$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS154132.roa File: AS154132.roa (raw, json) Hash identifier: P1TkjNJfatSFsoTS0ZrIkBW873femDOcNNE49IlShSU= Subject key identifier: E0:D7:49:79:AE:C2:1B:78:AA:E3:02:E7:96:49:30:7A:A8:97:C1:8E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0BB40A35A824F7A9C75C57A802FBD3C311E1D8C5 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS154132.roa Signing time: Fri 06 Nov 2026 11:21:50 +0000 ROA not before: Fri 06 Nov 2026 11:16:50 +0000 ROA not after: Fri 05 Nov 2027 11:21:50 +0000 asID: 154132 IP address blocks: 177.201.202.0/24 maxlen: 24 179.69.109.0/24 maxlen: 24 179.253.44.0/24 maxlen: 24 179.253.52.0/24 maxlen: 24 179.253.56.0/24 maxlen: 24 179.254.212.0/24 maxlen: 24 187.55.8.0/24 maxlen: 24 187.55.9.0/24 maxlen: 24 187.55.38.0/24 maxlen: 24 187.55.39.0/24 maxlen: 24 187.55.46.0/24 maxlen: 24 187.55.51.0/24 maxlen: 24 189.12.180.0/24 maxlen: 24 189.30.104.0/24 maxlen: 24 189.30.126.0/24 maxlen: 24 189.31.18.0/24 maxlen: 24 200.141.58.0/24 maxlen: 24 200.180.168.0/24 maxlen: 24 200.180.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b4:0a:35:a8:24:f7:a9:c7:5c:57:a8:02:fb:d3:c3:11:e1:d8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 6 11:16:50 2026 GMT Not After : Nov 5 11:21:50 2027 GMT Subject: CN=E0D74979AEC21B78AAE302E79649307AA897C18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:9a:2e:7b:9a:c1:9c:f0:a8:b1:15:fd:45: 87:53:72:8a:e4:1a:94:a5:f9:65:d1:f6:90:92:72: 95:91:db:5c:fb:8d:5f:b0:b5:ab:ad:1a:15:65:7b: 61:13:ef:bd:40:ab:5d:05:56:63:e6:9a:37:a8:1a: 82:1c:bc:fe:71:ed:51:89:0d:66:e2:16:b8:bc:00: dd:96:5f:9d:58:45:b9:bb:70:92:d8:33:8a:2c:2f: 28:df:a8:c1:a2:85:a2:20:56:67:bc:c3:17:6b:c4: 15:f1:9a:e2:25:ab:10:ca:96:10:94:7e:b5:1b:56: 55:c6:dd:3e:d8:3e:c6:d2:a7:fe:fc:0b:87:ec:14: cf:62:31:52:f7:8d:61:66:f5:b0:3f:88:31:29:9e: f2:53:ab:bf:56:25:fa:e6:e2:78:7e:32:80:fe:32: 2f:1b:be:9d:53:fa:b2:f9:29:c6:8b:76:4f:25:e8: 3d:65:a6:6e:74:c2:ba:22:75:4c:7a:89:22:ed:25: 8e:6b:75:7b:6f:1f:c4:a5:e6:5d:a6:90:ca:14:59: c8:2d:4b:28:e4:20:53:1b:97:95:35:f0:27:7c:e5: 4b:cc:4e:bf:48:94:76:24:c6:16:b4:14:7d:9a:c0: 95:16:02:86:3c:1a:6c:77:2c:66:9a:69:ce:53:b1: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D7:49:79:AE:C2:1B:78:AA:E3:02:E7:96:49:30:7A:A8:97:C1:8E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS154132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.202.0/24 179.69.109.0/24 179.253.44.0/24 179.253.52.0/24 179.253.56.0/24 179.254.212.0/24 187.55.8.0/23 187.55.38.0/23 187.55.46.0/24 187.55.51.0/24 189.12.180.0/24 189.30.104.0/24 189.30.126.0/24 189.31.18.0/24 200.141.58.0/24 200.180.168.0/24 200.180.172.0/24 Signature Algorithm: sha256WithRSAEncryption 07:82:28:ca:26:27:42:1a:ff:00:a4:ed:bc:94:89:3d:1f:84: eb:4d:eb:f7:29:ca:39:fb:5b:74:b4:da:1d:25:fd:3d:39:fd: 2b:bb:18:4a:ef:29:03:13:80:1a:69:e8:93:cd:c5:5d:85:c2: de:07:f8:84:58:de:4e:91:93:ea:72:32:99:79:c6:18:90:c7: 6a:58:78:e2:f0:b5:84:d9:ec:1a:61:15:9f:9b:da:17:72:c0: 0c:38:70:68:55:5c:a7:c8:e3:d0:95:33:fb:9f:fc:21:22:e1: b0:18:06:8e:fc:7e:6f:5a:cd:31:5e:71:ab:45:f9:57:8a:4c: 10:17:ff:dd:59:d0:98:bf:58:03:61:af:71:a5:c9:70:29:27: ae:72:a0:4c:e6:a7:a4:aa:e3:23:88:d6:13:c1:cb:f6:77:02: b9:93:dd:fe:46:fe:8e:85:26:bd:c8:52:11:c1:72:b0:34:70: c4:25:c7:23:46:56:61:dd:79:09:14:cd:3d:50:d8:6f:ef:08: c5:a0:8a:2d:89:af:a8:a5:78:2a:4f:ef:6b:be:2f:a9:fa:e3: 08:6c:f8:38:fc:22:7b:9c:c8:53:41:09:a3:ed:f6:c0:12:3d: bf:48:5b:05:36:7f:c9:f6:5a:f5:d0:b7:8f:c0:ba:70:71:b3: 94:34:b4:af -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUC7QKNagk96nHXFeoAvvTwxHh2MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDYxMTE2NTBaFw0yNzExMDUxMTIxNTBaMDMxMTAvBgNV BAMTKEUwRDc0OTc5QUVDMjFCNzhBQUUzMDJFNzk2NDkzMDdBQTg5N0MxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6Zoue5rBnPCosRX9RYdTcork GpSl+WXR9pCScpWR21z7jV+wtautGhVle2ET771Aq10FVmPmmjeoGoIcvP5x7VGJ DWbiFri8AN2WX51YRbm7cJLYM4osLyjfqMGihaIgVme8wxdrxBXxmuIlqxDKlhCU frUbVlXG3T7YPsbSp/78C4fsFM9iMVL3jWFm9bA/iDEpnvJTq79WJfrm4nh+MoD+ Mi8bvp1T+rL5KcaLdk8l6D1lpm50wroidUx6iSLtJY5rdXtvH8Sl5l2mkMoUWcgt SyjkIFMbl5U18Cd85UvMTr9IlHYkxha0FH2awJUWAoY8Gmx3LGaaac5Tsc35AgMB AAGjggKlMIICoTAdBgNVHQ4EFgQU4NdJea7CG3iq4wLnlkkweqiXwY4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTQxMzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwfwYIKwYBBQUHAQcBAf8EcDBuMGwE AgABMGYDBACxycoDBACzRW0DBACz/SwDBACz/TQDBACz/TgDBACz/tQDBAG7NwgD BAG7NyYDBAC7Ny4DBAC7NzMDBAC9DLQDBAC9HmgDBAC9Hn4DBAC9HxIDBADIjToD BADItKgDBADItKwwDQYJKoZIhvcNAQELBQADggEBAAeCKMomJ0Ia/wCk7byUiT0f hOtN6/cpyjn7W3S02h0l/T05/Su7GErvKQMTgBpp6JPNxV2Fwt4H+IRY3k6Rk+py Mpl5xhiQx2pYeOLwtYTZ7BphFZ+b2hdywAw4cGhVXKfI49CVM/uf/CEi4bAYBo78 fm9azTFecatF+VeKTBAX/91Z0Ji/WANhr3GlyXApJ65yoEzmp6Sq4yOI1hPBy/Z3 ArmT3f5G/o6FJr3IUhHBcrA0cMQlxyNGVmHdeQkUzT1Q2G/vCMWgii2Jr6ileCpP 72u+L6n64whs+Dj8InucyFNBCaPt9sASPb9IWwU2f8n2WvXQt4/AunBxs5Q0tK8= -----END CERTIFICATE-----Generated at Wed Nov 11 09:08:51 2026 by rpki-client