$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402628.roa File: AS402628.roa (raw, json) Hash identifier: BhjZmTb2jSKhhBGUMzdTXx26j9raY2BFVuX3zr2+trI= Subject key identifier: 93:9A:3D:1B:AD:E2:82:F7:D0:C5:B8:A3:0B:5B:15:56:9F:ED:25:6E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 09BE9A90A343AAA040EA7466CA51736D259CB857 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402628.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 402628 IP address blocks: 187.5.0.0/23 maxlen: 24 187.5.2.0/23 maxlen: 24 187.5.4.0/23 maxlen: 24 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:be:9a:90:a3:43:aa:a0:40:ea:74:66:ca:51:73:6d:25:9c:b8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=939A3D1BADE282F7D0C5B8A30B5B15569FED256E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:a7:3a:e2:95:8f:97:0a:33:a1:85:5e:36: fc:59:8f:e5:c3:15:63:37:e6:68:41:54:0a:5b:16: df:0c:34:76:0a:74:da:13:5b:b9:9e:31:8e:f1:32: 4e:b6:f6:2b:1f:25:3f:a1:21:60:67:09:eb:c5:16: 1b:c1:d1:cc:ab:da:a2:40:79:34:77:c4:a5:1a:1b: e7:33:38:09:ca:a7:8b:0b:19:ca:68:28:48:a3:2c: ad:ef:a5:6c:d9:35:ff:7b:7c:d1:c2:57:0e:50:2f: 95:bb:c5:df:fd:88:f1:9a:90:ba:19:c1:17:73:4f: a1:a9:fc:da:1c:f3:62:f8:36:7e:24:4b:c7:8e:af: 03:33:af:49:9f:f5:76:eb:e4:c6:9a:37:11:68:80: 27:6c:da:8c:d9:76:6f:c2:ad:ad:06:67:1a:ef:0e: 2a:53:28:8e:5c:6a:55:e0:7a:77:d1:d1:43:7a:a0: a8:a9:2d:f0:b4:29:6c:4a:2b:2c:fd:64:a0:20:6d: 42:84:19:95:db:83:e3:f1:20:b9:b5:42:f3:dc:cd: 00:6a:4a:c4:73:67:a4:aa:52:e8:06:2f:26:89:9f: 71:c9:df:a2:0a:d2:c6:45:fb:a6:e1:07:d7:77:6d: 24:b0:3c:64:a8:94:d4:2f:3c:bf:87:0a:55:04:05: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:3D:1B:AD:E2:82:F7:D0:C5:B8:A3:0B:5B:15:56:9F:ED:25:6E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402628.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.0.0-187.5.5.255 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption a2:af:da:92:c9:97:43:85:97:fd:46:0c:8a:b9:05:d4:6f:c0: 1c:71:00:20:95:b6:fb:42:db:41:26:cf:b0:f7:2d:a0:1f:13: a8:71:c5:10:8a:88:40:57:af:e0:41:4d:c0:8b:03:ba:16:b3: 0c:b7:2b:2f:2c:a7:95:b6:52:11:19:a3:34:f8:6b:21:47:8f: dd:fb:b6:55:05:d8:1d:91:3b:6e:c3:cd:19:72:18:c8:b6:84: 37:84:21:33:19:f8:5a:b6:92:7c:6c:7a:87:26:8c:44:5f:5c: db:91:b8:01:c0:0a:74:11:0a:56:2a:cd:f3:80:52:ea:20:08: b7:d2:bd:a4:b3:6c:6e:b8:6e:4d:8f:bf:a5:42:71:b3:66:e3: 3a:82:c1:e4:b3:cf:a5:02:70:67:65:57:eb:5d:5f:db:28:eb: ff:aa:a2:54:f3:22:3e:4a:e0:f2:97:15:ba:4b:5f:c6:8c:4e: a6:30:4b:06:06:59:ee:20:79:cd:84:f0:c3:e4:78:f6:d3:65: 99:c8:33:60:f2:79:e0:7c:21:76:1d:b8:98:54:d3:68:95:a9: 20:b7:b9:13:54:2a:cd:2f:4e:e7:36:3c:3a:04:15:6d:50:27: cb:19:91:2e:87:d4:49:7e:d1:e3:9a:03:12:a3:7d:87:68:37: 81:42:87:12 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUCb6akKNDqqBA6nRmylFzbSWcuFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDkzOUEzRDFCQURFMjgyRjdEMEM1QjhBMzBCNUIxNTU2OUZFRDI1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mqc64pWPlwozoYVeNvxZj+XD FWM35mhBVApbFt8MNHYKdNoTW7meMY7xMk629isfJT+hIWBnCevFFhvB0cyr2qJA eTR3xKUaG+czOAnKp4sLGcpoKEijLK3vpWzZNf97fNHCVw5QL5W7xd/9iPGakLoZ wRdzT6Gp/Noc82L4Nn4kS8eOrwMzr0mf9Xbr5MaaNxFogCds2ozZdm/Cra0GZxrv DipTKI5calXgenfR0UN6oKipLfC0KWxKKyz9ZKAgbUKEGZXbg+PxILm1QvPczQBq SsRzZ6SqUugGLyaJn3HJ36IK0sZF+6bhB9d3bSSwPGSolNQvPL+HClUEBfx/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUk5o9G63igvfQxbijC1sVVp/tJW4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI2Mjgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLAYIKwYBBQUHAQcBAf8EHTAbMBkE AgABMBMwCwMDALsFAwQBuwUEAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQCir9qS yZdDhZf9RgyKuQXUb8AccQAglbb7QttBJs+w9y2gHxOoccUQiohAV6/gQU3AiwO6 FrMMtysvLKeVtlIRGaM0+GshR4/d+7ZVBdgdkTtuw80ZchjItoQ3hCEzGfhatpJ8 bHqHJoxEX1zbkbgBwAp0EQpWKs3zgFLqIAi30r2ks2xuuG5Nj7+lQnGzZuM6gsHk s8+lAnBnZVfrXV/bKOv/qqJU8yI+SuDylxW6S1/GjE6mMEsGBlnuIHnNhPDD5Hj2 02WZyDNg8nngfCF2HbiYVNNolakgt7kTVCrNL07nNjw6BBVtUCfLGZEuh9RJftHj mgMSo32HaDeBQocS -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:09 2026 by rpki-client