$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS3257.roa File: AS3257.roa (raw, json) Hash identifier: /5s5wc1Hn8nWjEbaunQ9RT3ask8mIWYUoPaoFZG+Few= Subject key identifier: 97:67:15:CF:27:C8:45:DE:9B:D6:57:10:3F:0D:CB:D4:4D:5D:D3:7F Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 36CC38D2F60F86C5A517777631D23DAF4D732427 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS3257.roa Signing time: Thu 12 Nov 2026 12:48:36 +0000 ROA not before: Thu 12 Nov 2026 12:43:36 +0000 ROA not after: Thu 11 Nov 2027 12:48:36 +0000 asID: 3257 IP address blocks: 187.55.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cc:38:d2:f6:0f:86:c5:a5:17:77:76:31:d2:3d:af:4d:73:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 12 12:43:36 2026 GMT Not After : Nov 11 12:48:36 2027 GMT Subject: CN=976715CF27C845DE9BD657103F0DCBD44D5DD37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:41:1e:cb:24:0a:bc:6f:6a:09:9d:b1:fa: d1:0b:95:4e:71:12:14:ef:58:80:a3:83:6d:f8:06: 70:ba:38:c7:e3:d7:06:17:66:2c:85:c1:4b:ff:8c: fe:f4:9d:27:21:90:ba:3d:15:74:eb:8c:bc:91:d7: 1f:94:12:1f:53:39:0c:f2:51:e4:02:69:b5:f5:b8: 5e:5a:79:d0:fe:9d:f1:2b:c0:75:34:c7:6e:fd:92: b4:8c:0d:bd:4d:f5:9f:d7:67:3e:c1:4f:24:5d:18: f8:61:17:02:63:c1:24:f6:9f:fa:5f:f8:c2:e5:c7: 13:fc:6e:db:3a:66:8f:b8:fd:4c:bc:20:4e:a6:de: ab:b4:28:8d:8e:31:1e:41:09:ad:9c:e1:c7:47:35: 0f:d8:2f:ab:39:0d:79:15:d0:eb:4b:8b:d0:94:d2: c5:18:10:4f:30:fd:6f:11:c3:e9:70:c2:66:06:aa: a3:04:05:24:16:27:7a:53:c0:ae:ed:94:6a:6b:e6: 69:9d:4b:15:5f:be:d7:c2:54:49:47:b2:f0:4c:00: 8d:4b:bb:b6:82:f3:c0:c4:e1:e2:f1:2e:e0:11:fa: 95:0f:2f:51:d9:da:a2:0a:d0:0e:46:1f:0a:dd:1a: eb:ec:f1:28:72:d7:d9:66:05:0c:25:68:39:4c:18: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:15:CF:27:C8:45:DE:9B:D6:57:10:3F:0D:CB:D4:4D:5D:D3:7F X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS3257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.55.42.0/24 Signature Algorithm: sha256WithRSAEncryption 20:9c:15:3e:ad:a1:2e:01:39:9f:97:cd:7d:5b:39:03:fc:77: ab:59:2b:e1:35:e1:2c:48:bb:3b:22:03:c4:ad:22:ff:db:de: e7:df:34:4a:8c:3f:7d:01:17:5d:b5:f2:d1:e0:34:0f:51:00: 73:99:00:19:0d:35:23:aa:2c:9a:54:8f:7f:09:d7:cd:bf:ba: 8b:96:5c:ab:74:8e:92:cb:83:52:37:3e:5e:67:37:c2:d7:85: 5e:4c:0a:e9:28:c0:0b:4c:2c:d4:e7:36:aa:0d:f1:d8:b8:b8: e7:2e:cc:5a:cb:0e:cb:94:a5:ed:92:3a:cd:7c:ea:67:48:26: 5b:ae:75:49:78:da:d1:9a:78:5e:07:8a:50:07:90:2b:1b:95: 10:0c:d8:3f:63:8c:02:31:93:ad:b6:2f:74:25:dc:fc:bf:dd: 91:28:83:91:52:e1:bc:3f:55:cd:6b:27:d4:25:88:4f:61:1e: 9c:9d:de:7b:07:c1:55:96:fb:3f:3f:10:ea:de:07:ca:56:c2: c2:a1:fb:b0:56:89:d2:55:87:8a:65:af:f6:20:be:b2:5f:df: 19:8d:65:23:20:b9:95:41:54:bb:e5:83:9d:3d:95:3c:dd:9d: 41:7a:e6:52:73:86:4f:14:88:17:0c:eb:48:a2:ca:4a:48:b4: f1:ef:80:8b -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUNsw40vYPhsWlF3d2MdI9r01zJCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTIxMjQzMzZaFw0yNzExMTExMjQ4MzZaMDMxMTAvBgNV BAMTKDk3NjcxNUNGMjdDODQ1REU5QkQ2NTcxMDNGMERDQkQ0NEQ1REQzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AEEeyyQKvG9qCZ2x+tELlU5x EhTvWICjg234BnC6OMfj1wYXZiyFwUv/jP70nSchkLo9FXTrjLyR1x+UEh9TOQzy UeQCabX1uF5aedD+nfErwHU0x279krSMDb1N9Z/XZz7BTyRdGPhhFwJjwST2n/pf +MLlxxP8bts6Zo+4/Uy8IE6m3qu0KI2OMR5BCa2c4cdHNQ/YL6s5DXkV0OtLi9CU 0sUYEE8w/W8Rw+lwwmYGqqMEBSQWJ3pTwK7tlGpr5mmdSxVfvtfCVElHsvBMAI1L u7aC88DE4eLxLuAR+pUPL1HZ2qIK0A5GHwrdGuvs8Shy19lmBQwlaDlMGH2xAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUl2cVzyfIRd6b1lcQPw3L1E1d038wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMzMjU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAuzcqMA0GCSqGSIb3DQEBCwUAA4IBAQAgnBU+raEuATmfl819WzkD/Her WSvhNeEsSLs7IgPErSL/297n3zRKjD99ARddtfLR4DQPUQBzmQAZDTUjqiyaVI9/ CdfNv7qLllyrdI6Sy4NSNz5eZzfC14VeTArpKMALTCzU5zaqDfHYuLjnLsxayw7L lKXtkjrNfOpnSCZbrnVJeNrRmnheB4pQB5ArG5UQDNg/Y4wCMZOtti90Jdz8v92R KIORUuG8P1XNayfUJYhPYR6cnd57B8FVlvs/PxDq3gfKVsLCofuwVonSVYeKZa/2 IL6yX98ZjWUjILmVQVS75YOdPZU83Z1BeuZSc4ZPFIgXDOtIospKSLTx74CL -----END CERTIFICATE-----Generated at Sat Nov 14 22:10:25 2026 by rpki-client