$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219057.roa File: AS219057.roa (raw, json) Hash identifier: 7w2zM3dHnBkga4E3GqoQ6+flU05IE/Th7yuOZJo7Sl8= Subject key identifier: 78:6B:AD:B2:64:A2:1E:89:5D:7F:BC:B8:CA:69:7F:FC:9B:FE:39:54 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5F2E40BBD4D7AC3854B40BDF85F87F6BD4291D96 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219057.roa Signing time: Wed 23 Sep 2026 02:08:08 +0000 ROA not before: Wed 23 Sep 2026 02:03:08 +0000 ROA not after: Wed 22 Sep 2027 02:08:08 +0000 asID: 219057 IP address blocks: 189.12.128.0/24 maxlen: 24 189.12.157.0/24 maxlen: 24 189.30.102.0/24 maxlen: 24 189.30.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2e:40:bb:d4:d7:ac:38:54:b4:0b:df:85:f8:7f:6b:d4:29:1d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 23 02:03:08 2026 GMT Not After : Sep 22 02:08:08 2027 GMT Subject: CN=786BADB264A21E895D7FBCB8CA697FFC9BFE3954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:c5:f9:de:ea:35:93:fb:55:30:4a:04:05: 28:7c:8c:5c:6f:3b:04:fb:9a:ee:ca:84:c8:5d:7c: ca:14:9a:5e:a5:8e:61:c9:8d:0b:06:ec:89:5c:11: 42:ab:09:9c:41:92:39:7c:ba:d6:ba:7e:64:9c:d5: 50:40:59:99:84:e2:5e:27:d7:e8:a9:96:3b:2e:ff: 30:6e:13:09:f9:d6:93:c6:92:ba:ff:7e:32:c2:6f: b5:c3:ed:f0:3a:b5:c4:39:ff:e8:41:71:f6:87:d6: cc:bb:23:99:f8:43:1b:9c:56:1f:5e:5d:14:66:b9: 4d:48:2b:c8:e7:b2:0c:5c:4d:9a:24:32:c0:9b:4b: cc:a9:d4:f4:6d:85:16:d8:51:57:ef:d8:ab:b9:af: 62:33:19:ed:e8:3b:52:09:e6:34:72:eb:80:d6:fe: 66:dc:9e:dd:6b:19:55:98:7f:17:b2:2a:14:95:5b: 72:4c:34:2d:2c:12:1b:b5:e3:03:6b:9c:3d:d2:8f: 0c:41:13:91:fe:67:13:5d:69:ba:e9:8c:24:88:e3: 47:e5:5b:24:ac:2a:b8:e5:9b:96:c3:38:ef:7e:be: 08:9e:20:e7:32:77:dd:56:7a:53:76:dd:92:cc:28: 3e:b6:22:fb:45:c3:58:52:1a:64:5a:07:b3:69:7d: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6B:AD:B2:64:A2:1E:89:5D:7F:BC:B8:CA:69:7F:FC:9B:FE:39:54 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.128.0/24 189.12.157.0/24 189.30.102.0/24 189.30.108.0/24 Signature Algorithm: sha256WithRSAEncryption bc:0f:74:8c:7e:e8:32:e9:2a:9f:2f:4b:18:00:73:60:ca:d5: ec:7a:31:be:71:b1:a9:ec:58:b9:da:7b:32:2d:48:c4:19:82: 3b:b5:3f:53:0c:9b:26:ba:5f:6c:3c:ce:f2:49:84:d7:88:83: 72:5c:37:f8:1b:62:25:46:6a:6e:42:14:f9:23:e6:69:4f:24: 2e:73:2a:57:58:8c:55:d5:1c:74:31:fa:11:f2:1d:d2:ac:13: 2e:33:66:3f:90:51:6d:48:18:e8:18:04:5a:32:bc:fc:fa:da: 4b:db:81:1f:5e:1e:dd:29:c7:94:62:d5:af:6a:7d:b3:3c:14: c7:dd:5a:a3:73:93:10:92:9c:5e:f8:be:57:b7:41:35:62:a2: 7e:76:b1:d3:f8:28:fd:18:34:82:48:c3:b8:e7:4d:b7:bf:ed: 6f:f7:1d:54:4b:49:44:f7:4a:3b:e3:0c:97:b9:b8:69:eb:18: a9:c4:3d:40:17:4c:f6:36:1f:db:5c:62:76:2a:e3:a5:2e:25: e1:4b:9e:cb:d2:f3:b4:ef:91:99:df:83:a2:c4:8e:fe:12:19: 55:4b:1b:0b:ca:15:9f:d3:89:8a:af:0c:94:f1:e4:31:d8:73: 00:15:9c:b4:c2:18:86:35:dd:27:ba:ed:1a:f4:e5:19:6f:26: 60:c2:f2:71 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUXy5Au9TXrDhUtAvfhfh/a9QpHZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjMwMjAzMDhaFw0yNzA5MjIwMjA4MDhaMDMxMTAvBgNV BAMTKDc4NkJBREIyNjRBMjFFODk1RDdGQkNCOENBNjk3RkZDOUJGRTM5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSMX53uo1k/tVMEoEBSh8jFxv OwT7mu7KhMhdfMoUml6ljmHJjQsG7IlcEUKrCZxBkjl8uta6fmSc1VBAWZmE4l4n 1+ipljsu/zBuEwn51pPGkrr/fjLCb7XD7fA6tcQ5/+hBcfaH1sy7I5n4QxucVh9e XRRmuU1IK8jnsgxcTZokMsCbS8yp1PRthRbYUVfv2Ku5r2IzGe3oO1IJ5jRy64DW /mbcnt1rGVWYfxeyKhSVW3JMNC0sEhu14wNrnD3SjwxBE5H+ZxNdabrpjCSI40fl WySsKrjlm5bDOO9+vgieIOcyd91WelN23ZLMKD62IvtFw1hSGmRaB7NpfffFAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUeGutsmSiHoldf7y4yml//Jv+OVQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTkwNTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4E AgABMBgDBAC9DIADBAC9DJ0DBAC9HmYDBAC9HmwwDQYJKoZIhvcNAQELBQADggEB ALwPdIx+6DLpKp8vSxgAc2DK1ex6Mb5xsansWLnaezItSMQZgju1P1MMmya6X2w8 zvJJhNeIg3JcN/gbYiVGam5CFPkj5mlPJC5zKldYjFXVHHQx+hHyHdKsEy4zZj+Q UW1IGOgYBFoyvPz62kvbgR9eHt0px5Ri1a9qfbM8FMfdWqNzkxCSnF74vle3QTVi on52sdP4KP0YNIJIw7jnTbe/7W/3HVRLSUT3SjvjDJe5uGnrGKnEPUAXTPY2H9tc YnYq46UuJeFLnsvS87TvkZnfg6LEjv4SGVVLGwvKFZ/TiYqvDJTx5DHYcwAVnLTC GIY13Se67Rr05RlvJmDC8nE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:06 2026 by rpki-client