$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152726.roa File: AS152726.roa (raw, json) Hash identifier: vTQ6AdBtfwkX6hfTUNvRZPppyjylAuQeVMlBvLiBsSE= Subject key identifier: 07:4B:C8:1B:04:5E:E5:20:D8:EA:4D:4F:A1:6B:27:59:28:69:96:26 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0BFB781F0927197882BC15B76C9562C6E53953FC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152726.roa Signing time: Sat 07 Nov 2026 16:14:46 +0000 ROA not before: Sat 07 Nov 2026 16:09:46 +0000 ROA not after: Sat 06 Nov 2027 16:14:46 +0000 asID: 152726 IP address blocks: 187.14.163.0/24 maxlen: 24 187.55.34.0/24 maxlen: 24 189.31.17.0/24 maxlen: 24 191.45.40.0/24 maxlen: 24 200.138.18.0/24 maxlen: 24 200.149.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fb:78:1f:09:27:19:78:82:bc:15:b7:6c:95:62:c6:e5:39:53:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 7 16:09:46 2026 GMT Not After : Nov 6 16:14:46 2027 GMT Subject: CN=074BC81B045EE520D8EA4D4FA16B275928699626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:18:8f:05:72:99:52:d8:0e:53:5f:6e:3a: a4:79:68:29:05:b1:73:68:0c:52:04:3f:31:05:c1: 9e:70:19:6d:34:10:1c:3b:97:bd:b1:08:57:74:7c: be:98:b2:95:99:d9:e7:f6:4d:2a:de:c8:eb:46:d6: 30:0e:97:7b:0f:b5:98:35:2b:a3:45:1a:b6:b8:3f: ef:74:2a:4f:63:76:03:a6:b9:63:32:c7:9a:bf:ce: c0:63:f5:f7:03:bd:a0:ec:ce:7d:7c:8c:db:c9:6f: d2:e7:a7:2a:f9:aa:97:31:5a:45:b4:f7:25:d7:09: d0:3b:3d:9c:ac:bf:65:34:da:43:41:86:1f:22:52: af:64:9c:2e:52:73:ab:be:e0:d2:21:84:78:32:3c: 2a:11:2d:b2:b3:6c:fc:37:a4:c0:70:8c:53:2a:8c: c0:b8:ce:14:84:5e:10:61:66:84:ee:bb:eb:90:da: b1:a7:d6:99:92:30:3e:05:fb:ac:d2:c2:64:0f:49: 2f:85:96:ef:fc:aa:31:2b:2b:68:fc:6b:fa:c0:9c: 1e:85:30:f3:40:f0:69:b8:ee:43:48:0d:27:4b:e3: 9e:65:2e:5d:aa:bc:ad:87:31:52:c8:90:c5:9f:ba: 22:1a:61:fa:37:65:bb:c3:b7:6c:2b:a5:d6:b8:72: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4B:C8:1B:04:5E:E5:20:D8:EA:4D:4F:A1:6B:27:59:28:69:96:26 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS152726.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.14.163.0/24 187.55.34.0/24 189.31.17.0/24 191.45.40.0/24 200.138.18.0/24 200.149.189.0/24 Signature Algorithm: sha256WithRSAEncryption 82:ba:34:b6:7a:80:ba:69:19:ae:5c:39:66:70:97:76:c4:11: be:07:e1:15:2e:3e:b8:d6:5c:38:4f:0f:42:16:b6:61:27:36: 4b:83:37:76:6b:dd:6c:9a:07:38:62:0c:41:b4:cc:1d:df:9f: cc:e4:b0:5e:30:24:0e:02:6f:fc:da:31:b3:aa:e5:9c:f9:cc: 4c:22:7e:81:7e:4a:86:fc:4b:c7:c0:c3:b4:be:06:30:ae:24: 62:aa:0f:a2:1c:14:99:ba:5c:43:08:3a:97:f7:c8:40:94:92: 1e:94:da:98:09:32:a7:80:24:48:af:45:da:3a:97:74:a1:8f: fd:b3:be:75:70:c6:0a:91:74:17:2d:fb:10:20:83:f7:cf:23: f1:06:c3:7f:b2:63:4e:06:e6:5f:21:3b:6b:e4:da:b1:d5:0b: b1:3a:7f:57:62:e6:50:7b:e3:00:5a:50:58:ed:b6:6d:5c:71: 45:39:61:8b:2f:f9:b8:29:cb:22:22:e1:93:29:e0:4a:c3:a1: 6b:4f:c2:43:b7:0c:07:f4:79:56:7f:4e:6b:5f:4c:48:8d:47: 60:71:01:87:10:33:76:bc:04:90:c2:f9:f5:16:52:59:1f:43: c2:64:33:e8:fc:1a:79:25:c2:66:8d:32:04:5a:18:6b:7b:d2: f5:73:b2:06 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUC/t4HwknGXiCvBW3bJVixuU5U/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDcxNjA5NDZaFw0yNzExMDYxNjE0NDZaMDMxMTAvBgNV BAMTKDA3NEJDODFCMDQ1RUU1MjBEOEVBNEQ0RkExNkIyNzU5Mjg2OTk2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ1BiPBXKZUtgOU19uOqR5aCkF sXNoDFIEPzEFwZ5wGW00EBw7l72xCFd0fL6YspWZ2ef2TSreyOtG1jAOl3sPtZg1 K6NFGra4P+90Kk9jdgOmuWMyx5q/zsBj9fcDvaDszn18jNvJb9Lnpyr5qpcxWkW0 9yXXCdA7PZysv2U02kNBhh8iUq9knC5Sc6u+4NIhhHgyPCoRLbKzbPw3pMBwjFMq jMC4zhSEXhBhZoTuu+uQ2rGn1pmSMD4F+6zSwmQPSS+Flu/8qjErK2j8a/rAnB6F MPNA8Gm47kNIDSdL455lLl2qvK2HMVLIkMWfuiIaYfo3ZbvDt2wrpda4cpF7AgMB AAGjggJjMIICXzAdBgNVHQ4EFgQUB0vIGwRe5SDY6k1PoWsnWShpliYwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTI3MjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoE AgABMCQDBAC7DqMDBAC7NyIDBAC9HxEDBAC/LSgDBADIihIDBADIlb0wDQYJKoZI hvcNAQELBQADggEBAIK6NLZ6gLppGa5cOWZwl3bEEb4H4RUuPrjWXDhPD0IWtmEn NkuDN3Zr3WyaBzhiDEG0zB3fn8zksF4wJA4Cb/zaMbOq5Zz5zEwifoF+Sob8S8fA w7S+BjCuJGKqD6IcFJm6XEMIOpf3yECUkh6U2pgJMqeAJEivRdo6l3Shj/2zvnVw xgqRdBct+xAgg/fPI/EGw3+yY04G5l8hO2vk2rHVC7E6f1di5lB74wBaUFjttm1c cUU5YYsv+bgpyyIi4ZMp4ErDoWtPwkO3DAf0eVZ/TmtfTEiNR2BxAYcQM3a8BJDC +fUWUlkfQ8JkM+j8GnklwmaNMgRaGGt70vVzsgY= -----END CERTIFICATE-----Generated at Sun Nov 15 12:54:09 2026 by rpki-client