$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402288.roa File: AS402288.roa (raw, json) Hash identifier: OEEinHqxnU0FMkxuHzshKnSVDKpMhILy3bHegSBea1M= Subject key identifier: 18:1A:E1:E8:3C:02:04:8F:92:5B:CF:B7:9F:BA:FA:E2:38:DE:52:D1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5B2E6242067F08EADF2B36F4CB102776F118BCFF Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402288.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 402288 IP address blocks: 177.201.216.0/24 maxlen: 24 200.180.177.0/24 maxlen: 24 200.180.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2e:62:42:06:7f:08:ea:df:2b:36:f4:cb:10:27:76:f1:18:bc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=181AE1E83C02048F925BCFB79FBAFAE238DE52D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:0c:24:6d:13:1b:89:e4:36:75:44:0f:cc: b1:8d:3f:ff:28:48:1d:f2:cc:2f:a4:b9:8a:e2:21: c9:3c:36:93:3f:43:02:17:d1:a0:80:82:2e:87:8d: 21:c5:cb:e2:98:e1:d0:35:18:ff:96:92:13:36:af: 24:d1:de:cb:76:10:7c:aa:d2:8e:bf:11:55:77:35: ea:89:77:31:c8:5f:04:39:d8:d3:44:eb:64:bd:06: ee:3b:2c:34:21:45:6d:6f:0b:63:34:db:86:69:02: 90:6c:3d:32:12:25:83:cc:0d:93:fe:e0:bb:5d:09: 6f:0a:bb:7b:d1:ef:35:45:cb:a3:1d:19:38:c6:37: 77:55:2c:10:ed:5f:3e:29:9c:93:15:b8:25:a5:a5: 33:cf:58:93:ae:43:6a:d6:2d:ce:04:57:87:99:86: 8f:0b:fe:ba:25:d4:40:00:dc:da:5c:4f:f2:82:a6: 8c:46:bc:68:d9:b3:7e:b9:89:46:a6:5a:a1:f2:05: cc:44:79:eb:ca:11:66:2f:4c:3a:4c:84:9a:50:c4: a4:56:c1:97:66:0c:c8:1c:10:44:41:5f:8e:f9:0a: ed:74:8f:3d:9c:14:7e:c3:3c:ea:dd:d2:47:f8:d5: 2b:dc:61:aa:c2:c9:ae:3c:8a:38:56:7b:26:e7:cc: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1A:E1:E8:3C:02:04:8F:92:5B:CF:B7:9F:BA:FA:E2:38:DE:52:D1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402288.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.216.0/24 200.180.177.0/24 200.180.181.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:3e:6b:cf:7f:0d:b3:1b:c2:ab:fb:55:d7:85:c0:1a:be:05: 83:f3:c1:ee:51:d7:67:6d:c0:76:c1:be:cb:f0:ff:40:8f:cb: 76:29:88:ca:da:ab:23:f7:0c:c7:4d:49:77:78:99:d3:e0:11: 28:25:ee:0b:ee:e6:1d:19:af:00:4d:95:10:b9:1a:ed:a5:2f: c8:74:fa:2d:29:f3:7f:17:46:b4:0a:e0:17:35:3a:34:cc:0e: f5:80:de:ee:ec:aa:bd:ed:09:35:3e:07:3a:73:cc:ff:b1:3e: fd:df:e0:09:c3:72:73:0f:31:bc:b0:81:55:5d:e2:39:f1:70: 18:13:62:73:22:a9:f3:72:dc:8d:57:c0:ee:fd:78:fc:c2:85: 31:e3:ba:af:51:41:8c:5a:9a:ae:33:ce:d1:15:23:44:ae:60: e0:a1:69:b5:d6:4f:cd:cd:f1:69:72:25:33:90:17:76:dc:14: 66:a8:44:e8:6b:22:ba:5b:05:22:42:9a:ef:81:db:2d:b1:25: 2d:2e:6c:24:b7:10:69:89:f4:b3:b8:3d:71:39:86:ba:88:a1: a6:d6:33:df:40:29:61:09:d7:3c:cf:6c:07:ea:89:f7:a1:9d: e8:f5:eb:d9:f0:33:71:22:59:8b:c4:2f:3f:1f:1c:90:87:54: b5:ac:94:4f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUWy5iQgZ/COrfKzb0yxAndvEYvP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDE4MUFFMUU4M0MwMjA0OEY5MjVCQ0ZCNzlGQkFGQUUyMzhERTUyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeoAwkbRMbieQ2dUQPzLGNP/8o SB3yzC+kuYriIck8NpM/QwIX0aCAgi6HjSHFy+KY4dA1GP+WkhM2ryTR3st2EHyq 0o6/EVV3NeqJdzHIXwQ52NNE62S9Bu47LDQhRW1vC2M024ZpApBsPTISJYPMDZP+ 4LtdCW8Ku3vR7zVFy6MdGTjGN3dVLBDtXz4pnJMVuCWlpTPPWJOuQ2rWLc4EV4eZ ho8L/rol1EAA3NpcT/KCpoxGvGjZs365iUamWqHyBcxEeevKEWYvTDpMhJpQxKRW wZdmDMgcEERBX475Cu10jz2cFH7DPOrd0kf41SvcYarCya48ijhWeybnzNqrAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUGBrh6DwCBI+SW8+3n7r64jjeUtEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDIyODgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBACxydgDBADItLEDBADItLUwDQYJKoZIhvcNAQELBQADggEBAI0+a89/ DbMbwqv7VdeFwBq+BYPzwe5R12dtwHbBvsvw/0CPy3YpiMraqyP3DMdNSXd4mdPg ESgl7gvu5h0ZrwBNlRC5Gu2lL8h0+i0p838XRrQK4Bc1OjTMDvWA3u7sqr3tCTU+ BzpzzP+xPv3f4AnDcnMPMbywgVVd4jnxcBgTYnMiqfNy3I1XwO79ePzChTHjuq9R QYxamq4zztEVI0SuYOChabXWT83N8WlyJTOQF3bcFGaoROhrIrpbBSJCmu+B2y2x JS0ubCS3EGmJ9LO4PXE5hrqIoabWM99AKWEJ1zzPbAfqifehnej169nwM3EiWYvE Lz8fHJCHVLWslE8= -----END CERTIFICATE-----Generated at Wed Sep 23 19:15:37 2026 by rpki-client