$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: H80loQKCtR5gIqODBPkrsTeIJ0JEnQmee5VHm0NKZX8= Subject key identifier: 76:90:A2:11:F4:84:9C:E6:F7:0F:26:D5:65:73:E5:88:7F:BE:D5:B1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 11C4FB11879DA0EB2906C4CAE2237C52014B2D39 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS2914.roa Signing time: Thu 12 Nov 2026 12:49:12 +0000 ROA not before: Thu 12 Nov 2026 12:44:12 +0000 ROA not after: Thu 11 Nov 2027 12:49:12 +0000 asID: 2914 IP address blocks: 187.55.43.0/24 maxlen: 24 187.55.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c4:fb:11:87:9d:a0:eb:29:06:c4:ca:e2:23:7c:52:01:4b:2d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 12 12:44:12 2026 GMT Not After : Nov 11 12:49:12 2027 GMT Subject: CN=7690A211F4849CE6F70F26D56573E5887FBED5B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:d7:c9:82:5a:ac:86:9a:f5:bd:84:8c:1f: 5f:2d:cd:33:16:91:e5:57:21:3f:ed:94:ec:f8:1d: 0c:15:07:ca:d0:38:0c:4f:86:8c:36:bc:af:a6:08: b6:59:f0:7d:ba:a1:32:c8:11:71:ed:20:82:59:c3: 64:45:0b:ce:2a:88:74:67:85:f7:e2:42:98:fa:78: a1:2b:20:3b:2c:64:d4:6f:5c:1c:3c:9f:b7:54:b3: 93:00:c3:86:24:d4:21:99:b3:e9:47:52:9a:71:24: df:2b:fd:27:e6:22:db:4f:fb:29:f4:39:16:7a:6a: 12:31:19:b6:83:ca:f9:28:ec:47:4d:de:8a:01:5b: da:af:1e:4b:61:64:49:4b:a0:1a:f0:67:34:ea:b0: 57:9e:e3:12:3e:ba:01:31:a9:10:49:c6:67:77:4e: 8f:ab:e4:e1:cb:90:54:df:9c:19:ae:90:0e:be:dc: 73:c2:c1:97:37:c8:0b:87:ff:dd:69:7e:4c:97:08: 09:4b:a2:26:84:04:93:b4:3d:98:ec:cf:5a:2f:ba: 75:c4:bf:3d:2f:d7:89:6b:58:d6:5f:81:b4:09:2e: d9:74:52:5f:e2:dc:4f:8b:a6:43:d2:ce:6b:6a:9e: 02:8c:dd:13:e8:d0:2f:18:8e:46:88:99:55:86:ba: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:A2:11:F4:84:9C:E6:F7:0F:26:D5:65:73:E5:88:7F:BE:D5:B1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.55.43.0-187.55.44.255 Signature Algorithm: sha256WithRSAEncryption 1c:29:61:a9:6b:73:62:dc:f9:47:be:e2:64:75:8b:c8:2d:5e: 34:85:67:9c:69:d3:a2:c2:94:79:72:8b:da:15:69:61:a5:a6: 5a:3a:49:fe:a8:95:f8:64:c5:db:c4:b6:d9:c8:c3:53:93:91: 8c:f4:85:c1:8b:cd:04:c8:2f:8a:61:5d:7c:1f:81:62:d7:49: 66:82:60:26:2a:29:6e:38:a1:9d:b8:e7:9f:b2:47:5a:75:5e: 8a:6a:7e:8c:06:5a:6f:21:ab:17:89:f9:65:cf:e3:38:3b:5b: 1c:d2:af:fe:19:74:f5:2a:5a:0e:fc:70:ee:e4:8a:ee:4c:ad: 6a:c5:e8:01:4b:c8:91:a8:c7:ff:57:d5:a4:67:3d:4d:5d:c4: ca:39:ec:5a:2b:b9:b1:43:56:49:48:13:14:d2:b7:d6:4e:19: 64:95:0d:62:a4:8b:7c:c4:b2:77:4c:fb:2a:21:0c:a0:e6:78: 34:e0:69:c1:c8:7c:15:fe:d0:be:a1:ea:03:64:be:9b:a2:58: 1c:c8:e3:ce:49:22:e7:3a:35:02:ca:c1:e1:c3:1c:1f:9c:f4: 34:53:25:fb:c6:6b:2e:1e:8f:6b:85:71:e5:ac:12:b9:32:c8: 63:ef:a8:4a:4e:b2:e7:53:7e:c2:f6:2d:2e:33:b9:14:ae:c1: 6e:45:93:25 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUEcT7EYedoOspBsTK4iN8UgFLLTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTIxMjQ0MTJaFw0yNzExMTExMjQ5MTJaMDMxMTAvBgNV BAMTKDc2OTBBMjExRjQ4NDlDRTZGNzBGMjZENTY1NzNFNTg4N0ZCRUQ1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqtfJglqshpr1vYSMH18tzTMW keVXIT/tlOz4HQwVB8rQOAxPhow2vK+mCLZZ8H26oTLIEXHtIIJZw2RFC84qiHRn hffiQpj6eKErIDssZNRvXBw8n7dUs5MAw4Yk1CGZs+lHUppxJN8r/SfmIttP+yn0 ORZ6ahIxGbaDyvko7EdN3ooBW9qvHkthZElLoBrwZzTqsFee4xI+ugExqRBJxmd3 To+r5OHLkFTfnBmukA6+3HPCwZc3yAuH/91pfkyXCAlLoiaEBJO0PZjsz1ovunXE vz0v14lrWNZfgbQJLtl0Ul/i3E+LpkPSzmtqngKM3RPo0C8YjkaImVWGurY9AgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUdpCiEfSEnOb3DybVZXPliH++1bEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyOTE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIA ATAOMAwDBAC7NysDBAC7NywwDQYJKoZIhvcNAQELBQADggEBABwpYalrc2Lc+Ue+ 4mR1i8gtXjSFZ5xp06LClHlyi9oVaWGlplo6Sf6olfhkxdvEttnIw1OTkYz0hcGL zQTIL4phXXwfgWLXSWaCYCYqKW44oZ2455+yR1p1XopqfowGWm8hqxeJ+WXP4zg7 WxzSr/4ZdPUqWg78cO7kiu5MrWrF6AFLyJGox/9X1aRnPU1dxMo57ForubFDVklI ExTSt9ZOGWSVDWKki3zEsndM+yohDKDmeDTgacHIfBX+0L6h6gNkvpuiWBzI485J Iuc6NQLKweHDHB+c9DRTJfvGay4ej2uFceWsErkyyGPvqEpOsudTfsL2LS4zuRSu wW5FkyU= -----END CERTIFICATE-----Generated at Sat Nov 14 21:06:08 2026 by rpki-client