$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215023.roa File: AS215023.roa (raw, json) Hash identifier: jdCqv2qUKm7D91uKI/rmgleo6syXsEAbm+EoYR/s1eo= Subject key identifier: B8:88:92:F9:64:92:D6:11:38:1B:E7:B3:17:48:E0:9B:7B:BD:BF:B0 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 564D7499BF0B3AA9D09A7F8B11469C29DEF0026F Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215023.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 215023 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4d:74:99:bf:0b:3a:a9:d0:9a:7f:8b:11:46:9c:29:de:f0:02:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=B88892F96492D611381BE7B31748E09B7BBDBFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:ad:0f:7b:14:bd:f9:4c:ed:2a:91:b1:2b: 14:1f:1a:72:39:16:86:8b:06:53:0e:1c:6f:15:68: 8b:07:a9:b9:15:c7:15:df:c0:73:27:3d:a4:d9:8c: c3:70:e2:89:b5:d8:da:8f:f5:c6:8c:11:db:ba:fe: 31:5e:02:1a:f8:dc:52:9d:29:0c:fc:22:ef:0a:79: 02:a4:8a:46:b4:f6:b8:9f:94:f1:34:d4:bc:08:f3: b0:b3:8f:0b:7c:d7:cd:d1:7c:dc:1c:c4:d7:d3:57: 7a:67:4b:34:ad:b4:56:1c:b1:9b:ea:34:5b:f3:98: 1a:49:3b:67:11:54:f3:1d:64:13:7f:3e:38:6f:42: 9c:da:df:a5:7d:9c:0e:c9:4b:52:50:d7:42:da:23: d4:e2:91:99:9f:38:51:bf:01:ff:c8:7a:85:e8:50: 44:f2:59:f9:35:7a:41:02:00:83:d0:c0:e6:8d:4c: 2f:69:a8:af:f3:47:ef:9c:55:1d:3d:81:d7:f5:44: 59:d5:be:cb:1f:7c:ea:a9:90:00:e4:db:fd:86:a9: c6:ac:2a:42:51:67:e1:1e:3a:bf:b5:21:8e:6b:12: 16:9e:f5:d3:92:f4:cc:7d:d4:83:7c:0f:5d:02:d1: 8e:04:1f:5b:66:e9:a5:4a:22:da:6c:b6:45:3f:c4: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:88:92:F9:64:92:D6:11:38:1B:E7:B3:17:48:E0:9B:7B:BD:BF:B0 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 05:e1:53:23:8c:74:ee:3a:11:ac:46:fc:e5:41:c6:dd:79:ec: 60:fd:05:98:39:4d:19:42:b3:03:5e:99:7a:60:4d:f2:34:cf: 40:76:8c:e2:2f:14:f6:51:f6:a2:8c:28:11:96:12:ed:cf:9a: 34:10:63:eb:59:73:c6:03:0e:d5:8a:ef:1f:95:78:e1:8f:e4: 8a:88:56:72:ac:fa:d2:fc:97:92:42:ef:ab:59:77:f9:9e:41: fe:bf:a0:8c:b4:e4:c2:52:86:dc:c2:57:6a:80:5e:02:91:2d: 9d:3b:44:4f:5a:0a:2b:09:13:9d:2f:d9:95:33:b7:0a:20:23: f8:94:6a:cc:c2:23:a9:d1:39:d0:c2:c0:06:db:6c:4f:02:21: fe:3a:99:9b:3c:ab:80:77:9e:76:43:29:8a:ce:62:2e:de:bc: 29:da:71:59:ec:f7:62:39:97:21:fc:b5:b5:19:25:f7:8b:97: ea:7e:6d:5f:32:bd:63:4f:67:a4:21:2e:f4:9b:e2:51:d0:c7: 26:05:b1:b7:a5:f1:b1:bb:c0:aa:bf:51:ec:a4:a2:ce:8f:dd: e3:94:87:04:8b:07:59:02:66:a2:9d:62:16:05:70:a2:01:10: 49:ad:35:9e:76:f2:d2:47:9e:b4:7d:05:ef:0b:2d:82:5b:f2: 0b:2e:e7:75 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUVk10mb8LOqnQmn+LEUacKd7wAm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKEI4ODg5MkY5NjQ5MkQ2MTEzODFCRTdCMzE3NDhFMDlCN0JCREJGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFK0PexS9+UztKpGxKxQfGnI5 FoaLBlMOHG8VaIsHqbkVxxXfwHMnPaTZjMNw4om12NqP9caMEdu6/jFeAhr43FKd KQz8Iu8KeQKkika09riflPE01LwI87Czjwt8183RfNwcxNfTV3pnSzSttFYcsZvq NFvzmBpJO2cRVPMdZBN/PjhvQpza36V9nA7JS1JQ10LaI9TikZmfOFG/Af/IeoXo UETyWfk1ekECAIPQwOaNTC9pqK/zR++cVR09gdf1RFnVvssffOqpkADk2/2Gqcas KkJRZ+EeOr+1IY5rEhae9dOS9Mx91IN8D10C0Y4EH1tm6aVKItpstkU/xKOpAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUuIiS+WSS1hE4G+ezF0jgm3u9v7AwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTUwMjMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPItKAwDQYJKoZIhvcNAQELBQADggEBAAXhUyOMdO46EaxG/OVBxt15 7GD9BZg5TRlCswNemXpgTfI0z0B2jOIvFPZR9qKMKBGWEu3PmjQQY+tZc8YDDtWK 7x+VeOGP5IqIVnKs+tL8l5JC76tZd/meQf6/oIy05MJShtzCV2qAXgKRLZ07RE9a CisJE50v2ZUztwogI/iUaszCI6nROdDCwAbbbE8CIf46mZs8q4B3nnZDKYrOYi7e vCnacVns92I5lyH8tbUZJfeLl+p+bV8yvWNPZ6QhLvSb4lHQxyYFsbel8bG7wKq/ Ueykos6P3eOUhwSLB1kCZqKdYhYFcKIBEEmtNZ528tJHnrR9Be8LLYJb8gsu53U= -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:46 2026 by rpki-client