$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: ZKkrGW/UvLJOArU2KrFZj6akZm1j6AzafagrznZnATc= Subject key identifier: 19:C4:C7:26:83:08:49:B4:B1:B8:25:39:D9:60:2B:C9:56:94:24:1E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 49FA94383A1B805460F8F71716EF7E535F05BE68 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214432.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 214432 IP address blocks: 200.149.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fa:94:38:3a:1b:80:54:60:f8:f7:17:16:ef:7e:53:5f:05:be:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=19C4C726830849B4B1B82539D9602BC95694241E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:71:4a:dc:44:07:ea:22:6e:ee:50:f4:e1: 45:1c:14:64:9d:79:4e:17:d0:bd:46:6b:d2:0c:15: cb:57:d1:31:ac:3a:bc:8b:e9:e6:fb:76:c1:a7:83: 5e:3f:44:08:92:40:d8:31:90:67:5b:4b:68:67:80: 3f:c6:8c:59:19:c8:08:98:c8:f0:88:4f:51:c5:78: 8a:23:fc:b0:0a:33:8b:d1:17:8d:d6:e3:b2:6b:21: 7d:ef:4f:97:46:95:12:3a:21:bc:b7:85:3f:fc:76: 63:be:f5:1c:37:fe:e9:bf:12:dd:80:5f:98:c3:34: fa:68:fb:57:9e:16:5c:79:3c:12:e7:bd:21:cc:e0: 10:60:71:cf:91:f0:f9:d5:a6:fa:0a:64:c4:0d:8d: 9c:50:89:bd:54:4f:72:ab:a8:24:46:67:3a:bd:f1: 8c:2e:9b:25:c3:88:8a:a0:e5:9d:8e:d1:ef:65:42: b4:2d:ae:10:c1:05:ee:00:17:bf:71:cf:6b:10:bc: f3:eb:fd:c6:da:ba:c0:76:14:0a:e6:b8:cb:3b:89: 26:ea:ef:78:6b:53:0c:d8:03:78:84:eb:9b:af:12: d6:67:0c:86:68:3c:e7:9f:63:75:17:1e:66:3f:16: 34:40:93:07:31:f2:1f:d5:e9:c3:c6:62:7e:fe:a2: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:C7:26:83:08:49:B4:B1:B8:25:39:D9:60:2B:C9:56:94:24:1E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.149.176.0/21 Signature Algorithm: sha256WithRSAEncryption 74:95:51:57:d1:42:6f:92:dc:d5:f1:2a:ee:af:64:ea:c9:b1: 83:dc:97:8d:00:d7:15:ae:97:a4:d8:66:ff:d0:c3:41:41:a0: c9:25:1a:98:1c:21:7f:4a:a5:4c:22:41:98:5c:0a:b4:97:75: 9b:1b:5d:98:e7:a4:62:f1:30:24:67:d1:78:36:b9:25:89:17: 1c:13:cb:7e:12:49:85:01:25:4c:5f:9e:40:1a:4e:fe:3f:09: 84:7e:8c:cf:d6:3d:ec:84:b7:86:39:71:18:16:48:34:ef:d7: 35:af:ee:8c:d8:e5:f8:a9:cd:92:61:77:ac:e7:f4:e5:82:c0: 45:bf:96:3e:61:48:89:bf:c2:88:24:f8:22:4e:49:52:40:8e: a7:d8:43:84:f3:9c:15:8c:48:aa:3f:29:f8:56:ea:69:65:41: 92:30:1c:44:ea:db:c3:88:dc:fb:26:a8:8a:3b:67:a6:f1:ca: 10:c7:08:c1:3c:55:1b:ef:5d:51:14:bf:4a:0f:c5:5f:14:63: e4:7b:43:fe:e2:65:82:f4:a7:1b:1d:80:03:29:b5:07:03:16: 81:c4:23:50:b4:82:70:c7:0b:fb:d2:89:9a:00:c9:c3:b1:44: 66:a3:5c:1f:57:92:5a:19:90:92:0d:b2:72:96:8b:d0:ec:7a: f1:8c:b8:10 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUSfqUODobgFRg+PcXFu9+U18FvmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDE5QzRDNzI2ODMwODQ5QjRCMUI4MjUzOUQ5NjAyQkM5NTY5NDI0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPzHFK3EQH6iJu7lD04UUcFGSd eU4X0L1Ga9IMFctX0TGsOryL6eb7dsGng14/RAiSQNgxkGdbS2hngD/GjFkZyAiY yPCIT1HFeIoj/LAKM4vRF43W47JrIX3vT5dGlRI6Iby3hT/8dmO+9Rw3/um/Et2A X5jDNPpo+1eeFlx5PBLnvSHM4BBgcc+R8PnVpvoKZMQNjZxQib1UT3KrqCRGZzq9 8YwumyXDiIqg5Z2O0e9lQrQtrhDBBe4AF79xz2sQvPPr/cbausB2FArmuMs7iSbq 73hrUwzYA3iE65uvEtZnDIZoPOefY3UXHmY/FjRAkwcx8h/V6cPGYn7+ou2lAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUGcTHJoMISbSxuCU52WAryVaUJB4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTQ0MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPIlbAwDQYJKoZIhvcNAQELBQADggEBAHSVUVfRQm+S3NXxKu6vZOrJ sYPcl40A1xWul6TYZv/Qw0FBoMklGpgcIX9KpUwiQZhcCrSXdZsbXZjnpGLxMCRn 0Xg2uSWJFxwTy34SSYUBJUxfnkAaTv4/CYR+jM/WPeyEt4Y5cRgWSDTv1zWv7ozY 5fipzZJhd6zn9OWCwEW/lj5hSIm/wogk+CJOSVJAjqfYQ4TznBWMSKo/KfhW6mll QZIwHETq28OI3PsmqIo7Z6bxyhDHCME8VRvvXVEUv0oPxV8UY+R7Q/7iZYL0pxsd gAMptQcDFoHEI1C0gnDHC/vSiZoAycOxRGajXB9XkloZkJINsnKWi9DsevGMuBA= -----END CERTIFICATE-----Generated at Wed Sep 23 11:08:55 2026 by rpki-client