$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS199707.roa File: AS199707.roa (raw, json) Hash identifier: sv6ZzdmyG8Y9GDq5Ll+PVRNe8Hn7yePVtrKaa8T3SyE= Subject key identifier: 8D:5E:BD:90:78:99:48:21:9C:69:61:41:6A:E4:87:56:D6:35:CF:08 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3B9AAA1263D1E3F176304ED1F2F58A4E2A3E834B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS199707.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 199707 IP address blocks: 200.141.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:aa:12:63:d1:e3:f1:76:30:4e:d1:f2:f5:8a:4e:2a:3e:83:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=8D5EBD90789948219C6961416AE48756D635CF08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:3b:37:d6:88:fd:67:dc:bd:a9:b3:8c:b2: 17:2e:7b:d0:f4:ad:af:46:23:30:24:8d:f7:ff:b7: f6:f4:96:4c:33:58:62:49:5e:32:3c:ce:08:d2:a9: 75:63:1c:97:b6:96:70:51:b2:c8:ee:5e:f4:2a:9a: f1:42:ed:99:47:4a:20:8a:f1:5b:70:aa:03:93:a3: b8:a7:b6:19:ad:0f:12:70:a1:b2:0c:68:8d:df:a8: f3:4e:a1:29:b2:41:93:c0:8a:25:e7:90:52:61:e3: 1a:31:36:99:b9:0a:bd:13:66:2c:10:cf:ce:a5:10: b6:a7:71:ba:f2:f7:61:3a:37:b8:66:e4:83:0b:b6: e7:86:57:2c:b6:9d:07:0f:f1:b1:bb:d3:16:ad:dd: 79:99:63:96:53:5e:ac:1c:63:8c:33:0d:fa:89:10: c3:40:78:1d:20:be:16:a8:ef:c1:d1:47:22:b3:02: ab:01:ac:ea:73:14:a0:8d:30:3b:7d:7d:f9:6d:eb: 50:e0:7d:ef:4a:a5:46:d7:e9:f4:d7:7c:29:53:5e: 3f:c0:ad:29:5e:be:bb:5a:b0:a6:6c:41:fd:a3:3a: 1a:59:07:1d:7f:47:a2:26:aa:1a:41:5b:07:47:d0: e7:83:34:85:87:3e:2b:10:e9:3e:6b:aa:7a:6d:eb: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:BD:90:78:99:48:21:9C:69:61:41:6A:E4:87:56:D6:35:CF:08 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS199707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.184.0/24 Signature Algorithm: sha256WithRSAEncryption 61:a2:5e:29:92:51:28:6b:ee:c4:07:ab:de:29:58:62:87:6d: 82:25:bf:ab:24:66:f8:64:3f:58:20:b3:9d:ad:19:ad:d1:5e: 60:6b:fc:35:46:e0:c8:96:4f:31:ce:e3:95:b0:bf:7f:45:9d: 63:95:e5:c9:ea:bd:c4:44:cc:1c:2d:9c:23:ac:f6:4b:c1:30: 59:5b:d2:27:ca:16:c0:0a:85:25:e3:65:f0:35:39:fe:f4:b3: bb:be:a3:36:da:24:dc:69:8f:8b:4d:a4:3b:cf:e1:7f:32:cd: ba:10:7d:b2:bb:07:84:f9:dd:af:34:ee:51:e1:3b:78:a8:4e: 25:b5:b3:72:30:0f:70:55:42:49:2b:5f:5e:22:90:fb:6f:a0: c5:b4:7e:83:25:20:ff:0d:04:50:d8:43:55:6d:fa:7a:d1:ff: af:5c:b3:a7:91:b0:96:95:9d:a6:e7:b2:59:75:8d:5f:8e:9a: 9a:5b:ae:fa:bc:f6:f5:3f:4f:d5:68:77:f4:48:f2:16:ac:b7: 01:d2:a2:3c:3a:66:4e:65:82:4d:e2:8b:12:ee:73:a8:7d:44: 2c:b9:c4:20:4c:a7:23:0e:d7:c2:a3:61:82:73:aa:d8:7b:85: 87:d0:6c:b9:ec:21:6c:53:18:5c:23:05:18:b4:05:92:b9:81: af:99:e1:53 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUO5qqEmPR4/F2ME7R8vWKTio+g0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDhENUVCRDkwNzg5OTQ4MjE5QzY5NjE0MTZBRTQ4NzU2RDYzNUNGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRDs31oj9Z9y9qbOMshcue9D0 ra9GIzAkjff/t/b0lkwzWGJJXjI8zgjSqXVjHJe2lnBRssjuXvQqmvFC7ZlHSiCK 8VtwqgOTo7inthmtDxJwobIMaI3fqPNOoSmyQZPAiiXnkFJh4xoxNpm5Cr0TZiwQ z86lELancbry92E6N7hm5IMLtueGVyy2nQcP8bG70xat3XmZY5ZTXqwcY4wzDfqJ EMNAeB0gvhao78HRRyKzAqsBrOpzFKCNMDt9fflt61Dgfe9KpUbX6fTXfClTXj/A rSlevrtasKZsQf2jOhpZBx1/R6ImqhpBWwdH0OeDNIWHPisQ6T5rqnpt6xNHAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUjV69kHiZSCGcaWFBauSHVtY1zwgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxOTk3MDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIjbgwDQYJKoZIhvcNAQELBQADggEBAGGiXimSUShr7sQHq94pWGKH bYIlv6skZvhkP1ggs52tGa3RXmBr/DVG4MiWTzHO45Wwv39FnWOV5cnqvcREzBwt nCOs9kvBMFlb0ifKFsAKhSXjZfA1Of70s7u+ozbaJNxpj4tNpDvP4X8yzboQfbK7 B4T53a807lHhO3ioTiW1s3IwD3BVQkkrX14ikPtvoMW0foMlIP8NBFDYQ1Vt+nrR /69cs6eRsJaVnabnsll1jV+Omppbrvq89vU/T9Vod/RI8hastwHSojw6Zk5lgk3i ixLuc6h9RCy5xCBMpyMO18KjYYJzqth7hYfQbLnsIWxTGFwjBRi0BZK5ga+Z4VM= -----END CERTIFICATE-----Generated at Wed Sep 23 09:40:07 2026 by rpki-client