$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS212335.roa File: AS212335.roa (raw, json) Hash identifier: 1oU1IhK+hQD+oH27PJZsjnACGEmPQ3Xrrj2sOQ0Ah/s= Subject key identifier: AD:B7:73:D7:3C:E0:94:E6:3A:D4:14:C9:3D:47:70:4F:1A:BA:70:42 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3A57CDC3B4CD43C06E154D96BFFF684EF02AADDC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS212335.roa Signing time: Tue 22 Sep 2026 08:47:06 +0000 ROA not before: Tue 22 Sep 2026 08:42:06 +0000 ROA not after: Tue 21 Sep 2027 08:47:06 +0000 asID: 212335 IP address blocks: 200.149.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:57:cd:c3:b4:cd:43:c0:6e:15:4d:96:bf:ff:68:4e:f0:2a:ad:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:06 2026 GMT Not After : Sep 21 08:47:06 2027 GMT Subject: CN=ADB773D73CE094E63AD414C93D47704F1ABA7042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:54:9a:13:ef:35:70:c2:4f:d6:20:69:bb: ef:c5:5d:db:6e:ef:cf:7b:02:24:b0:61:6b:24:23: 98:89:e8:55:09:d1:e6:53:2b:99:9a:f0:ec:a0:75: 54:7e:b1:95:e7:b2:16:c5:1a:f6:c7:b1:1d:28:bc: c0:30:16:3a:00:01:75:be:b6:33:74:43:fd:c4:37: d8:52:0e:80:6e:4f:2e:b5:b7:36:85:e6:e4:b0:4b: a1:db:12:8f:4e:16:1e:ba:68:bd:e3:33:5a:ea:3a: 77:18:0e:3a:1b:9d:38:6a:18:6c:07:16:f7:c9:eb: fc:5b:3c:94:59:08:ba:38:97:29:e9:ba:24:fe:a3: d1:dc:66:e4:7b:49:02:22:37:b7:e4:6b:f4:06:41: 5f:05:5f:fc:a2:5e:48:d5:f7:bf:70:d4:49:45:80: 94:20:54:a5:05:fe:48:f7:0f:4e:5b:28:dc:81:99: d6:1c:13:9c:41:35:48:cd:66:f1:e0:f1:d1:62:f4: 1f:e3:80:c0:ca:fb:4c:de:0d:e5:cf:08:5c:6c:fe: 17:ac:7a:eb:e0:7f:90:9e:23:1c:f7:be:a1:37:cf: d3:59:12:bb:0a:2d:93:d7:f9:35:fd:23:3c:07:e3: 48:13:0a:2a:9e:50:77:16:df:eb:03:3f:18:22:cd: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:73:D7:3C:E0:94:E6:3A:D4:14:C9:3D:47:70:4F:1A:BA:70:42 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS212335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.149.186.0/23 Signature Algorithm: sha256WithRSAEncryption 00:6c:2d:97:fc:13:db:a4:42:ae:e9:71:97:76:02:7e:fd:75: 82:96:a0:84:58:43:8e:9b:65:a8:14:9a:74:90:72:4f:21:4e: 80:b8:ac:4e:fd:ea:61:9a:13:d6:8b:ca:67:85:cd:67:10:07: 66:38:46:3e:82:ec:1e:29:ea:08:9b:2b:ac:03:50:c3:f1:f0: 52:11:39:70:0a:2f:f8:4e:a1:80:f7:73:86:13:39:61:1e:af: 68:d0:e0:e1:04:82:1a:56:fa:7f:73:f5:70:37:f3:6c:4b:86: 1a:8b:40:b8:50:be:d7:67:40:a3:b2:33:42:78:a2:4c:92:a5: 73:73:91:1c:f2:83:6b:bb:f1:94:6c:f8:9a:62:de:b4:27:35: fc:3d:6b:b0:b0:05:40:62:b1:f9:07:f5:f9:71:95:63:85:68: f3:eb:7b:c9:6c:02:48:70:c3:9f:6c:d4:90:30:d8:71:d3:66: 01:15:11:6a:ed:ee:88:78:e4:3e:4e:64:32:87:1a:3f:81:8f: bc:ec:17:b2:13:5b:1c:d1:38:00:64:d0:eb:cb:e5:23:a1:9d: a4:aa:aa:ec:69:ee:c0:ff:25:97:d0:8a:de:8b:52:32:9e:a9: 1d:0b:da:27:ed:97:fb:b8:51:9c:23:59:eb:09:13:13:ea:ed: 36:fb:a0:5b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUOlfNw7TNQ8BuFU2Wv/9oTvAqrdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDZaFw0yNzA5MjEwODQ3MDZaMDMxMTAvBgNV BAMTKEFEQjc3M0Q3M0NFMDk0RTYzQUQ0MTRDOTNENDc3MDRGMUFCQTcwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AlSaE+81cMJP1iBpu+/FXdtu 7897AiSwYWskI5iJ6FUJ0eZTK5ma8OygdVR+sZXnshbFGvbHsR0ovMAwFjoAAXW+ tjN0Q/3EN9hSDoBuTy61tzaF5uSwS6HbEo9OFh66aL3jM1rqOncYDjobnThqGGwH FvfJ6/xbPJRZCLo4lynpuiT+o9HcZuR7SQIiN7fka/QGQV8FX/yiXkjV979w1ElF gJQgVKUF/kj3D05bKNyBmdYcE5xBNUjNZvHg8dFi9B/jgMDK+0zeDeXPCFxs/hes euvgf5CeIxz3vqE3z9NZErsKLZPX+TX9IzwH40gTCiqeUHcW3+sDPxgizW5fAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUrbdz1zzglOY61BTJPUdwTxq6cEIwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTIzMzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAHIlbowDQYJKoZIhvcNAQELBQADggEBAABsLZf8E9ukQq7pcZd2An79 dYKWoIRYQ46bZagUmnSQck8hToC4rE796mGaE9aLymeFzWcQB2Y4Rj6C7B4p6gib K6wDUMPx8FIROXAKL/hOoYD3c4YTOWEer2jQ4OEEghpW+n9z9XA382xLhhqLQLhQ vtdnQKOyM0J4okySpXNzkRzyg2u78ZRs+Jpi3rQnNfw9a7CwBUBisfkH9flxlWOF aPPre8lsAkhww59s1JAw2HHTZgEVEWrt7oh45D5OZDKHGj+Bj7zsF7ITWxzROABk 0OvL5SOhnaSqquxp7sD/JZfQit6LUjKeqR0L2iftl/u4UZwjWesJExPq7Tb7oFs= -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:24 2026 by rpki-client