$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS212259.roa File: AS212259.roa (raw, json) Hash identifier: zNQq/1t8AWu55ZVEvvRm0lpu7iSCnytRBreY8+7BULE= Subject key identifier: AA:28:2C:78:CA:5A:C4:93:4A:B4:0D:E7:E3:58:7B:96:19:C6:84:2B Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2CDD49D71EA05A08E24D70CEE0A2E9D962367537 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS212259.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 212259 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:dd:49:d7:1e:a0:5a:08:e2:4d:70:ce:e0:a2:e9:d9:62:36:75:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=AA282C78CA5AC4934AB40DE7E3587B9619C6842B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:42:96:3c:ba:a9:40:dc:8f:86:f7:0c:77: aa:c2:0a:19:1f:15:8b:a8:bd:97:c6:92:bf:dc:a2: 3b:96:cc:4a:0a:2c:ac:8f:8e:39:fe:7c:40:f7:e6: 95:c2:21:78:2f:64:90:8c:14:c9:0c:af:52:a0:76: 89:ad:48:c7:31:03:10:1f:c5:9b:da:17:04:46:69: fc:65:f1:95:d7:06:b4:67:dd:ff:74:73:ef:c0:c2: f3:e2:fd:ef:46:99:9d:98:76:b3:fc:58:9f:7f:54: 8b:97:79:06:07:74:87:14:86:a9:c0:19:46:10:86: cf:38:63:bd:68:5b:a7:86:db:93:6a:5f:69:2a:99: 1b:a1:58:ba:26:ae:38:2d:96:78:48:44:39:c9:38: 85:02:88:5e:93:a8:3c:d5:a8:7d:ee:08:d6:b1:8a: 1c:95:45:7f:b3:b6:45:b1:99:d8:8a:b5:7c:87:e2: 21:17:2b:78:ef:31:e7:c1:69:30:9e:a6:58:de:f0: b5:78:c3:c1:6a:1c:42:48:f8:4d:c5:76:85:6c:7f: cd:10:7a:dd:a7:ce:be:07:db:57:33:4d:10:cf:00: 45:04:64:52:96:c3:27:05:dd:e8:8e:53:38:92:c4: c5:bc:5d:3d:01:86:c4:59:fd:c5:66:d9:b4:11:99: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:28:2C:78:CA:5A:C4:93:4A:B4:0D:E7:E3:58:7B:96:19:C6:84:2B X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS212259.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 48:70:a7:22:7e:53:c8:eb:a0:24:d7:2a:61:31:b4:e2:14:a1: 9d:b3:9c:3a:b9:74:06:1d:0e:ce:df:ce:eb:3a:06:e6:cc:ce: 5e:1e:ca:c4:40:a4:45:86:7f:96:83:4f:36:e5:78:d4:f8:f8: ca:a6:5f:aa:65:34:45:85:d5:0e:87:74:17:2b:36:05:e1:97: 27:f6:77:a7:28:7a:c5:9d:46:cf:18:34:8d:79:4b:9e:e8:bc: 52:4f:d8:54:c6:39:e7:01:65:b7:a9:da:c4:c5:bb:42:9d:53: c4:94:f5:ea:04:ac:47:85:35:1c:d6:2f:9c:a9:5d:7b:9b:09: ee:e5:81:f1:50:e1:6b:ee:01:f4:ec:7a:86:c1:dc:82:49:1c: 85:d5:20:6c:42:d3:41:80:e0:da:cd:c2:1f:31:b5:6e:bc:61: 37:34:04:84:f3:76:b4:eb:81:9c:20:57:37:cb:d0:64:7d:6e: 94:ff:b4:31:0b:27:88:84:79:54:43:41:88:eb:2f:70:ef:e5: b5:61:1a:6f:18:ce:0b:62:6a:61:ab:62:10:f6:3e:58:e9:4c: 0e:91:12:47:a5:79:c8:08:83:25:f3:bc:40:fa:ac:a0:2b:fb: 95:30:7b:7e:88:2b:34:31:0f:56:10:14:ad:7b:09:e1:6e:1f: 3e:4c:5e:17 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIULN1J1x6gWgjiTXDO4KLp2WI2dTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKEFBMjgyQzc4Q0E1QUM0OTM0QUI0MERFN0UzNTg3Qjk2MTlDNjg0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbkKWPLqpQNyPhvcMd6rCChkf FYuovZfGkr/cojuWzEoKLKyPjjn+fED35pXCIXgvZJCMFMkMr1KgdomtSMcxAxAf xZvaFwRGafxl8ZXXBrRn3f90c+/AwvPi/e9GmZ2YdrP8WJ9/VIuXeQYHdIcUhqnA GUYQhs84Y71oW6eG25NqX2kqmRuhWLomrjgtlnhIRDnJOIUCiF6TqDzVqH3uCNax ihyVRX+ztkWxmdiKtXyH4iEXK3jvMefBaTCeplje8LV4w8FqHEJI+E3FdoVsf80Q et2nzr4H21czTRDPAEUEZFKWwycF3eiOUziSxMW8XT0BhsRZ/cVm2bQRmZtxAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUqigseMpaxJNKtA3n41h7lhnGhCswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTIyNTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPItKAwDQYJKoZIhvcNAQELBQADggEBAEhwpyJ+U8jroCTXKmExtOIU oZ2znDq5dAYdDs7fzus6BubMzl4eysRApEWGf5aDTzbleNT4+MqmX6plNEWF1Q6H dBcrNgXhlyf2d6coesWdRs8YNI15S57ovFJP2FTGOecBZbep2sTFu0KdU8SU9eoE rEeFNRzWL5ypXXubCe7lgfFQ4WvuAfTseobB3IJJHIXVIGxC00GA4NrNwh8xtW68 YTc0BITzdrTrgZwgVzfL0GR9bpT/tDELJ4iEeVRDQYjrL3Dv5bVhGm8YzgtiamGr YhD2PljpTA6REkelecgIgyXzvED6rKAr+5Uwe36IKzQxD1YQFK17CeFuHz5MXhc= -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:39 2026 by rpki-client