$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: 3R7ZnsxBZXtx4p1WCfogZXXV3Y9dM7DtdCIZ0TXwXw0= Subject key identifier: D6:CB:2B:ED:63:FE:B9:56:4B:FD:2C:38:15:C2:C5:8B:80:81:6E:4E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7B3AB9952DEB9C35A165BF6055CAABA083D0D037 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa Signing time: Tue 10 Nov 2026 08:48:38 +0000 ROA not before: Tue 10 Nov 2026 08:43:38 +0000 ROA not after: Tue 09 Nov 2027 08:48:38 +0000 asID: 401776 IP address blocks: 152.234.145.0/24 maxlen: 24 152.234.146.0/24 maxlen: 24 177.201.198.0/24 maxlen: 24 177.201.203.0/24 maxlen: 24 179.69.70.0/24 maxlen: 24 179.69.76.0/24 maxlen: 24 179.69.97.0/24 maxlen: 24 179.69.108.0/24 maxlen: 24 179.253.43.0/24 maxlen: 24 179.254.216.0/24 maxlen: 24 187.5.0.0/23 maxlen: 24 187.5.2.0/23 maxlen: 24 187.5.4.0/23 maxlen: 24 187.14.164.0/24 maxlen: 24 187.55.40.0/24 maxlen: 24 189.12.160.0/24 maxlen: 24 189.31.20.0/24 maxlen: 24 191.45.36.0/24 maxlen: 24 200.141.60.0/24 maxlen: 24 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3a:b9:95:2d:eb:9c:35:a1:65:bf:60:55:ca:ab:a0:83:d0:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 10 08:43:38 2026 GMT Not After : Nov 9 08:48:38 2027 GMT Subject: CN=D6CB2BED63FEB9564BFD2C3815C2C58B80816E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:4c:be:91:72:99:da:48:1f:ec:a1:3d:0d: 74:21:b4:67:5b:b0:b5:b1:8a:cf:1a:55:31:8e:af: 24:59:0f:11:e6:52:32:ef:38:87:bb:99:b0:e8:70: 41:0c:24:48:02:f4:7f:3b:1a:93:db:36:15:70:cb: c6:f2:69:ee:07:8e:c1:a9:df:b8:a9:01:be:2a:db: 1d:4a:5c:0b:19:fd:4f:ef:34:6d:df:91:ad:2c:20: f7:1f:20:b8:a4:e9:0f:c8:d3:fd:f9:23:73:9e:90: 05:9e:c3:20:2e:bd:d5:8a:c7:50:f9:ea:16:62:e4: b9:29:10:f0:69:3a:bf:26:32:24:1d:8c:b3:60:e1: e7:a9:ca:22:b6:3a:a7:4c:83:9d:d9:fd:16:66:8a: 8f:ba:fc:bf:4d:6f:53:ef:ea:91:bb:f9:ff:3c:9b: 7c:c5:91:9d:ae:e4:95:ef:23:9d:2c:60:eb:92:db: 78:e6:41:ad:f8:98:cb:d7:b3:23:4d:16:5b:07:e4: a6:b1:c7:82:dc:4e:5b:8b:01:8a:d5:d4:1e:50:ba: ff:0b:c9:6b:cb:6a:19:33:12:fc:a9:0b:27:ed:0e: 05:af:fc:c3:76:0d:63:b6:12:d4:dd:58:c8:9e:3f: ef:02:9b:d4:fc:ae:46:90:a1:e8:a8:08:b9:9a:5c: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CB:2B:ED:63:FE:B9:56:4B:FD:2C:38:15:C2:C5:8B:80:81:6E:4E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.145.0-152.234.146.255 177.201.198.0/24 177.201.203.0/24 179.69.70.0/24 179.69.76.0/24 179.69.97.0/24 179.69.108.0/24 179.253.43.0/24 179.254.216.0/24 187.5.0.0-187.5.5.255 187.14.164.0/24 187.55.40.0/24 189.12.160.0/24 189.31.20.0/24 191.45.36.0/24 200.141.60.0/24 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 97:f9:4e:20:e8:72:40:69:42:23:3d:f2:6e:94:be:4a:91:4f: 0f:48:e7:2c:85:40:b6:65:eb:3d:bf:18:5d:6b:5c:57:1e:8a: 5f:61:10:3c:54:ff:4b:de:8b:a5:cf:68:f6:d2:46:b8:43:71: f0:71:12:8b:a5:fd:c6:64:03:f4:3a:db:f5:c9:93:65:5f:ea: a0:fc:5c:7b:cc:f2:ef:a5:a0:d0:49:9c:fc:49:72:59:54:0f: 5f:55:d3:9b:0b:cc:a1:3a:68:1f:44:e2:5c:4a:7a:e1:94:cb: 47:13:e5:26:6c:d1:41:2f:89:0e:88:a0:81:c8:fd:a5:d8:4d: 71:d2:fa:a4:88:a3:da:00:62:b5:5b:13:65:61:22:ee:a9:a2: f3:cc:d0:52:97:a1:1f:5d:58:30:cf:05:fe:29:cf:35:e7:1d: 98:8f:99:a1:8b:4d:53:9e:3c:1b:9b:2e:db:29:ea:92:a1:5a: 53:b1:bd:30:f7:b8:90:97:cf:f0:0a:89:7c:de:f0:5d:81:05: 2f:97:2f:cc:b5:ef:fc:9f:03:8f:b9:3e:36:3c:6c:b4:9f:24: ce:1c:59:e2:dc:14:fe:12:04:6b:e8:0b:a5:46:53:01:7d:e7: 44:b2:de:ad:ad:8d:03:e7:77:bc:5d:18:b1:0a:a1:27:22:7f: 30:bd:bb:7c -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUezq5lS3rnDWhZb9gVcqroIPQ0DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTAwODQzMzhaFw0yNzExMDkwODQ4MzhaMDMxMTAvBgNV BAMTKEQ2Q0IyQkVENjNGRUI5NTY0QkZEMkMzODE1QzJDNThCODA4MTZFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuEy+kXKZ2kgf7KE9DXQhtGdb sLWxis8aVTGOryRZDxHmUjLvOIe7mbDocEEMJEgC9H87GpPbNhVwy8byae4HjsGp 37ipAb4q2x1KXAsZ/U/vNG3fka0sIPcfILik6Q/I0/35I3OekAWewyAuvdWKx1D5 6hZi5LkpEPBpOr8mMiQdjLNg4eepyiK2OqdMg53Z/RZmio+6/L9Nb1Pv6pG7+f88 m3zFkZ2u5JXvI50sYOuS23jmQa34mMvXsyNNFlsH5Kaxx4LcTluLAYrV1B5Quv8L yWvLahkzEvypCyftDgWv/MN2DWO2EtTdWMieP+8Cm9T8rkaQoeioCLmaXOpPAgMB AAGjggK1MIICsTAdBgNVHQ4EFgQU1ssr7WP+uVZL/Sw4FcLFi4CBbk4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDE3NzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgY4GCCsGAQUFBwEHAQH/BH8wfTB7 BAIAATB1MAwDBACY6pEDBACY6pIDBACxycYDBACxycsDBACzRUYDBACzRUwDBACz RWEDBACzRWwDBACz/SsDBACz/tgwCwMDALsFAwQBuwUEAwQAuw6kAwQAuzcoAwQA vQygAwQAvR8UAwQAvy0kAwQAyI08AwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQCX +U4g6HJAaUIjPfJulL5KkU8PSOcshUC2Zes9vxhda1xXHopfYRA8VP9L3oulz2j2 0ka4Q3HwcRKLpf3GZAP0Otv1yZNlX+qg/Fx7zPLvpaDQSZz8SXJZVA9fVdObC8yh OmgfROJcSnrhlMtHE+UmbNFBL4kOiKCByP2l2E1x0vqkiKPaAGK1WxNlYSLuqaLz zNBSl6EfXVgwzwX+Kc815x2Yj5mhi01Tnjwbmy7bKeqSoVpTsb0w97iQl8/wCol8 3vBdgQUvly/Mte/8nwOPuT42PGy0nyTOHFni3BT+EgRr6AulRlMBfedEst6trY0D 53e8XRixCqEnIn8wvbt8 -----END CERTIFICATE-----Generated at Wed Nov 11 09:14:20 2026 by rpki-client