$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa File: AS219447.roa (raw, json) Hash identifier: EfiNgDaKXd5O+uQKpf2gDGvJZdbKYLGz5q3643TRQ9s= Subject key identifier: DE:8F:8D:CC:E6:BA:09:E1:01:22:67:FA:B9:D5:9F:E5:4D:75:5E:E6 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 76BBD717397C6E4417D06E3AC502A721203EBE1C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa Signing time: Fri 13 Nov 2026 08:55:51 +0000 ROA not before: Fri 13 Nov 2026 08:50:51 +0000 ROA not after: Fri 12 Nov 2027 08:55:51 +0000 asID: 219447 IP address blocks: 152.234.134.0/24 maxlen: 24 187.14.182.0/24 maxlen: 24 187.14.183.0/24 maxlen: 24 189.12.130.0/24 maxlen: 24 189.12.133.0/24 maxlen: 24 189.12.135.0/24 maxlen: 24 189.12.136.0/24 maxlen: 24 189.12.139.0/24 maxlen: 24 189.12.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bb:d7:17:39:7c:6e:44:17:d0:6e:3a:c5:02:a7:21:20:3e:be:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 13 08:50:51 2026 GMT Not After : Nov 12 08:55:51 2027 GMT Subject: CN=DE8F8DCCE6BA09E1012267FAB9D59FE54D755EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:56:10:ab:b7:51:91:ce:d7:f2:d5:46:eb:06: c1:a1:bb:49:31:4d:85:75:cf:c9:76:67:1e:b4:9d: 10:41:2f:b8:f2:45:c6:50:c9:8b:c0:3c:d2:83:8e: d8:d7:9d:dc:d2:46:50:9d:a7:4e:a6:54:4b:a9:8b: f1:3c:bd:f1:e1:b8:39:89:fe:d4:53:f4:96:05:ee: fc:e3:b5:42:3e:79:e3:ad:5a:12:1b:48:6d:0e:e9: 3d:b0:4f:3c:0e:8d:05:77:ea:e9:89:be:38:0a:e2: 7f:10:86:ea:26:50:52:3a:44:33:3b:28:47:ac:68: e3:d0:4a:c8:ed:27:94:81:ae:cc:0b:67:e7:19:90: de:2a:7d:49:12:00:60:16:a1:27:77:fb:e2:ab:f4: 4d:cb:93:8d:4b:47:8c:61:41:7f:c6:15:b1:95:55: eb:0f:4a:be:dd:cb:2b:98:bf:69:fb:d7:0b:36:26: 16:d9:8f:ec:f0:cc:9a:1b:c1:d8:3a:82:04:fc:97: c4:c8:e1:ad:c6:5e:8b:f3:a7:1e:43:d6:2e:6c:f9: 2e:e2:7f:1c:49:84:26:f1:63:36:13:d2:88:44:03: 47:41:40:81:36:38:bc:7c:9b:97:d5:cd:37:2f:b3: 4d:4d:cc:09:e9:0e:a4:61:1a:51:6f:80:9a:91:57: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8F:8D:CC:E6:BA:09:E1:01:22:67:FA:B9:D5:9F:E5:4D:75:5E:E6 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.134.0/24 187.14.182.0/23 189.12.130.0/24 189.12.133.0/24 189.12.135.0-189.12.136.255 189.12.139.0/24 189.12.181.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f2:70:cf:62:6d:ee:f2:8a:67:4c:b5:b8:ac:8e:05:57:d8: a1:82:83:c2:ca:95:a0:ac:f7:ab:5c:a8:7b:40:3a:06:66:a4: 6e:84:53:9f:af:88:06:e4:6f:d4:bc:65:02:c3:c6:98:33:e0: e7:38:c1:fc:be:55:d9:37:f3:b1:6d:31:a2:8e:43:28:c1:15: b0:d7:d7:ef:63:d6:3c:f9:8d:42:64:85:11:43:21:5d:29:4c: 23:4d:8d:ce:e6:23:01:26:60:5d:b5:cc:75:97:d9:37:e4:a2: e5:00:31:f6:42:46:ed:bb:df:48:76:d7:e4:da:d1:53:24:4c: 57:17:24:0d:e3:61:95:5a:3c:53:93:6a:d3:19:e9:19:a5:79: f9:55:2d:f8:b7:d9:1a:01:c2:c5:30:8c:eb:ee:69:fb:35:99: 3b:96:4c:8f:64:bf:5f:c6:61:09:61:27:01:46:79:11:f5:f8: ff:6f:c7:61:92:30:22:06:be:19:98:c1:71:c0:00:f7:13:e2: 6d:ff:07:93:63:4a:5c:9c:ef:86:20:65:41:e9:ed:52:a1:8d: de:03:19:14:90:c7:25:24:2c:49:ea:02:65:7a:93:65:e8:df: 9b:83:55:0a:f1:0d:60:36:f1:5a:f2:9b:7b:da:e8:88:9e:40: c3:77:e1:d3 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUdrvXFzl8bkQX0G46xQKnISA+vhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTMwODUwNTFaFw0yNzExMTIwODU1NTFaMDMxMTAvBgNV BAMTKERFOEY4RENDRTZCQTA5RTEwMTIyNjdGQUI5RDU5RkU1NEQ3NTVFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVhCrt1GRztfy1UbrBsGhu0kx TYV1z8l2Zx60nRBBL7jyRcZQyYvAPNKDjtjXndzSRlCdp06mVEupi/E8vfHhuDmJ /tRT9JYF7vzjtUI+eeOtWhIbSG0O6T2wTzwOjQV36umJvjgK4n8QhuomUFI6RDM7 KEesaOPQSsjtJ5SBrswLZ+cZkN4qfUkSAGAWoSd3++Kr9E3Lk41LR4xhQX/GFbGV VesPSr7dyyuYv2n71ws2JhbZj+zwzJobwdg6ggT8l8TI4a3GXovzpx5D1i5s+S7i fxxJhCbxYzYT0ohEA0dBQIE2OLx8m5fVzTcvs01NzAnpDqRhGlFvgJqRV3JjAgMB AAGjggJxMIICbTAdBgNVHQ4EFgQU3o+NzOa6CeEBImf6udWf5U11XuYwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTk0NDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MDgE AgABMDIDBACY6oYDBAG7DrYDBAC9DIIDBAC9DIUwDAMEAL0MhwMEAL0MiAMEAL0M iwMEAL0MtTANBgkqhkiG9w0BAQsFAAOCAQEAPPJwz2Jt7vKKZ0y1uKyOBVfYoYKD wsqVoKz3q1yoe0A6BmakboRTn6+IBuRv1LxlAsPGmDPg5zjB/L5V2TfzsW0xoo5D KMEVsNfX72PWPPmNQmSFEUMhXSlMI02NzuYjASZgXbXMdZfZN+Si5QAx9kJG7bvf SHbX5NrRUyRMVxckDeNhlVo8U5Nq0xnpGaV5+VUt+LfZGgHCxTCM6+5p+zWZO5ZM j2S/X8ZhCWEnAUZ5EfX4/2/HYZIwIga+GZjBccAA9xPibf8Hk2NKXJzvhiBlQent UqGN3gMZFJDHJSQsSeoCZXqTZejfm4NVCvENYDbxWvKbe9roiJ5Aw3fh0w== -----END CERTIFICATE-----Generated at Sun Nov 15 13:22:16 2026 by rpki-client