$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401362.roa File: AS401362.roa (raw, json) Hash identifier: PHXY9xxlsCIRkppSNt/mbcYeH68Lvly5axx8PgN9AiQ= Subject key identifier: 26:57:B1:ED:80:50:5A:91:78:1F:70:73:F7:42:E3:D5:DF:98:7B:4D Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 41EC2D2A9DC3E63B345CD92DE049C6333C81FF40 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401362.roa Signing time: Thu 24 Sep 2026 03:11:06 +0000 ROA not before: Thu 24 Sep 2026 03:06:06 +0000 ROA not after: Thu 23 Sep 2027 03:11:06 +0000 asID: 401362 IP address blocks: 177.201.208.0/24 maxlen: 24 189.30.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ec:2d:2a:9d:c3:e6:3b:34:5c:d9:2d:e0:49:c6:33:3c:81:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 24 03:06:06 2026 GMT Not After : Sep 23 03:11:06 2027 GMT Subject: CN=2657B1ED80505A91781F7073F742E3D5DF987B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:3e:f5:c3:b3:f3:a8:d6:fd:41:b6:fa:ef: 45:17:d6:d2:a8:84:4f:99:66:08:20:00:24:f2:b5: be:3e:a5:8a:8b:4b:59:fe:40:20:fd:96:64:54:02: 0d:c3:5a:5c:14:67:c3:9a:33:fc:9a:6d:81:99:ce: 6b:87:3f:43:34:71:2d:56:1e:f1:ea:9d:7a:49:79: 58:e4:2a:09:8a:b7:d8:76:bf:4b:58:f8:bf:7e:f8: 64:ce:81:ff:43:3b:52:1c:ba:74:20:c4:d4:24:3c: 61:74:16:2f:c6:5e:00:eb:93:f8:b5:73:b6:cf:94: 0a:9c:4d:08:30:58:07:ab:3f:f0:ff:1a:88:0a:8c: fb:f3:2c:e6:db:8a:3f:40:0b:55:63:f7:a5:5a:05: fa:71:82:0e:b1:fe:a6:4b:ee:f8:4e:ee:f4:e2:39: 32:4d:0a:cf:b4:ad:e7:46:c5:65:5c:35:91:57:aa: 5a:75:4b:bb:9d:e0:a5:1c:e5:7a:cb:98:25:dd:e3: 6d:8e:3d:21:65:66:f9:f2:91:55:d5:13:a4:b3:bc: 97:45:30:09:69:23:ca:c9:14:7f:d4:2e:ed:39:fc: 43:ed:25:4c:de:86:6a:8e:e2:77:b1:78:60:9c:87: fb:55:f4:98:8f:76:09:b8:47:1d:7a:f5:40:5a:71: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:57:B1:ED:80:50:5A:91:78:1F:70:73:F7:42:E3:D5:DF:98:7B:4D X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401362.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.208.0/24 189.30.96.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:1e:29:f0:83:1d:75:03:96:0b:bd:2f:b3:34:35:c9:3b:b7: 7a:53:8f:78:5d:cb:59:fc:29:f9:bb:8d:ad:9c:25:6c:72:8a: a5:fd:42:1b:3e:14:15:0b:5e:d7:44:39:cd:38:7e:fd:fa:c3: a2:72:3f:b8:ed:72:be:af:6f:ce:f1:33:56:93:88:4c:aa:70: 8d:cb:5c:68:78:d3:92:b0:7f:f6:07:7b:9e:95:b9:6e:7a:a4: 6f:c8:d5:1b:99:0b:dc:9b:37:14:2c:4a:b8:f9:b3:1f:31:c7: 0a:61:59:54:28:59:2b:0f:08:e6:b8:e3:64:1c:4a:4e:b7:06: 83:53:66:f6:d8:f1:04:00:31:66:70:40:42:19:9e:2d:32:50: cc:1b:04:58:56:de:a6:f5:07:27:03:45:4b:9b:d4:d3:34:60: 01:9c:1f:dd:d3:73:c0:10:36:86:c8:b6:fb:22:4f:5f:08:29: f4:45:6c:5a:b0:0e:c6:b9:03:d9:e6:4b:8d:00:b3:13:04:03: 47:90:fb:e8:d7:d2:c2:16:3d:d0:68:72:a1:4b:b5:15:c8:87: 2e:d2:08:fb:9c:f9:06:b9:86:76:fc:17:c2:39:0f:16:01:fe: 69:c9:d1:94:1a:c0:c0:0c:fe:4b:82:35:6f:a7:d7:03:51:e7: e9:58:41:be -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUQewtKp3D5js0XNkt4EnGMzyB/0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjQwMzA2MDZaFw0yNzA5MjMwMzExMDZaMDMxMTAvBgNV BAMTKDI2NTdCMUVEODA1MDVBOTE3ODFGNzA3M0Y3NDJFM0Q1REY5ODdCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTj71w7PzqNb9Qbb670UX1tKo hE+ZZgggACTytb4+pYqLS1n+QCD9lmRUAg3DWlwUZ8OaM/yabYGZzmuHP0M0cS1W HvHqnXpJeVjkKgmKt9h2v0tY+L9++GTOgf9DO1IcunQgxNQkPGF0Fi/GXgDrk/i1 c7bPlAqcTQgwWAerP/D/GogKjPvzLObbij9AC1Vj96VaBfpxgg6x/qZL7vhO7vTi OTJNCs+0redGxWVcNZFXqlp1S7ud4KUc5XrLmCXd422OPSFlZvnykVXVE6SzvJdF MAlpI8rJFH/ULu05/EPtJUzehmqO4nexeGCch/tV9JiPdgm4Rx169UBacTjdAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUJlex7YBQWpF4H3Bz90Lj1d+Ye00wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDEzNjIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACxydADBAC9HmAwDQYJKoZIhvcNAQELBQADggEBAC8eKfCDHXUDlgu9 L7M0Nck7t3pTj3hdy1n8Kfm7ja2cJWxyiqX9Qhs+FBULXtdEOc04fv36w6JyP7jt cr6vb87xM1aTiEyqcI3LXGh405Kwf/YHe56VuW56pG/I1RuZC9ybNxQsSrj5sx8x xwphWVQoWSsPCOa442QcSk63BoNTZvbY8QQAMWZwQEIZni0yUMwbBFhW3qb1BycD RUub1NM0YAGcH93Tc8AQNobItvsiT18IKfRFbFqwDsa5A9nmS40AsxMEA0eQ++jX 0sIWPdBocqFLtRXIhy7SCPuc+Qa5hnb8F8I5DxYB/mnJ0ZQawMAM/kuCNW+n1wNR 5+lYQb4= -----END CERTIFICATE-----Generated at Thu Sep 24 08:17:46 2026 by rpki-client