$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS275723.roa File: AS275723.roa (raw, json) Hash identifier: t02ogZWuSdS9zpAaeAW5H8TGJmR58B4pTimYNg6FGXk= Subject key identifier: 6F:D9:6E:BB:2D:FE:94:CD:3F:BC:0D:E3:B8:7F:1B:B3:44:AF:FC:88 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1D57E19134B3EB43E766362B5CF4916D83309AA1 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS275723.roa Signing time: Tue 22 Sep 2026 08:47:04 +0000 ROA not before: Tue 22 Sep 2026 08:42:04 +0000 ROA not after: Tue 21 Sep 2027 08:47:04 +0000 asID: 275723 IP address blocks: 177.201.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 01:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:57:e1:91:34:b3:eb:43:e7:66:36:2b:5c:f4:91:6d:83:30:9a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:04 2026 GMT Not After : Sep 21 08:47:04 2027 GMT Subject: CN=6FD96EBB2DFE94CD3FBC0DE3B87F1BB344AFFC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:17:e7:f6:7b:01:3c:77:f8:07:08:d7:76: 39:81:66:21:4d:17:b3:ba:1c:f5:af:a0:ba:76:17: 70:e5:a8:42:44:26:96:ad:0d:6e:60:b4:83:47:15: 2e:02:2e:68:d9:ad:1c:73:23:7a:58:00:d9:48:50: 78:49:8d:3b:a5:4a:74:d4:75:0b:ab:43:5a:fb:61: 75:dc:72:ed:f4:e2:c6:fc:ef:56:11:2f:d9:99:63: 71:af:62:f8:f4:03:22:aa:70:7e:d7:10:34:d6:e7: 0c:69:3e:59:b3:12:cb:18:2a:2d:df:3c:86:e7:2d: d5:5b:c8:ce:70:c8:aa:26:bb:ab:54:5c:94:5b:5b: 7e:b2:22:b1:ea:b2:9a:59:84:f0:e3:4c:cd:b2:40: 9f:80:19:60:47:c5:cb:eb:ac:b5:57:7e:78:e2:17: 10:a0:62:66:52:61:ad:24:e6:f2:69:e4:9e:78:49: 87:02:77:89:58:ac:60:ce:7f:f4:ce:c2:43:71:61: bc:b8:7f:26:05:a0:e2:4b:51:08:68:0e:44:d5:12: da:c6:27:32:68:f0:3a:ab:76:1d:a7:25:8a:18:cb: d9:14:65:a9:7c:21:9a:3a:a3:27:1f:21:b1:82:fb: d4:c7:1e:81:bb:97:c9:5b:27:65:eb:18:dc:12:1b: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D9:6E:BB:2D:FE:94:CD:3F:BC:0D:E3:B8:7F:1B:B3:44:AF:FC:88 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS275723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.211.0/24 Signature Algorithm: sha256WithRSAEncryption 61:f8:7e:2c:f3:08:0f:72:32:2a:dc:72:e9:c2:60:e9:ef:7a: 11:ea:12:fe:87:b8:d0:84:bb:00:54:33:e4:e9:d4:44:20:8b: 08:fe:ac:27:a2:b6:2d:25:3f:a5:cf:7e:3d:ad:30:68:a1:cf: 60:76:f1:49:af:d8:27:5c:53:d0:9f:0f:4e:a3:fe:f4:27:76: 4e:97:98:71:7a:23:58:46:8d:f6:08:c3:44:e4:8a:28:bd:38: 4e:b9:8b:d1:53:77:12:35:16:b0:6c:30:48:6a:67:35:fb:6d: 11:87:db:0b:29:9b:76:b6:bc:4a:5b:e1:0e:92:ff:25:d1:08: b4:54:8d:23:ba:bc:df:67:70:df:2b:bf:29:9a:d5:90:6e:6d: 88:5f:f6:19:ce:d1:6c:fa:88:bd:b8:70:2c:79:38:03:cc:3a: 3b:ad:e8:a7:a5:d1:82:16:40:04:df:2b:cd:19:af:f1:a1:69: ae:55:c7:af:d2:88:02:83:91:ab:b1:b8:2e:c8:83:43:72:b5: 31:97:d7:3e:f7:53:5b:bb:46:d6:40:82:b6:e6:22:e2:4e:73: 94:ad:90:62:78:fc:97:93:2b:de:34:13:6f:cb:1c:40:da:f9: d3:66:bf:c4:79:bc:f2:75:ce:d9:8c:ca:1c:e4:b6:28:d6:95: 69:1f:c7:bb -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUHVfhkTSz60PnZjYrXPSRbYMwmqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDRaFw0yNzA5MjEwODQ3MDRaMDMxMTAvBgNV BAMTKDZGRDk2RUJCMkRGRTk0Q0QzRkJDMERFM0I4N0YxQkIzNDRBRkZDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtohfn9nsBPHf4BwjXdjmBZiFN F7O6HPWvoLp2F3DlqEJEJpatDW5gtINHFS4CLmjZrRxzI3pYANlIUHhJjTulSnTU dQurQ1r7YXXccu304sb871YRL9mZY3GvYvj0AyKqcH7XEDTW5wxpPlmzEssYKi3f PIbnLdVbyM5wyKomu6tUXJRbW36yIrHqsppZhPDjTM2yQJ+AGWBHxcvrrLVXfnji FxCgYmZSYa0k5vJp5J54SYcCd4lYrGDOf/TOwkNxYby4fyYFoOJLUQhoDkTVEtrG JzJo8Dqrdh2nJYoYy9kUZal8IZo6oycfIbGC+9THHoG7l8lbJ2XrGNwSG4enAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUb9luuy3+lM0/vA3juH8bs0Sv/IgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyNzU3MjMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxydMwDQYJKoZIhvcNAQELBQADggEBAGH4fizzCA9yMirccunCYOnv ehHqEv6HuNCEuwBUM+Tp1EQgiwj+rCeiti0lP6XPfj2tMGihz2B28Umv2CdcU9Cf D06j/vQndk6XmHF6I1hGjfYIw0Tkiii9OE65i9FTdxI1FrBsMEhqZzX7bRGH2wsp m3a2vEpb4Q6S/yXRCLRUjSO6vN9ncN8rvyma1ZBubYhf9hnO0Wz6iL24cCx5OAPM Ojut6Kel0YIWQATfK80Zr/Ghaa5Vx6/SiAKDkauxuC7Ig0NytTGX1z73U1u7RtZA grbmIuJOc5StkGJ4/JeTK940E2/LHEDa+dNmv8R5vPJ1ztmMyhzktijWlWkfx7s= -----END CERTIFICATE-----Generated at Thu Sep 24 18:44:52 2026 by rpki-client