$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219427.roa File: AS219427.roa (raw, json) Hash identifier: 6Brq3ZMWcgPa9y9VejjMnjqYfCFfzEJYDD3UZ81qR48= Subject key identifier: 4F:34:E7:CA:AE:7E:6C:67:13:7E:20:2E:70:21:5C:71:9C:28:A1:93 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6156140A6F2D3088477E22285D10737E6DE07429 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219427.roa Signing time: Thu 24 Sep 2026 04:34:49 +0000 ROA not before: Thu 24 Sep 2026 04:29:49 +0000 ROA not after: Thu 23 Sep 2027 04:34:49 +0000 asID: 219427 IP address blocks: 152.234.130.0/24 maxlen: 24 152.234.133.0/24 maxlen: 24 177.201.192.0/24 maxlen: 24 177.201.194.0/24 maxlen: 24 179.69.66.0/24 maxlen: 24 179.69.67.0/24 maxlen: 24 179.69.127.0/24 maxlen: 24 187.15.203.0/24 maxlen: 24 200.138.24.0/24 maxlen: 24 200.149.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:56:14:0a:6f:2d:30:88:47:7e:22:28:5d:10:73:7e:6d:e0:74:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 24 04:29:49 2026 GMT Not After : Sep 23 04:34:49 2027 GMT Subject: CN=4F34E7CAAE7E6C67137E202E70215C719C28A193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:aa:da:b1:7d:a7:86:a2:ea:ca:5b:18:52: f6:a4:0b:eb:6f:b3:6a:34:1b:17:33:38:98:b7:06: 0e:eb:e3:82:3d:13:b7:f8:54:9e:78:46:ed:2e:23: be:18:22:8c:fe:9a:a5:12:e7:90:ef:9a:a4:11:ee: aa:fd:97:c3:9e:29:35:26:3c:79:fd:8b:f1:88:cb: f3:36:72:51:cb:02:09:f6:70:fa:fd:a0:d8:cd:49: ef:09:b5:5b:17:8e:6a:b9:90:f0:c2:13:6b:be:aa: c4:33:0e:cc:d8:f0:00:1c:cb:0a:a8:5d:1c:82:4a: 66:cb:30:de:dd:15:db:b8:61:da:ad:50:13:8f:98: 9a:0c:ad:ab:03:b1:5b:bf:dd:97:24:26:ca:09:c5: 6f:e6:64:5f:6a:d8:ad:37:72:fa:03:06:e8:d1:b6: 43:88:d3:fb:7a:de:a7:a9:a1:d8:7f:8f:48:81:b3: 95:b8:f1:28:90:b1:94:32:39:5e:7a:fc:b9:7f:77: 57:59:f6:22:2f:d5:5f:65:10:6a:47:d5:eb:6a:42: a0:c7:d2:d0:dc:a4:87:25:3f:32:e5:3b:42:86:db: c8:1e:c1:18:4d:bd:79:96:38:d6:5c:e7:0d:36:0a: a9:cf:62:49:35:dc:c9:57:a1:d1:8f:b6:4c:5f:ee: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:E7:CA:AE:7E:6C:67:13:7E:20:2E:70:21:5C:71:9C:28:A1:93 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.130.0/24 152.234.133.0/24 177.201.192.0/24 177.201.194.0/24 179.69.66.0/23 179.69.127.0/24 187.15.203.0/24 200.138.24.0/24 200.149.185.0/24 Signature Algorithm: sha256WithRSAEncryption 87:b9:b3:f9:84:14:a6:3a:47:33:da:e4:ee:3c:c0:ca:27:e4: e4:fa:f7:d9:1b:e2:2c:f2:f4:e5:02:b9:dc:64:e5:37:35:99: aa:61:96:74:0d:51:0e:36:37:46:aa:86:c1:23:9d:6f:b0:e0: 06:61:33:e2:13:6c:ed:ac:b2:16:f7:38:3a:bf:09:2e:11:c6: 1e:83:1f:02:60:ff:f4:6c:28:88:7f:7f:91:e0:04:ea:2f:88: f9:26:d6:79:dc:44:a6:7d:f1:6e:46:27:08:bc:bf:24:c4:86: 43:b2:99:5c:6e:77:5e:38:20:5f:40:82:52:57:bd:e6:bf:8f: 8a:6a:04:be:00:63:4f:3f:e1:d6:83:64:95:c1:7d:de:6d:80: eb:2b:12:9f:ec:ad:5c:39:07:48:b0:6f:bb:34:2c:3f:23:40: ad:71:d4:ac:3e:07:d2:0b:08:67:60:49:6b:d8:12:00:77:dd: a2:88:73:f6:df:ab:fe:82:8b:50:3b:59:0e:22:cc:fa:84:7a: 38:09:01:ee:9d:fa:4f:50:d3:90:3c:d7:5c:be:4f:33:10:58: 47:2a:2c:7a:c6:ef:45:ec:fb:45:6e:38:82:a4:59:2b:01:1a: 72:2b:f4:0b:07:0a:ab:ff:30:28:54:ef:77:90:6d:f4:03:9b: 8d:d7:06:39 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUYVYUCm8tMIhHfiIoXRBzfm3gdCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjQwNDI5NDlaFw0yNzA5MjMwNDM0NDlaMDMxMTAvBgNV BAMTKDRGMzRFN0NBQUU3RTZDNjcxMzdFMjAyRTcwMjE1QzcxOUMyOEExOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3KrasX2nhqLqylsYUvakC+tv s2o0GxczOJi3Bg7r44I9E7f4VJ54Ru0uI74YIoz+mqUS55DvmqQR7qr9l8OeKTUm PHn9i/GIy/M2clHLAgn2cPr9oNjNSe8JtVsXjmq5kPDCE2u+qsQzDszY8AAcywqo XRyCSmbLMN7dFdu4YdqtUBOPmJoMrasDsVu/3ZckJsoJxW/mZF9q2K03cvoDBujR tkOI0/t63qepodh/j0iBs5W48SiQsZQyOV56/Ll/d1dZ9iIv1V9lEGpH1etqQqDH 0tDcpIclPzLlO0KG28gewRhNvXmWONZc5w02CqnPYkk13MlXodGPtkxf7hZJAgMB AAGjggJ1MIICcTAdBgNVHQ4EFgQUTzTnyq5+bGcTfiAucCFccZwooZMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTk0Mjcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwE AgABMDYDBACY6oIDBACY6oUDBACxycADBACxycIDBAGzRUIDBACzRX8DBAC7D8sD BADIihgDBADIlbkwDQYJKoZIhvcNAQELBQADggEBAIe5s/mEFKY6RzPa5O48wMon 5OT699kb4izy9OUCudxk5Tc1maphlnQNUQ42N0aqhsEjnW+w4AZhM+ITbO2sshb3 ODq/CS4Rxh6DHwJg//RsKIh/f5HgBOoviPkm1nncRKZ98W5GJwi8vyTEhkOymVxu d144IF9AglJXvea/j4pqBL4AY08/4daDZJXBfd5tgOsrEp/srVw5B0iwb7s0LD8j QK1x1Kw+B9ILCGdgSWvYEgB33aKIc/bfq/6Ci1A7WQ4izPqEejgJAe6d+k9Q05A8 11y+TzMQWEcqLHrG70Xs+0VuOIKkWSsBGnIr9AsHCqv/MChU73eQbfQDm43XBjk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:31:59 2026 by rpki-client