$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: 3/VVi4Lv+TCbuSKPrGgpz1UqSXXGkeq58pnf45HvX38= Subject key identifier: CF:D8:60:FD:4F:C9:69:F1:59:5F:7F:07:8F:FE:AA:D9:2F:08:8E:E2 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1597F675F3DCDC1C3A107A9C0BB0CB46BD416214 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa Signing time: Tue 22 Sep 2026 08:47:06 +0000 ROA not before: Tue 22 Sep 2026 08:42:06 +0000 ROA not after: Tue 21 Sep 2027 08:47:06 +0000 asID: 401776 IP address blocks: 187.5.0.0/23 maxlen: 24 187.5.2.0/23 maxlen: 24 187.5.4.0/23 maxlen: 24 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:97:f6:75:f3:dc:dc:1c:3a:10:7a:9c:0b:b0:cb:46:bd:41:62:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:06 2026 GMT Not After : Sep 21 08:47:06 2027 GMT Subject: CN=CFD860FD4FC969F1595F7F078FFEAAD92F088EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:73:54:8e:2b:b4:fe:d1:cc:45:c8:85:d0: 9e:0b:2f:d5:de:d6:38:34:98:8c:10:51:24:46:25: 01:06:14:ea:ea:24:78:76:7c:ce:fd:9b:21:fe:01: 19:11:07:a1:83:7f:d7:22:b3:6f:79:40:03:31:66: 15:f7:70:49:30:14:a5:8c:fa:2b:b4:42:a4:32:92: 2c:7e:5c:13:a5:b2:20:20:79:96:ae:9c:c6:c0:95: dc:76:e4:3e:d8:56:9b:6f:21:ff:75:5e:ce:13:41: 8e:98:96:91:2b:75:13:7c:97:a9:72:ff:b4:e4:79: ea:60:05:10:9b:38:fe:8a:24:e3:53:cb:3d:37:82: 71:71:0e:eb:b8:25:1e:a9:0d:0e:55:e7:fc:43:c0: f7:df:54:a5:86:0c:2d:a3:b1:60:2f:fd:2c:f1:ca: a9:09:41:3c:a1:df:bb:da:91:5c:89:b1:63:96:8b: 95:0b:7c:22:43:98:5e:ac:29:e1:b3:4f:97:d7:12: a8:06:48:b2:a5:73:ff:0c:bf:91:d6:56:da:17:47: f5:88:4c:4a:42:c8:10:24:3b:35:ca:94:80:b2:51: 1d:a6:f3:14:dc:ba:0a:ee:b4:f2:a7:54:51:31:50: 0c:c1:69:93:43:6b:7d:a9:78:8e:1b:6e:e2:67:4a: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D8:60:FD:4F:C9:69:F1:59:5F:7F:07:8F:FE:AA:D9:2F:08:8E:E2 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.0.0-187.5.5.255 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption a8:9f:6e:71:55:71:fa:3f:d5:09:ea:64:1e:a9:93:ba:8f:c8: 95:b7:b5:48:22:3a:8d:1d:a9:4b:bd:af:10:ed:c1:9c:d7:b8: 42:bf:b8:1e:57:6a:76:57:11:75:83:ee:c0:5f:88:c4:bc:86: d2:90:56:a4:76:ed:18:c9:32:4e:20:ca:ee:8d:81:dc:ae:65: f3:5a:d7:4d:df:13:bf:28:55:db:be:60:e4:aa:fe:89:d8:1f: 4c:e7:cb:13:7a:1f:d1:a4:2e:82:54:3c:34:e5:d6:b4:a9:e8: 89:e1:50:0c:92:e6:5d:95:22:f8:9c:3e:42:29:63:d6:60:cc: 97:15:b3:f4:70:df:69:16:f6:82:76:8b:db:22:72:1e:93:58: 9a:b2:ac:a9:f0:88:a1:79:cf:cd:4d:fe:5b:3a:56:2e:fb:b3: 68:33:c8:55:02:3a:d4:52:52:34:45:97:b8:ec:00:7d:4c:eb: f1:10:28:60:6b:0d:7d:c8:2d:69:90:d6:99:86:31:37:e7:8a: ac:eb:1d:07:3e:86:c5:64:60:07:2c:d7:2b:3b:46:0b:e8:8e: ea:0a:df:4b:69:8e:e5:9f:2f:90:1b:cf:4e:59:c4:9f:e3:65: bf:10:ec:9e:1d:a5:9e:dc:e6:1c:11:02:f6:2a:af:31:5b:c5: 70:97:57:4b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUFZf2dfPc3Bw6EHqcC7DLRr1BYhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDZaFw0yNzA5MjEwODQ3MDZaMDMxMTAvBgNV BAMTKENGRDg2MEZENEZDOTY5RjE1OTVGN0YwNzhGRkVBQUQ5MkYwODhFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG3NUjiu0/tHMRciF0J4LL9Xe 1jg0mIwQUSRGJQEGFOrqJHh2fM79myH+ARkRB6GDf9cis295QAMxZhX3cEkwFKWM +iu0QqQykix+XBOlsiAgeZaunMbAldx25D7YVptvIf91Xs4TQY6YlpErdRN8l6ly /7TkeepgBRCbOP6KJONTyz03gnFxDuu4JR6pDQ5V5/xDwPffVKWGDC2jsWAv/Szx yqkJQTyh37vakVyJsWOWi5ULfCJDmF6sKeGzT5fXEqgGSLKlc/8Mv5HWVtoXR/WI TEpCyBAkOzXKlICyUR2m8xTcugrutPKnVFExUAzBaZNDa32peI4bbuJnSo2pAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUz9hg/U/JafFZX38Hj/6q2S8IjuIwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDE3NzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLAYIKwYBBQUHAQcBAf8EHTAbMBkE AgABMBMwCwMDALsFAwQBuwUEAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQCon25x VXH6P9UJ6mQeqZO6j8iVt7VIIjqNHalLva8Q7cGc17hCv7geV2p2VxF1g+7AX4jE vIbSkFakdu0YyTJOIMrujYHcrmXzWtdN3xO/KFXbvmDkqv6J2B9M58sTeh/RpC6C VDw05da0qeiJ4VAMkuZdlSL4nD5CKWPWYMyXFbP0cN9pFvaCdovbInIek1iasqyp 8Iihec/NTf5bOlYu+7NoM8hVAjrUUlI0RZe47AB9TOvxEChgaw19yC1pkNaZhjE3 54qs6x0HPobFZGAHLNcrO0YL6I7qCt9LaY7lny+QG89OWcSf42W/EOyeHaWe3OYc EQL2Kq8xW8Vwl1dL -----END CERTIFICATE-----Generated at Wed Sep 23 09:40:25 2026 by rpki-client