$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218499.roa File: AS218499.roa (raw, json) Hash identifier: 9ipxOtspQU+XhoQB7Lg+XOeQMWHLpHTNXLz5TzgSHWk= Subject key identifier: B7:CB:D5:75:B9:C4:C3:C4:85:36:A7:55:78:00:D0:C9:BC:17:55:CC Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7BB59F4B8DDE05D0D2682972407768FFC4AA2D4B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218499.roa Signing time: Thu 12 Nov 2026 10:21:08 +0000 ROA not before: Thu 12 Nov 2026 10:16:08 +0000 ROA not after: Thu 11 Nov 2027 10:21:08 +0000 asID: 218499 IP address blocks: 200.141.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b5:9f:4b:8d:de:05:d0:d2:68:29:72:40:77:68:ff:c4:aa:2d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 12 10:16:08 2026 GMT Not After : Nov 11 10:21:08 2027 GMT Subject: CN=B7CBD575B9C4C3C48536A7557800D0C9BC1755CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:83:e7:ea:d9:82:3b:8b:c1:e5:74:aa:b7: 75:43:51:04:43:91:df:c6:79:8e:16:4f:ba:48:c9: b8:aa:ff:2c:9c:3e:f2:8c:f2:07:12:8b:38:e4:55: b2:3c:52:e2:d4:99:5a:17:bc:05:50:47:62:1c:7d: 14:e7:12:9a:48:ee:b4:75:3e:a2:f6:65:02:49:f3: 6e:0a:a7:18:da:cb:1c:32:98:b7:a1:f0:ee:be:67: 2b:3f:ee:45:d1:d6:e6:6b:0a:78:63:24:e4:21:d2: 9d:6c:2e:30:da:74:02:81:d7:09:52:36:be:a3:e5: 67:27:91:6f:e5:48:03:7b:c8:a1:2f:ef:16:be:b7: cb:31:45:64:71:3a:67:e4:ca:2a:66:3f:ed:ce:87: 40:5c:72:f3:8c:ec:0b:f2:9b:9e:62:44:58:01:85: 1e:b7:59:73:09:bf:89:b3:4d:40:e2:51:e6:13:f0: c9:29:f0:e9:97:b6:c8:16:97:8b:a2:f9:75:7f:67: 8b:3f:9b:8b:26:5d:4a:ca:19:86:96:21:ae:c7:ef: d1:86:63:8d:1f:50:a6:27:35:00:cb:88:ea:c3:05: e6:4d:f5:64:8d:e2:c4:ad:b3:9c:b4:73:f5:a0:6d: 54:d1:99:a1:f3:40:82:84:f9:01:d6:15:4c:92:64: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:D5:75:B9:C4:C3:C4:85:36:A7:55:78:00:D0:C9:BC:17:55:CC X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218499.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.62.0/24 Signature Algorithm: sha256WithRSAEncryption 43:3a:4a:43:58:22:f3:1a:5c:61:c7:ec:d6:67:23:49:4d:63: c9:7a:ff:54:76:63:5e:71:29:cd:81:12:f3:16:6d:d4:db:cf: 71:b9:59:5b:78:f9:f7:c0:af:39:02:81:8d:4d:0e:f8:e7:f8: 68:bd:4d:a8:76:76:3e:44:b9:34:cc:09:92:7d:ba:eb:37:f4: 85:79:05:0a:b3:9f:7f:6f:ae:f9:9d:ff:2c:df:b9:2a:b2:e7: f9:41:5b:c9:f3:3d:1a:8f:fe:af:0a:b2:7a:36:b8:fa:a8:71: 49:47:6a:12:5b:92:96:a3:2c:c2:8a:b2:61:ca:44:12:86:dd: ba:61:94:33:5a:ea:c4:d4:d4:39:2c:17:29:46:81:58:95:c7: 35:d7:46:f3:ba:50:22:6e:b0:43:9d:81:2f:69:07:03:78:5e: b9:5d:21:04:49:52:af:6e:50:2b:92:7c:d4:87:4d:c9:72:36: 42:d6:e8:be:ec:38:25:7f:89:1b:af:0b:c7:54:e0:c9:52:bc: 14:4f:8d:75:6a:73:61:d0:dd:d2:b8:0b:1f:b7:60:5e:a2:ee: 8f:21:c8:8d:1b:18:69:9e:1d:72:02:17:ee:97:04:fd:d5:dd: 5c:ed:15:fd:b5:ac:3a:3f:b5:f8:01:b0:7f:94:e4:0a:6b:9e: b4:da:95:9d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUe7WfS43eBdDSaClyQHdo/8SqLUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTIxMDE2MDhaFw0yNzExMTExMDIxMDhaMDMxMTAvBgNV BAMTKEI3Q0JENTc1QjlDNEMzQzQ4NTM2QTc1NTc4MDBEMEM5QkMxNzU1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjD4Pn6tmCO4vB5XSqt3VDUQRD kd/GeY4WT7pIybiq/yycPvKM8gcSizjkVbI8UuLUmVoXvAVQR2IcfRTnEppI7rR1 PqL2ZQJJ824KpxjayxwymLeh8O6+Zys/7kXR1uZrCnhjJOQh0p1sLjDadAKB1wlS Nr6j5WcnkW/lSAN7yKEv7xa+t8sxRWRxOmfkyipmP+3Oh0BccvOM7Avym55iRFgB hR63WXMJv4mzTUDiUeYT8Mkp8OmXtsgWl4ui+XV/Z4s/m4smXUrKGYaWIa7H79GG Y40fUKYnNQDLiOrDBeZN9WSN4sSts5y0c/WgbVTRmaHzQIKE+QHWFUySZC7NAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUt8vVdbnEw8SFNqdVeADQybwXVcwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg0OTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIjT4wDQYJKoZIhvcNAQELBQADggEBAEM6SkNYIvMaXGHH7NZnI0lN Y8l6/1R2Y15xKc2BEvMWbdTbz3G5WVt4+ffArzkCgY1NDvjn+Gi9Tah2dj5EuTTM CZJ9uus39IV5BQqzn39vrvmd/yzfuSqy5/lBW8nzPRqP/q8Ksno2uPqocUlHahJb kpajLMKKsmHKRBKG3bphlDNa6sTU1DksFylGgViVxzXXRvO6UCJusEOdgS9pBwN4 XrldIQRJUq9uUCuSfNSHTclyNkLW6L7sOCV/iRuvC8dU4MlSvBRPjXVqc2HQ3dK4 Cx+3YF6i7o8hyI0bGGmeHXICF+6XBP3V3VztFf21rDo/tfgBsH+U5AprnrTalZ0= -----END CERTIFICATE-----Generated at Sun Nov 15 16:14:05 2026 by rpki-client