$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218809.roa File: AS218809.roa (raw, json) Hash identifier: PeAHc+FqZJfxtbLo2bdOBcCXbRGP7xCaZgF2Zzn/yvA= Subject key identifier: D5:33:F1:0B:6E:07:7F:72:65:48:8E:BF:14:B9:66:DD:F2:38:18:6E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6301BE1370472AF8DCD2EB19FD6DD9BD84F48B14 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218809.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 218809 IP address blocks: 200.141.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:01:be:13:70:47:2a:f8:dc:d2:eb:19:fd:6d:d9:bd:84:f4:8b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=D533F10B6E077F7265488EBF14B966DDF238186E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:c0:29:e0:a1:7d:1d:ce:99:18:9a:32:70: fd:8a:eb:69:5f:0c:16:1e:31:6d:5d:f1:5e:8f:6f: 7c:97:3d:ea:89:90:ca:a0:dd:1e:3d:1e:41:ef:16: 76:59:d7:dc:64:13:14:6d:e0:e3:f2:06:88:4b:b4: 39:59:9f:c0:39:93:b1:d1:58:fc:5a:3b:9c:5d:78: 1f:64:61:9b:d5:b3:a5:f6:96:a1:57:05:fa:e1:31: ac:40:1e:e7:dd:38:56:77:d0:59:b2:7c:5a:c5:3d: 71:b3:a1:91:f3:94:96:d1:54:85:65:12:a2:eb:46: 49:0a:6d:50:0e:14:a6:97:d9:39:94:e9:dc:88:8b: 7b:93:e8:16:3b:6a:29:bd:57:01:d1:90:1c:21:dc: 97:90:26:fd:40:79:5c:4e:a3:9c:2b:35:bd:47:72: fb:82:55:a8:04:b6:91:85:23:c3:a0:9a:e4:bc:82: 63:b5:57:81:dd:19:87:52:98:d4:74:1b:a8:b1:a8: 71:38:73:b0:9f:ae:c2:16:89:b2:86:d2:dd:0b:32: 2e:41:72:c6:46:03:37:bb:77:6e:05:10:98:16:4b: 32:2f:07:bf:93:6e:29:f5:4e:91:c3:ff:dd:2b:93: 41:d1:32:8b:4f:67:4f:3a:1c:7a:51:fa:7b:a5:7c: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:33:F1:0B:6E:07:7F:72:65:48:8E:BF:14:B9:66:DD:F2:38:18:6E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.188.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:de:cb:68:c1:58:f3:df:19:99:36:70:e7:51:b4:b1:62:18: 1c:12:a1:a2:61:ba:d6:3b:7e:f4:d3:1f:84:1b:8a:65:74:ac: 84:ed:83:b8:47:1b:fa:31:dc:bc:5a:74:41:bd:5e:60:4f:53: de:52:15:f1:e0:45:6f:f8:46:25:95:29:27:3f:72:18:91:8d: e2:5f:1b:36:5e:f5:21:bd:51:ea:2f:d3:eb:b2:d6:c4:dc:23: b7:c1:66:cf:85:a4:3a:9f:8e:01:d0:22:d6:69:38:18:cf:33: 32:b1:cc:bb:56:11:8e:4a:77:78:28:fe:0c:67:d3:d4:92:36: 2a:c6:52:4e:7b:55:1a:f2:e6:48:91:89:65:1d:e5:eb:b6:32: 77:43:db:04:d9:19:fe:86:db:d6:43:8f:c3:66:d9:38:53:6e: 55:ad:be:5b:1b:75:89:49:79:a1:bc:8a:f4:0c:39:6c:75:72: 75:6c:97:86:e8:3a:0f:14:87:95:c5:69:2f:3c:3c:be:18:76: cf:d8:94:cb:f6:be:bc:71:42:89:23:00:29:e5:7a:54:17:90: 93:6a:96:da:21:6a:65:60:e8:59:1f:12:ba:e3:d6:9d:1d:23: 21:c1:ab:21:8a:a5:86:6e:53:61:f0:9d:a6:17:7e:4a:6a:68: c6:86:51:bd -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUYwG+E3BHKvjc0usZ/W3ZvYT0ixQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKEQ1MzNGMTBCNkUwNzdGNzI2NTQ4OEVCRjE0Qjk2NkRERjIzODE4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qsAp4KF9Hc6ZGJoycP2K62lf DBYeMW1d8V6Pb3yXPeqJkMqg3R49HkHvFnZZ19xkExRt4OPyBohLtDlZn8A5k7HR WPxaO5xdeB9kYZvVs6X2lqFXBfrhMaxAHufdOFZ30FmyfFrFPXGzoZHzlJbRVIVl EqLrRkkKbVAOFKaX2TmU6dyIi3uT6BY7aim9VwHRkBwh3JeQJv1AeVxOo5wrNb1H cvuCVagEtpGFI8OgmuS8gmO1V4HdGYdSmNR0G6ixqHE4c7CfrsIWibKG0t0LMi5B csZGAze7d24FEJgWSzIvB7+Tbin1TpHD/90rk0HRMotPZ086HHpR+nulfDVlAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU1TPxC24Hf3JlSI6/FLlm3fI4GG4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg4MDkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIjbwwDQYJKoZIhvcNAQELBQADggEBAD7ey2jBWPPfGZk2cOdRtLFi GBwSoaJhutY7fvTTH4QbimV0rITtg7hHG/ox3LxadEG9XmBPU95SFfHgRW/4RiWV KSc/chiRjeJfGzZe9SG9Ueov0+uy1sTcI7fBZs+FpDqfjgHQItZpOBjPMzKxzLtW EY5Kd3go/gxn09SSNirGUk57VRry5kiRiWUd5eu2MndD2wTZGf6G29ZDj8Nm2ThT blWtvlsbdYlJeaG8ivQMOWx1cnVsl4boOg8Uh5XFaS88PL4Yds/YlMv2vrxxQokj ACnlelQXkJNqltohamVg6FkfErrj1p0dIyHBqyGKpYZuU2HwnaYXfkpqaMaGUb0= -----END CERTIFICATE-----Generated at Wed Sep 23 09:39:55 2026 by rpki-client