$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215197.roa File: AS215197.roa (raw, json) Hash identifier: Gm99sqUWj0rfY09J6tVOHcri7F7A2+sNHoz/OafMZCw= Subject key identifier: 46:6A:FB:F2:06:9C:54:4B:FE:09:2A:8B:88:8D:DC:D1:FD:DE:F1:12 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3A480645C7C54073FC8FF0DCF1CFDEE1997779C4 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215197.roa Signing time: Sun 08 Nov 2026 22:56:18 +0000 ROA not before: Sun 08 Nov 2026 22:51:18 +0000 ROA not after: Sun 07 Nov 2027 22:56:18 +0000 asID: 215197 IP address blocks: 179.254.213.0/24 maxlen: 24 187.55.54.0/24 maxlen: 24 189.12.164.0/24 maxlen: 24 189.12.178.0/24 maxlen: 24 189.12.191.0/24 maxlen: 24 189.30.113.0/24 maxlen: 24 189.30.125.0/24 maxlen: 24 189.31.28.0/24 maxlen: 24 189.31.30.0/24 maxlen: 24 200.138.19.0/24 maxlen: 24 200.138.26.0/24 maxlen: 24 200.180.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:48:06:45:c7:c5:40:73:fc:8f:f0:dc:f1:cf:de:e1:99:77:79:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 8 22:51:18 2026 GMT Not After : Nov 7 22:56:18 2027 GMT Subject: CN=466AFBF2069C544BFE092A8B888DDCD1FDDEF112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:b5:33:d6:2a:6f:d3:cf:fa:f1:50:15:bb: bb:29:51:32:f0:d2:73:00:d0:cf:b3:72:2f:fb:4e: 1a:83:eb:60:b7:47:ae:34:6f:a1:d7:c5:2c:76:05: df:29:e2:c1:4d:61:b0:1e:d8:b5:93:b3:84:93:82: 07:5d:87:48:13:e5:16:f1:f5:1f:a0:ad:8b:20:97: 12:85:e5:56:48:2c:e8:12:52:1a:f0:2e:78:3f:44: 1d:9d:2b:aa:5d:a0:9e:b6:4b:65:c2:1d:10:91:c9: 3c:bd:e5:09:5b:6d:a1:e5:73:33:2b:06:d7:8c:1d: 71:87:bc:79:19:7d:56:1a:bc:69:0b:8e:bf:90:01: 89:7d:f4:2a:73:48:a8:68:fb:ed:f4:2d:e2:17:fb: c1:25:75:2b:ce:82:99:93:a4:4b:af:bb:8d:4b:9b: ca:35:39:d6:25:dc:9d:c4:63:07:9d:cc:0c:9a:77: 2f:20:3e:44:3c:11:00:94:d9:74:7a:9d:95:49:bf: d4:80:2a:6a:b6:88:3d:41:61:0a:38:f7:67:89:40: b1:0f:46:73:29:34:3e:09:9b:3d:40:9c:55:da:d9: 19:e8:45:4f:02:44:f6:68:e3:bc:e4:62:96:73:55: 47:da:24:68:dd:fa:c9:5b:3f:4a:aa:9f:34:05:06: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6A:FB:F2:06:9C:54:4B:FE:09:2A:8B:88:8D:DC:D1:FD:DE:F1:12 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215197.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.213.0/24 187.55.54.0/24 189.12.164.0/24 189.12.178.0/24 189.12.191.0/24 189.30.113.0/24 189.30.125.0/24 189.31.28.0/24 189.31.30.0/24 200.138.19.0/24 200.138.26.0/24 200.180.190.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:94:4f:e3:ec:50:eb:16:14:86:ac:da:24:c0:63:66:65:de: 30:be:fa:23:c8:dd:28:69:25:90:0d:04:88:2d:f0:96:46:7b: a6:ee:7c:ac:b7:40:5e:32:f4:13:b6:f4:85:b5:44:76:c9:fa: 7c:7d:4e:d9:d7:6d:3c:8c:40:0e:ce:ac:53:58:ba:f3:7f:87: 49:bf:94:58:ff:a1:db:fd:2b:56:ad:d8:a7:f5:ba:81:c8:f9: 27:d2:1c:82:ca:67:64:a1:c9:a9:71:3f:fd:12:e5:0e:70:41: 84:cc:56:2f:a7:e0:b1:68:8e:85:36:ff:14:be:6c:de:bc:0d: 0b:04:49:e1:b9:10:fc:2a:d1:93:a1:bd:c1:25:9a:f1:a6:22: d9:3a:20:6d:b6:97:bb:22:4e:82:0f:18:12:1e:f8:4a:05:64: d3:14:17:dc:f8:f9:1d:10:63:b1:ce:8e:ad:91:c0:37:3b:8b: d9:67:c0:df:25:b7:ed:c4:1d:b1:c2:bc:fa:af:28:9d:3b:cf: 7f:fe:23:79:cc:ea:e3:c1:7e:95:74:07:46:f6:7d:62:71:2c: 3c:fc:28:12:6e:68:72:65:5c:a3:4a:c3:68:c9:63:b1:31:b0: 47:d6:a5:6c:03:48:eb:75:76:8d:10:a4:1d:15:ed:08:c7:8e: 09:32:fc:b3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUOkgGRcfFQHP8j/Dc8c/e4Zl3ecQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDgyMjUxMThaFw0yNzExMDcyMjU2MThaMDMxMTAvBgNV BAMTKDQ2NkFGQkYyMDY5QzU0NEJGRTA5MkE4Qjg4OEREQ0QxRkRERUYxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWC7Uz1ipv08/68VAVu7spUTLw 0nMA0M+zci/7ThqD62C3R640b6HXxSx2Bd8p4sFNYbAe2LWTs4STggddh0gT5Rbx 9R+grYsglxKF5VZILOgSUhrwLng/RB2dK6pdoJ62S2XCHRCRyTy95QlbbaHlczMr BteMHXGHvHkZfVYavGkLjr+QAYl99CpzSKho++30LeIX+8EldSvOgpmTpEuvu41L m8o1OdYl3J3EYwedzAyady8gPkQ8EQCU2XR6nZVJv9SAKmq2iD1BYQo492eJQLEP RnMpND4Jmz1AnFXa2RnoRU8CRPZo47zkYpZzVUfaJGjd+slbP0qqnzQFBsVJAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQURmr78gacVEv+CSqLiI3c0f3e8RIwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTUxOTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYQYIKwYBBQUHAQcBAf8EUjBQME4E AgABMEgDBACz/tUDBAC7NzYDBAC9DKQDBAC9DLIDBAC9DL8DBAC9HnEDBAC9Hn0D BAC9HxwDBAC9Hx4DBADIihMDBADIihoDBADItL4wDQYJKoZIhvcNAQELBQADggEB AHyUT+PsUOsWFIas2iTAY2Zl3jC++iPI3ShpJZANBIgt8JZGe6bufKy3QF4y9BO2 9IW1RHbJ+nx9TtnXbTyMQA7OrFNYuvN/h0m/lFj/odv9K1at2Kf1uoHI+SfSHILK Z2ShyalxP/0S5Q5wQYTMVi+n4LFojoU2/xS+bN68DQsESeG5EPwq0ZOhvcElmvGm Itk6IG22l7siToIPGBIe+EoFZNMUF9z4+R0QY7HOjq2RwDc7i9lnwN8lt+3EHbHC vPqvKJ07z3/+I3nM6uPBfpV0B0b2fWJxLDz8KBJuaHJlXKNKw2jJY7ExsEfWpWwD SOt1do0QpB0V7QjHjgky/LM= -----END CERTIFICATE-----Generated at Sat Nov 14 21:34:20 2026 by rpki-client