$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS210000.roa File: AS210000.roa (raw, json) Hash identifier: iiF++j4Xh0hUiUQraSKUnIDrmP2LvsFq1fQB/08xV6U= Subject key identifier: 42:3C:E7:37:24:2B:5D:30:CF:C8:C3:EF:B2:3B:57:6D:B9:ED:62:1A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 78B024D3D8FAA61FF3128C0A757F64ADA6E058FA Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS210000.roa Signing time: Tue 22 Sep 2026 08:47:04 +0000 ROA not before: Tue 22 Sep 2026 08:42:04 +0000 ROA not after: Tue 21 Sep 2027 08:47:04 +0000 asID: 210000 IP address blocks: 177.177.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 01:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b0:24:d3:d8:fa:a6:1f:f3:12:8c:0a:75:7f:64:ad:a6:e0:58:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:04 2026 GMT Not After : Sep 21 08:47:04 2027 GMT Subject: CN=423CE737242B5D30CFC8C3EFB23B576DB9ED621A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:a8:fd:57:ec:49:0b:b7:e2:1c:3d:bf:73: e6:9e:a6:ca:1b:81:38:02:ec:5f:25:77:f8:d6:4c: 55:16:9e:4f:df:81:26:66:de:3d:81:79:07:95:24: 93:f3:6a:ee:1d:3b:ba:b5:ba:93:19:4b:c3:ee:be: 05:7e:ed:40:81:5e:d9:10:f0:61:fa:c4:b3:86:88: 1a:6b:bf:58:5a:46:b4:2d:7b:40:02:ae:59:3c:e4: 30:0e:63:38:77:ff:8d:9b:6b:01:0c:26:5a:d4:ac: 7c:15:da:90:13:12:b6:55:47:71:9a:17:05:16:0f: 16:1c:98:14:cd:4d:39:ca:3f:14:78:ad:b0:77:ac: 5a:91:91:da:de:f5:fb:dd:e4:e8:e6:e9:ba:35:6b: e0:db:83:ce:07:57:23:34:2f:78:82:70:83:df:cb: 2e:d8:7d:86:54:fd:47:92:49:f0:3f:cc:9e:b6:7d: 9d:09:5a:ff:57:1a:66:c1:56:d1:23:cf:4c:d1:42: 19:b4:df:6c:39:5a:02:a1:ce:21:4a:02:d7:3d:30: 1a:f7:e0:93:16:1e:f2:87:10:79:fb:65:de:41:e4: 4f:91:e7:dc:45:00:d2:b4:ae:67:0c:7b:4a:9d:19: 70:2e:d2:79:9b:9a:89:b7:cf:f1:39:2e:ca:0c:55: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:E7:37:24:2B:5D:30:CF:C8:C3:EF:B2:3B:57:6D:B9:ED:62:1A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS210000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.77.0/24 Signature Algorithm: sha256WithRSAEncryption a1:49:6f:4b:7a:c7:e3:2a:b7:d7:13:21:d0:eb:c0:7f:eb:e6: c7:e6:5b:40:9a:ab:5f:24:5a:72:d5:85:8c:e0:25:60:79:db: 2b:29:5d:40:72:c0:76:03:b3:1c:d5:f1:3d:0a:0b:9d:5f:a0: 1f:09:ee:1b:49:c1:81:31:74:9b:52:cb:73:62:37:f0:11:79: 5c:79:8c:0f:40:18:97:52:cd:1a:be:80:40:88:56:bc:2d:1b: 8c:f1:71:77:ea:56:2d:30:f9:6b:84:3f:ba:46:03:6d:4e:92: ce:2e:b3:db:a1:29:d7:64:e5:2b:6d:c6:73:fb:c7:46:52:be: 8f:31:2f:99:67:55:34:09:cb:cf:a8:a5:7d:c0:71:1c:96:7e: 42:a0:d4:f5:1a:d0:8b:4e:68:34:f5:eb:a6:58:bd:5e:12:58: bd:95:40:13:82:f9:b9:14:7f:71:70:90:e6:87:0a:10:9c:9d: 48:60:b9:ab:c1:a9:9a:e6:ab:76:c0:8a:54:10:89:a5:a7:12: 97:49:71:ab:ad:96:02:8c:52:64:47:50:91:bf:95:c2:d1:ab: bb:ba:76:54:a3:f1:40:1c:60:ad:57:0d:fb:d0:60:55:4b:ff: 93:e9:0c:a9:90:ff:cb:00:5d:e1:3f:a1:27:93:fb:3b:2b:dc: 12:50:26:12 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUeLAk09j6ph/zEowKdX9krabgWPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDRaFw0yNzA5MjEwODQ3MDRaMDMxMTAvBgNV BAMTKDQyM0NFNzM3MjQyQjVEMzBDRkM4QzNFRkIyM0I1NzZEQjlFRDYyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fqj9V+xJC7fiHD2/c+aepsob gTgC7F8ld/jWTFUWnk/fgSZm3j2BeQeVJJPzau4dO7q1upMZS8PuvgV+7UCBXtkQ 8GH6xLOGiBprv1haRrQte0ACrlk85DAOYzh3/42bawEMJlrUrHwV2pATErZVR3Ga FwUWDxYcmBTNTTnKPxR4rbB3rFqRkdre9fvd5Ojm6bo1a+Dbg84HVyM0L3iCcIPf yy7YfYZU/UeSSfA/zJ62fZ0JWv9XGmbBVtEjz0zRQhm032w5WgKhziFKAtc9MBr3 4JMWHvKHEHn7Zd5B5E+R59xFANK0rmcMe0qdGXAu0nmbmom3z/E5LsoMVYiJAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUQjznNyQrXTDPyMPvsjtXbbntYhowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTAwMDAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxsU0wDQYJKoZIhvcNAQELBQADggEBAKFJb0t6x+Mqt9cTIdDrwH/r 5sfmW0Caq18kWnLVhYzgJWB52yspXUBywHYDsxzV8T0KC51foB8J7htJwYExdJtS y3NiN/AReVx5jA9AGJdSzRq+gECIVrwtG4zxcXfqVi0w+WuEP7pGA21Oks4us9uh Kddk5SttxnP7x0ZSvo8xL5lnVTQJy8+opX3AcRyWfkKg1PUa0ItOaDT166ZYvV4S WL2VQBOC+bkUf3FwkOaHChCcnUhguavBqZrmq3bAilQQiaWnEpdJcautlgKMUmRH UJG/lcLRq7u6dlSj8UAcYK1XDfvQYFVL/5PpDKmQ/8sAXeE/oSeT+zsr3BJQJhI= -----END CERTIFICATE-----Generated at Thu Sep 24 18:44:50 2026 by rpki-client