$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218869.roa File: AS218869.roa (raw, json) Hash identifier: FaW1gSR+mt5afQMFjN67xrhZ3Y2nfLQ8lXJFIYXo/ms= Subject key identifier: 8E:82:E9:46:9D:7B:DB:DB:B2:93:2E:49:91:15:EB:34:96:A4:44:1A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 197909F9B4565FFD15BD4AAAE0A1F4E6B225E18E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218869.roa Signing time: Tue 22 Sep 2026 08:47:04 +0000 ROA not before: Tue 22 Sep 2026 08:42:04 +0000 ROA not after: Tue 21 Sep 2027 08:47:04 +0000 asID: 218869 IP address blocks: 177.177.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:79:09:f9:b4:56:5f:fd:15:bd:4a:aa:e0:a1:f4:e6:b2:25:e1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:04 2026 GMT Not After : Sep 21 08:47:04 2027 GMT Subject: CN=8E82E9469D7BDBDBB2932E499115EB3496A4441A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:9f:8c:24:2e:30:8c:eb:a2:e7:5c:30:a6: 3c:e9:c2:31:97:7b:9c:a5:d4:e3:14:b7:79:17:82: d9:1a:1c:a5:5d:31:e2:f2:c9:33:80:8c:2a:97:06: 00:4e:7f:33:9e:db:7e:79:ff:ae:2b:3d:e1:d2:57: 4e:2f:b9:ef:5d:bd:24:76:6f:67:5c:76:05:1c:b0: fb:33:9a:cf:68:81:d6:92:bf:d0:5b:cf:08:3d:0c: 9f:53:b6:e2:56:29:0e:7f:e5:7e:5c:b3:aa:66:49: f4:bf:58:35:46:b0:c5:01:b1:e7:ac:b6:23:b5:0c: a6:61:a2:78:28:e8:47:3b:fa:46:36:c9:26:0a:21: 55:4c:28:45:d0:49:4c:49:14:c5:07:de:62:54:ad: 66:af:a2:ac:b0:36:d9:e5:4c:c2:bd:c7:d0:d5:db: f6:35:2d:1d:19:98:c5:35:c8:1f:4c:8d:c8:62:0b: 76:b6:aa:a6:0e:58:1a:49:26:51:46:17:25:af:47: 97:a0:d5:30:e7:cd:d4:07:f9:37:54:49:ac:bf:59: 2c:7e:fa:0c:1f:78:df:88:0f:b2:72:bc:7a:16:d3: 50:2c:d7:42:3c:55:e5:98:f5:46:e8:cf:73:69:2a: 52:b9:f8:c4:0e:da:5a:ae:29:d2:ea:7f:21:04:8c: c0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:82:E9:46:9D:7B:DB:DB:B2:93:2E:49:91:15:EB:34:96:A4:44:1A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218869.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.83.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ed:4b:69:3c:54:6b:fb:34:8e:f6:95:12:0a:c6:53:41:6f: 37:68:af:a7:67:5c:99:e3:2f:be:b1:be:1d:78:de:b8:80:0e: 40:f3:a6:be:a0:c3:e7:f7:a2:9d:1b:76:50:73:6f:6b:51:ef: c1:56:78:f0:09:41:3c:32:3b:ed:bd:05:e7:bc:85:b6:f5:2b: 73:4e:f2:5c:cc:e0:66:8d:c7:9f:61:2d:d7:3d:e6:d3:ce:c2: 80:1a:33:c1:2e:85:12:94:3b:63:b1:64:77:21:13:ec:f0:7e: 24:bb:87:2f:0b:b2:e7:eb:e2:24:03:8c:35:a4:cb:8d:72:11: 8e:dc:eb:ff:54:5d:5e:b4:30:49:01:09:47:54:68:1a:13:3a: 9c:5a:af:40:2b:41:de:3c:be:1c:ba:78:ff:6a:0d:28:ac:13: 17:be:8d:09:17:48:27:8a:d9:17:00:3d:6e:ca:93:80:43:9c: 71:8b:b2:93:6e:56:b3:39:e1:25:2e:e3:17:dd:7e:b8:e0:f2: 50:ac:31:9a:f4:2e:42:1e:66:27:11:2f:f1:a5:40:6d:de:6b: 6a:9f:df:52:e6:87:8c:47:67:68:11:fa:65:0b:aa:48:dc:3d: d7:e7:2e:95:31:bb:77:07:25:a2:18:18:0c:88:0b:3e:7a:09: 72:e8:af:4e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUGXkJ+bRWX/0VvUqq4KH05rIl4Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDRaFw0yNzA5MjEwODQ3MDRaMDMxMTAvBgNV BAMTKDhFODJFOTQ2OUQ3QkRCREJCMjkzMkU0OTkxMTVFQjM0OTZBNDQ0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkZ+MJC4wjOui51wwpjzpwjGX e5yl1OMUt3kXgtkaHKVdMeLyyTOAjCqXBgBOfzOe2355/64rPeHSV04vue9dvSR2 b2dcdgUcsPszms9ogdaSv9Bbzwg9DJ9TtuJWKQ5/5X5cs6pmSfS/WDVGsMUBsees tiO1DKZhongo6Ec7+kY2ySYKIVVMKEXQSUxJFMUH3mJUrWavoqywNtnlTMK9x9DV 2/Y1LR0ZmMU1yB9MjchiC3a2qqYOWBpJJlFGFyWvR5eg1TDnzdQH+TdUSay/WSx+ +gwfeN+ID7JyvHoW01As10I8VeWY9Uboz3NpKlK5+MQO2lquKdLqfyEEjMDBAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUjoLpRp1729uyky5JkRXrNJakRBowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg4Njkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxsVMwDQYJKoZIhvcNAQELBQADggEBAJvtS2k8VGv7NI72lRIKxlNB bzdor6dnXJnjL76xvh143riADkDzpr6gw+f3op0bdlBzb2tR78FWePAJQTwyO+29 Bee8hbb1K3NO8lzM4GaNx59hLdc95tPOwoAaM8EuhRKUO2OxZHchE+zwfiS7hy8L sufr4iQDjDWky41yEY7c6/9UXV60MEkBCUdUaBoTOpxar0ArQd48vhy6eP9qDSis Exe+jQkXSCeK2RcAPW7Kk4BDnHGLspNuVrM54SUu4xfdfrjg8lCsMZr0LkIeZicR L/GlQG3ea2qf31Lmh4xHZ2gR+mULqkjcPdfnLpUxu3cHJaIYGAyICz56CXLor04= -----END CERTIFICATE-----Generated at Thu Sep 24 08:17:36 2026 by rpki-client