$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215817.roa File: AS215817.roa (raw, json) Hash identifier: ex8AgMQbjifvZAvVqdxuIG4idrC5V69fp3mXtgPgMt0= Subject key identifier: 5F:F3:65:3F:9B:C7:B9:1D:D4:48:1A:D7:0C:E2:0B:51:BD:97:15:15 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 08B2A236913C1730A559B04C91B3445FAD9FDAAC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215817.roa Signing time: Tue 22 Sep 2026 08:47:06 +0000 ROA not before: Tue 22 Sep 2026 08:42:06 +0000 ROA not after: Tue 21 Sep 2027 08:47:06 +0000 asID: 215817 IP address blocks: 200.141.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b2:a2:36:91:3c:17:30:a5:59:b0:4c:91:b3:44:5f:ad:9f:da:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:06 2026 GMT Not After : Sep 21 08:47:06 2027 GMT Subject: CN=5FF3653F9BC7B91DD4481AD70CE20B51BD971515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:63:c6:8c:d0:36:7b:af:f2:60:b5:06:28: 75:a3:3b:15:2a:8f:c0:01:9b:6b:77:ef:9e:a5:b1: cd:43:93:7d:66:a1:96:22:0d:fb:2f:e8:cb:27:8d: d4:3e:02:e5:eb:2d:07:0d:98:99:69:e7:ba:4b:65: 6a:88:a4:d6:36:f2:3c:27:06:74:a4:2a:00:c6:44: a8:a8:ae:6b:e4:8c:e8:8b:82:93:a1:f4:25:e2:d5: d1:2c:a7:48:d3:4d:b3:c2:80:4b:af:92:dc:ac:a8: 4e:7c:32:ef:8a:9b:3d:f1:6e:9a:96:a3:9c:0b:50: 3e:b5:6a:49:93:f8:06:c0:c5:ef:bb:b3:f6:1a:5e: ec:21:d5:bf:76:09:52:bb:92:f9:49:b9:3c:00:d8: 3a:62:1a:b6:47:e1:10:92:0c:60:31:f1:1e:45:07: 0f:68:41:47:3b:e5:70:62:29:8a:55:d5:5f:24:d5: da:25:20:5f:51:6a:af:c4:36:bb:8b:c0:63:16:4f: 61:fa:d9:ab:ae:c5:44:01:2a:74:66:fa:c7:88:0a: 6c:55:89:60:cc:7b:7a:b7:c4:02:e7:8c:b8:a0:23: 86:8a:8a:31:76:c2:56:46:19:f5:87:66:fb:89:48: 90:b1:8a:9d:61:b7:a0:c2:c3:3c:83:b0:c1:ce:58: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F3:65:3F:9B:C7:B9:1D:D4:48:1A:D7:0C:E2:0B:51:BD:97:15:15 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.189.0/24 Signature Algorithm: sha256WithRSAEncryption 03:bd:bb:de:ee:37:d8:e7:7b:32:b9:c3:2b:19:b5:86:d6:8b: 10:18:61:74:2b:88:ba:36:6a:b7:4b:d0:7d:e9:12:48:f9:8d: 4f:d4:0d:93:86:4c:f8:54:37:2b:24:1d:d6:6d:80:99:a1:7e: 4e:99:d5:2a:84:c4:d2:d7:19:56:9a:a3:6c:c1:b5:c8:61:4e: fd:ef:95:ae:e7:6f:e0:75:e8:bb:51:7f:b0:f9:d9:8a:6a:c6: eb:ce:4a:67:d9:ef:5f:e5:73:f2:83:32:2c:50:1c:2e:2f:df: 7e:f8:b8:31:48:92:57:50:d9:11:e5:e5:20:18:98:3f:1a:75: f6:a3:69:30:06:a5:d8:fd:0f:ce:83:c8:2e:a5:c2:38:8f:38: 97:b7:91:44:d2:46:dd:a5:de:2d:3e:cc:e2:94:03:2d:3e:b0: 24:0b:41:ac:8e:35:00:cc:cf:1d:f2:3f:0f:08:56:93:54:b1: 9c:77:6d:28:3f:49:97:b4:77:e5:c7:5e:c0:6a:1e:07:64:b1: a0:c2:c2:a0:af:1f:1e:71:0d:3d:5b:e2:24:9c:47:f7:e1:db: 0c:d5:49:b9:db:ae:f1:45:2e:cf:f3:3a:98:7e:6e:be:fd:70: dc:28:91:ad:6c:44:a9:1a:cb:fd:85:74:6a:6a:84:2d:3a:fb: 51:79:f6:81 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUCLKiNpE8FzClWbBMkbNEX62f2qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDZaFw0yNzA5MjEwODQ3MDZaMDMxMTAvBgNV BAMTKDVGRjM2NTNGOUJDN0I5MURENDQ4MUFENzBDRTIwQjUxQkQ5NzE1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJdWPGjNA2e6/yYLUGKHWjOxUq j8ABm2t3756lsc1Dk31moZYiDfsv6MsnjdQ+AuXrLQcNmJlp57pLZWqIpNY28jwn BnSkKgDGRKiormvkjOiLgpOh9CXi1dEsp0jTTbPCgEuvktysqE58Mu+Kmz3xbpqW o5wLUD61akmT+AbAxe+7s/YaXuwh1b92CVK7kvlJuTwA2DpiGrZH4RCSDGAx8R5F Bw9oQUc75XBiKYpV1V8k1dolIF9Raq/ENruLwGMWT2H62auuxUQBKnRm+seICmxV iWDMe3q3xALnjLigI4aKijF2wlZGGfWHZvuJSJCxip1ht6DCwzyDsMHOWCdDAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUX/NlP5vHuR3USBrXDOILUb2XFRUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTU4MTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIjb0wDQYJKoZIhvcNAQELBQADggEBAAO9u97uN9jnezK5wysZtYbW ixAYYXQriLo2ardL0H3pEkj5jU/UDZOGTPhUNyskHdZtgJmhfk6Z1SqExNLXGVaa o2zBtchhTv3vla7nb+B16LtRf7D52YpqxuvOSmfZ71/lc/KDMixQHC4v3374uDFI kldQ2RHl5SAYmD8adfajaTAGpdj9D86DyC6lwjiPOJe3kUTSRt2l3i0+zOKUAy0+ sCQLQayONQDMzx3yPw8IVpNUsZx3bSg/SZe0d+XHXsBqHgdksaDCwqCvHx5xDT1b 4iScR/fh2wzVSbnbrvFFLs/zOph+br79cNwoka1sRKkay/2FdGpqhC06+1F59oE= -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:55 2026 by rpki-client