$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219053.roa File: AS219053.roa (raw, json) Hash identifier: gHMIA3Fy4RfURGKQ6Yz+qZGo3Ei/HgCt9REd5YweYT0= Subject key identifier: 54:CA:0B:77:D0:CD:CF:A5:0A:E9:F3:38:9A:22:CB:47:BC:40:B8:3E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6453D67F27AD46F89E452C731AC1C736997393E1 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219053.roa Signing time: Thu 12 Nov 2026 10:45:25 +0000 ROA not before: Thu 12 Nov 2026 10:40:25 +0000 ROA not after: Thu 11 Nov 2027 10:45:25 +0000 asID: 219053 IP address blocks: 152.234.134.0/24 maxlen: 24 189.12.130.0/24 maxlen: 24 189.12.133.0/24 maxlen: 24 189.12.135.0/24 maxlen: 24 189.12.136.0/24 maxlen: 24 189.12.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:53:d6:7f:27:ad:46:f8:9e:45:2c:73:1a:c1:c7:36:99:73:93:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 12 10:40:25 2026 GMT Not After : Nov 11 10:45:25 2027 GMT Subject: CN=54CA0B77D0CDCFA50AE9F3389A22CB47BC40B83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:f2:fa:f5:5c:27:4e:8d:89:5e:0c:79:5b: 8b:bb:f8:f0:a8:ab:fd:8f:29:d9:27:c6:80:75:5f: 2f:fb:9d:60:4b:43:24:ca:b3:8a:a6:87:17:f1:63: cf:54:8f:12:7e:5f:23:4e:1b:e7:0e:54:49:0c:63: 9c:1c:10:0b:b1:7f:00:72:21:3d:13:be:b9:e7:13: 4e:8a:05:04:e7:0c:4e:d3:da:db:9c:2d:91:f2:40: d2:19:19:9e:cf:99:70:37:4c:68:f6:ca:7a:d6:a3: a3:c2:c3:f3:d0:9b:35:fa:27:89:36:f8:ef:41:5f: 04:2c:65:c9:92:fc:8f:0c:bc:63:fe:5a:3e:f5:bc: 8b:5d:d9:21:ac:22:53:7f:3d:06:a9:e2:44:50:d2: 2d:8d:44:5b:61:c8:d9:1b:92:cb:8d:f5:d3:44:68: 3d:b1:25:0d:f4:da:fa:69:cf:ff:e2:cc:05:c2:49: bc:d5:5b:ec:9b:0b:71:81:31:ec:a7:8e:d7:61:1c: c6:27:fc:df:d9:05:64:04:5e:07:a9:07:23:aa:49: cb:64:47:a8:d6:0c:40:7c:e2:d1:b6:9b:65:fc:ff: 37:6d:e0:a9:8d:59:58:ff:01:e9:ab:5f:8a:f6:19: e2:7b:5c:39:a5:84:b2:e1:9f:90:c3:ed:45:b5:e8: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:0B:77:D0:CD:CF:A5:0A:E9:F3:38:9A:22:CB:47:BC:40:B8:3E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.134.0/24 189.12.130.0/24 189.12.133.0/24 189.12.135.0-189.12.136.255 189.12.139.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:6a:b8:5c:b1:18:91:5b:23:00:6c:ab:e1:a0:02:4f:60:39: 6e:83:92:d9:d4:e4:f8:bc:9f:be:25:b5:0e:d6:42:a4:5f:c4: 6f:a1:22:28:81:ed:14:6c:78:e3:bb:20:d0:70:eb:65:21:d8: f1:8a:af:80:a2:fa:55:39:1e:b7:63:c0:de:46:60:6c:93:78: 9f:43:4e:64:af:f4:57:b5:a9:e4:fe:46:d5:16:4d:53:bb:e8: 58:9d:d3:33:ac:b9:e1:32:a1:53:fa:fe:0f:44:e3:81:03:6b: 05:3d:99:4d:b7:47:3f:95:17:d3:ff:94:e4:b9:a0:6f:45:69: 8c:72:5c:c5:ff:16:24:f7:a0:61:7b:a4:62:dd:5e:54:05:d5: 58:5e:77:f6:31:4a:29:ba:8a:4e:9f:3e:bd:12:4c:e2:51:44: 51:8f:84:7c:57:34:db:66:d1:77:85:77:7b:35:43:03:56:a5: 62:ad:3b:a5:e1:88:d7:ce:21:6a:62:c3:86:46:49:06:5c:74: f3:62:b3:ae:3b:48:9e:86:3e:6b:86:20:87:d5:c6:af:ab:27: 60:bc:ae:01:e8:b2:ae:5e:e8:38:a4:0d:68:90:5f:93:69:33: c4:33:cc:46:48:1d:03:fd:6b:fa:f1:10:a0:7b:4e:48:55:f4: e5:02:b1:b4 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUZFPWfyetRvieRSxzGsHHNplzk+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTIxMDQwMjVaFw0yNzExMTExMDQ1MjVaMDMxMTAvBgNV BAMTKDU0Q0EwQjc3RDBDRENGQTUwQUU5RjMzODlBMjJDQjQ3QkM0MEI4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g/L69VwnTo2JXgx5W4u7+PCo q/2PKdknxoB1Xy/7nWBLQyTKs4qmhxfxY89UjxJ+XyNOG+cOVEkMY5wcEAuxfwBy IT0TvrnnE06KBQTnDE7T2tucLZHyQNIZGZ7PmXA3TGj2ynrWo6PCw/PQmzX6J4k2 +O9BXwQsZcmS/I8MvGP+Wj71vItd2SGsIlN/PQap4kRQ0i2NRFthyNkbksuN9dNE aD2xJQ302vppz//izAXCSbzVW+ybC3GBMeynjtdhHMYn/N/ZBWQEXgepByOqSctk R6jWDEB84tG2m2X8/zdt4KmNWVj/AemrX4r2GeJ7XDmlhLLhn5DD7UW16AXFAgMB AAGjggJlMIICYTAdBgNVHQ4EFgQUVMoLd9DNz6UK6fM4miLLR7xAuD4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTkwNTMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMCwE AgABMCYDBACY6oYDBAC9DIIDBAC9DIUwDAMEAL0MhwMEAL0MiAMEAL0MizANBgkq hkiG9w0BAQsFAAOCAQEAX2q4XLEYkVsjAGyr4aACT2A5boOS2dTk+LyfviW1DtZC pF/Eb6EiKIHtFGx447sg0HDrZSHY8YqvgKL6VTket2PA3kZgbJN4n0NOZK/0V7Wp 5P5G1RZNU7voWJ3TM6y54TKhU/r+D0TjgQNrBT2ZTbdHP5UX0/+U5Lmgb0VpjHJc xf8WJPegYXukYt1eVAXVWF539jFKKbqKTp8+vRJM4lFEUY+EfFc022bRd4V3ezVD A1alYq07peGI184hamLDhkZJBlx082KzrjtInoY+a4Ygh9XGr6snYLyuAeiyrl7o OKQNaJBfk2kzxDPMRkgdA/1r+vEQoHtOSFX05QKxtA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:00:52 2026 by rpki-client