$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219200.roa File: AS219200.roa (raw, json) Hash identifier: yJpao5SdNC5mO0YjYRfL9bxfjvtBANdAq6ug4P5RPPs= Subject key identifier: 2A:EC:0C:6A:BC:2F:49:0A:F8:61:C1:7B:96:67:5D:00:DD:35:6E:1C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7C27CFA12BCFF11F0B9DF08FE4E7DDE728F6C4AE Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219200.roa Signing time: Fri 13 Nov 2026 08:55:51 +0000 ROA not before: Fri 13 Nov 2026 08:50:51 +0000 ROA not after: Fri 12 Nov 2027 08:55:51 +0000 asID: 219200 IP address blocks: 189.12.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:27:cf:a1:2b:cf:f1:1f:0b:9d:f0:8f:e4:e7:dd:e7:28:f6:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 13 08:50:51 2026 GMT Not After : Nov 12 08:55:51 2027 GMT Subject: CN=2AEC0C6ABC2F490AF861C17B96675D00DD356E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:02:a4:f0:5d:c9:d0:32:d0:32:29:c4:91: ce:a7:49:8b:ab:c8:e5:00:5a:e1:61:b0:6a:f8:0c: aa:af:4a:3f:39:6b:1b:7a:30:c9:b8:e5:0d:28:5e: 1f:c1:e1:a8:da:33:70:a5:29:f0:8d:cd:69:ad:6c: dc:2c:9f:16:1a:85:f4:20:6d:9b:9d:96:af:df:bf: ad:bf:51:73:a6:e3:ad:0b:a0:63:3e:78:c0:db:8a: 21:b0:25:42:71:f0:40:04:17:32:c5:59:69:9a:d5: 06:66:b0:e4:a9:e0:b0:52:fe:ff:03:9d:91:f6:29: a9:7f:65:8c:aa:79:50:14:e5:b4:86:5f:95:56:ac: 88:bd:36:18:9b:32:b6:11:01:a3:42:54:2c:8c:45: 21:f2:73:76:a7:62:ce:78:57:0f:6d:40:a9:e1:80: ac:a4:70:40:d1:1f:7d:72:5f:c1:16:f2:a2:7b:62: 30:d1:38:42:dc:f3:dd:a6:c7:5a:1f:6b:a7:ba:91: ee:d4:ca:6a:08:09:9f:f0:65:72:b6:fb:46:1d:59: 68:bf:9e:48:b0:f0:28:6c:50:af:e6:44:d0:4e:15: f6:f4:ff:0f:c4:40:6e:de:47:03:a6:a4:70:ba:89: b3:a5:9e:3e:b2:0e:b8:a2:18:76:ad:f3:9a:21:54: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EC:0C:6A:BC:2F:49:0A:F8:61:C1:7B:96:67:5D:00:DD:35:6E:1C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219200.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.181.0/24 Signature Algorithm: sha256WithRSAEncryption 33:35:db:8e:80:dd:c5:db:b6:89:2e:9e:15:03:cf:65:ca:65: 37:4f:a8:8c:2f:4c:c5:35:52:04:52:94:8a:f8:7f:7c:cc:0c: dc:b7:6d:9f:41:8e:a5:e2:86:0c:7e:36:19:58:fe:32:3d:28: f7:52:89:81:6d:3b:61:56:37:e0:a1:93:97:6c:a5:5c:47:07: af:1a:2e:01:e8:4a:25:2c:82:a8:2e:a4:55:cf:d1:29:9c:f5: 05:76:4d:27:45:6d:22:5d:90:f0:ef:75:99:0e:72:54:e8:56: 95:3f:5f:85:63:76:c8:0f:ac:55:f7:3a:70:18:3b:54:11:f0: 4a:92:74:ec:cc:de:77:6f:fc:c2:37:00:d1:28:f3:a1:c0:26: 72:15:bf:5e:14:a2:9c:51:1f:f7:5a:2e:77:f1:05:cf:e5:7d: 5a:7c:af:dd:01:5c:73:78:ca:01:15:fc:d2:51:45:e5:65:2d: 1e:93:e2:cb:0b:a6:6a:b0:f1:05:4d:f8:0b:d9:49:84:23:02: 9f:7c:5b:69:0e:14:88:91:37:8c:71:93:b2:30:bb:46:54:6a: 2e:a2:47:af:19:1b:92:f9:55:30:ce:cf:5c:59:69:cb:5d:72: 43:28:d8:04:b2:6f:b8:5f:07:f2:bd:c8:d1:25:06:5d:61:0d: dd:c3:34:1b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUfCfPoSvP8R8LnfCP5Ofd5yj2xK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTMwODUwNTFaFw0yNzExMTIwODU1NTFaMDMxMTAvBgNV BAMTKDJBRUMwQzZBQkMyRjQ5MEFGODYxQzE3Qjk2Njc1RDAwREQzNTZFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLQKk8F3J0DLQMinEkc6nSYur yOUAWuFhsGr4DKqvSj85axt6MMm45Q0oXh/B4ajaM3ClKfCNzWmtbNwsnxYahfQg bZudlq/fv62/UXOm460LoGM+eMDbiiGwJUJx8EAEFzLFWWma1QZmsOSp4LBS/v8D nZH2Kal/ZYyqeVAU5bSGX5VWrIi9NhibMrYRAaNCVCyMRSHyc3anYs54Vw9tQKnh gKykcEDRH31yX8EW8qJ7YjDROELc892mx1ofa6e6ke7UymoICZ/wZXK2+0YdWWi/ nkiw8ChsUK/mRNBOFfb0/w/EQG7eRwOmpHC6ibOlnj6yDriiGHat85ohVMfZAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUKuwMarwvSQr4YcF7lmddAN01bhwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTkyMDAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC9DLUwDQYJKoZIhvcNAQELBQADggEBADM1246A3cXbtokunhUDz2XK ZTdPqIwvTMU1UgRSlIr4f3zMDNy3bZ9BjqXihgx+NhlY/jI9KPdSiYFtO2FWN+Ch k5dspVxHB68aLgHoSiUsgqgupFXP0Smc9QV2TSdFbSJdkPDvdZkOclToVpU/X4Vj dsgPrFX3OnAYO1QR8EqSdOzM3ndv/MI3ANEo86HAJnIVv14UopxRH/daLnfxBc/l fVp8r90BXHN4ygEV/NJRReVlLR6T4ssLpmqw8QVN+AvZSYQjAp98W2kOFIiRN4xx k7Iwu0ZUai6iR68ZG5L5VTDOz1xZactdckMo2ASyb7hfB/K9yNElBl1hDd3DNBs= -----END CERTIFICATE-----Generated at Sun Nov 15 12:37:08 2026 by rpki-client