File: AS152179.roa (raw, json) Hash identifier: l1j7kWPvLQ/WvGC9RDWkmB/AHxwR2kK2wVZ1vfOS3A0= Subject key identifier: 44:C5:8A:14:32:16:E7:EF:50:1D:59:1B:45:0A:EA:2C:A0:EA:29:B4 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3AEE4C72ABA7B2DA82B418786A6AD247FDE99815 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152179.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 152179 IP address blocks: 177.201.209.0/24 maxlen: 24 177.201.210.0/24 maxlen: 24 189.12.129.0/24 maxlen: 24 200.141.176.0/24 maxlen: 24 200.141.178.0/24 maxlen: 24 200.141.187.0/24 maxlen: 24 200.141.191.0/24 maxlen: 24 200.180.183.0/24 maxlen: 24 201.24.224.0/24 maxlen: 24 201.24.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ee:4c:72:ab:a7:b2:da:82:b4:18:78:6a:6a:d2:47:fd:e9:98:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=44C58A143216E7EF501D591B450AEA2CA0EA29B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:e9:87:ab:38:13:8a:55:02:ec:a6:bd:e7: da:fb:7c:89:16:c7:0a:e6:fc:87:53:43:c2:41:d6: 09:72:d4:40:0e:03:9f:92:6f:ed:76:d1:9e:e4:8b: 75:9e:57:2a:59:ab:83:8c:b7:8b:0c:0a:f2:e5:8d: 32:bc:17:b2:bb:93:f8:9c:01:ee:f4:41:21:f0:72: 06:d0:23:96:fa:61:c0:86:dd:8c:5a:68:7e:6a:e4: 0b:0c:23:fa:b5:76:95:3b:11:f1:e2:b7:84:82:0b: e2:91:54:e7:4f:3c:0a:a3:cc:cc:ef:62:14:7d:db: 09:8e:bf:12:95:8d:fe:cd:e3:4b:32:65:07:07:96: bd:07:36:a0:8f:f3:f7:b0:6d:01:b3:e3:3c:29:84: 9d:dd:b3:89:82:b6:c8:32:e7:86:42:73:16:8b:d9: 49:3e:f7:59:34:51:43:7c:21:a0:0d:30:00:d3:3a: 47:40:85:08:60:de:ef:21:8b:a3:b8:6e:d1:f9:d5: 24:e7:b2:e7:e9:cc:64:29:53:24:eb:a1:2e:53:48: a5:9b:f8:25:93:8f:1d:1f:5b:c4:6b:bf:ae:7d:d2: e9:ce:1f:db:01:3b:b6:15:f5:9c:b4:4f:f9:a8:7f: be:2f:f7:91:4b:c2:dd:8c:67:fc:f2:08:e3:64:c1: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:8A:14:32:16:E7:EF:50:1D:59:1B:45:0A:EA:2C:A0:EA:29:B4 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152179.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.209.0-177.201.210.255 189.12.129.0/24 200.141.176.0/24 200.141.178.0/24 200.141.187.0/24 200.141.191.0/24 200.180.183.0/24 201.24.224.0/24 201.24.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ee:2a:c2:c1:5e:ef:f5:6b:3e:2d:c0:18:f0:b5:e7:c7:98: 62:af:25:32:8e:70:6e:ba:2d:ad:39:da:61:cb:8a:5b:96:63: ff:d9:e1:5e:87:77:d6:fc:67:ec:07:78:fd:48:f6:11:38:6f: 25:05:4a:d1:a1:41:a3:75:06:41:17:c0:f9:ac:0c:d6:e6:ad: 88:9c:4d:4f:c9:51:98:4f:9e:68:cf:bb:81:ac:8e:e1:07:04: ce:95:47:21:37:77:1a:11:44:21:1a:35:6e:48:63:e4:f7:6d: 11:4f:1d:ed:36:fa:a6:ea:f3:56:c2:82:5b:81:fd:81:75:1a: a1:9a:10:ba:9f:98:bc:81:ed:40:d8:ff:05:79:7d:31:6d:fc: d9:ac:99:65:10:45:5f:c8:ef:e6:86:1c:6e:4c:03:f0:75:c5: 43:64:3e:4e:5a:c6:fd:6f:a2:6c:8d:28:a7:67:67:b7:4c:ca: 93:98:d8:33:4d:60:d9:d3:9d:0f:b7:2c:e4:b4:e6:94:76:86: 63:8c:ed:db:5c:4f:ea:d4:f5:66:02:18:b9:f8:e7:c4:d9:ef: 93:c2:0d:69:58:ab:1b:d7:c8:3a:b6:5b:29:44:b8:9a:9a:ee: d5:1b:cb:23:88:5c:0f:33:9c:74:76:cc:1d:b9:d4:67:9b:74: cf:7f:cb:32 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIUOu5McqunstqCtBh4amrSR/3pmBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDQ0QzU4QTE0MzIxNkU3RUY1MDFENTkxQjQ1MEFFQTJDQTBFQTI5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfumHqzgTilUC7Ka959r7fIkW xwrm/IdTQ8JB1gly1EAOA5+Sb+120Z7ki3WeVypZq4OMt4sMCvLljTK8F7K7k/ic Ae70QSHwcgbQI5b6YcCG3YxaaH5q5AsMI/q1dpU7EfHit4SCC+KRVOdPPAqjzMzv YhR92wmOvxKVjf7N40syZQcHlr0HNqCP8/ewbQGz4zwphJ3ds4mCtsgy54ZCcxaL 2Uk+91k0UUN8IaANMADTOkdAhQhg3u8hi6O4btH51STnsufpzGQpUyTroS5TSKWb +CWTjx0fW8Rrv6590unOH9sBO7YV9Zy0T/mof74v95FLwt2MZ/zyCONkwfvdAgMB AAGjggJ9MIICeTAdBgNVHQ4EFgQURMWKFDIW5+9QHVkbRQrqLKDqKbQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTIxNzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBGMEQE AgABMD4wDAMEALHJ0QMEALHJ0gMEAL0MgQMEAMiNsAMEAMiNsgMEAMiNuwMEAMiN vwMEAMi0twMEAMkY4AMEAMkY5zANBgkqhkiG9w0BAQsFAAOCAQEAS+4qwsFe7/Vr Pi3AGPC158eYYq8lMo5wbrotrTnaYcuKW5Zj/9nhXod31vxn7Ad4/Uj2EThvJQVK 0aFBo3UGQRfA+awM1uatiJxNT8lRmE+eaM+7gayO4QcEzpVHITd3GhFEIRo1bkhj 5PdtEU8d7Tb6purzVsKCW4H9gXUaoZoQup+YvIHtQNj/BXl9MW382ayZZRBFX8jv 5oYcbkwD8HXFQ2Q+TlrG/W+ibI0op2dnt0zKk5jYM01g2dOdD7cs5LTmlHaGY4zt 21xP6tT1ZgIYufjnxNnvk8INaVirG9fIOrZbKUS4mpru1RvLI4hcDzOcdHbMHbnU Z5t0z3/LMg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:40:15 2026 by rpki-client