$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa File: AS402671.roa (raw, json) Hash identifier: yFqcQdEvYE0OhpcabeVX6geYtKtAgARwmYgDl772Mqo= Subject key identifier: 59:88:A2:60:28:23:10:F4:BE:FA:FF:6D:37:4B:E6:FC:67:FB:7D:39 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7AB077EC5410623CA6B2D4C89B0ED596240DE88B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa Signing time: Fri 13 Nov 2026 17:02:13 +0000 ROA not before: Fri 13 Nov 2026 16:57:13 +0000 ROA not after: Fri 12 Nov 2027 17:02:13 +0000 asID: 402671 IP address blocks: 152.234.159.0/24 maxlen: 24 177.201.195.0/24 maxlen: 24 179.69.104.0/24 maxlen: 24 179.253.45.0/24 maxlen: 24 187.55.33.0/24 maxlen: 24 189.30.82.0/24 maxlen: 24 189.31.5.0/24 maxlen: 24 189.31.25.0/24 maxlen: 24 189.73.44.0/24 maxlen: 24 191.0.81.0/24 maxlen: 24 191.45.38.0/24 maxlen: 24 200.138.35.0/24 maxlen: 24 200.141.63.0/24 maxlen: 24 200.149.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b0:77:ec:54:10:62:3c:a6:b2:d4:c8:9b:0e:d5:96:24:0d:e8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 13 16:57:13 2026 GMT Not After : Nov 12 17:02:13 2027 GMT Subject: CN=5988A260282310F4BEFAFF6D374BE6FC67FB7D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:7f:13:d4:fc:e0:02:37:23:d9:88:73:75: 80:42:cf:1e:bd:36:b2:d9:77:cf:fe:ed:bd:53:8b: 07:39:ff:7c:9e:dd:24:52:81:87:73:c7:27:9d:7f: 4f:f8:3e:bf:37:a6:18:60:7b:05:14:6c:7a:cb:2e: 12:9f:8f:fd:d6:a2:d6:9e:98:a5:61:3b:f9:e5:cf: 16:4c:81:86:11:c3:f0:24:d8:5d:e0:71:4f:b5:18: eb:fe:4f:99:9e:ff:3a:26:6e:24:ce:eb:4d:ff:29: 73:0d:a0:87:61:a1:b3:0b:a8:6e:2f:45:82:54:57: f5:43:0e:b7:46:85:88:7b:ff:58:e7:f0:b5:e6:bd: a7:69:56:ac:7e:63:20:b3:02:b1:54:da:15:8f:44: 46:38:d0:2e:00:8d:2f:f1:01:3e:07:ce:b0:86:c8: 1f:a3:9f:07:da:1c:cb:91:c0:a9:e8:c8:b8:51:a0: 3c:9b:8b:00:4e:75:76:1f:43:75:0e:44:62:ac:2f: 8c:7d:eb:c7:43:2e:be:06:83:3d:6e:8f:c8:81:18: c8:fb:b6:50:55:16:82:41:1c:30:7a:20:d1:7d:b8: bb:a2:2d:84:a8:05:9a:5c:74:f5:96:1a:0b:d8:6f: d0:89:24:c6:d0:03:19:2e:ed:c3:4b:0d:5c:1c:fb: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:88:A2:60:28:23:10:F4:BE:FA:FF:6D:37:4B:E6:FC:67:FB:7D:39 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.159.0/24 177.201.195.0/24 179.69.104.0/24 179.253.45.0/24 187.55.33.0/24 189.30.82.0/24 189.31.5.0/24 189.31.25.0/24 189.73.44.0/24 191.0.81.0/24 191.45.38.0/24 200.138.35.0/24 200.141.63.0/24 200.149.190.0/24 Signature Algorithm: sha256WithRSAEncryption 55:b9:ed:6e:47:c9:f6:78:bd:38:1b:50:49:b8:cc:22:55:b3: c5:ef:20:41:78:43:f9:fe:70:af:c6:79:5d:fb:75:51:ba:53: cc:de:e9:06:47:51:a6:fd:f9:5e:37:b0:2e:39:ff:50:f6:2b: 69:e0:28:8c:9e:99:63:1f:54:41:65:38:56:82:33:cc:0f:59: d5:87:a6:66:50:ef:b5:88:11:7b:cb:e8:18:0a:35:a1:ee:59: 57:47:45:84:ad:02:5b:05:88:89:52:28:95:ef:6c:5e:fd:36: 9f:9b:f0:ff:66:46:6f:4a:e7:45:39:4e:af:1a:df:ea:86:4d: 42:c3:08:de:54:9c:f1:f7:f3:69:4d:1c:98:c8:cc:44:1e:67: 9a:82:c1:12:c5:75:e0:da:44:ae:c3:84:a9:5c:33:4e:f2:b0: 52:fc:4e:51:20:49:7f:f5:93:9d:ff:2a:af:bd:6d:22:76:cd: ce:99:17:90:a1:35:ed:af:c1:86:ec:43:0c:3f:9a:8c:f6:90: 06:0a:21:ea:cf:ca:c1:6c:3b:ef:51:91:0a:d6:e4:fa:dd:a2: 58:c5:32:aa:5a:6c:65:77:1b:3e:71:56:09:9d:6a:16:f8:1e: 46:24:77:df:9f:fa:90:9f:fd:82:b7:c8:04:e9:26:f5:73:c0: bf:26:2f:93 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUerB37FQQYjymstTImw7VliQN6IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTMxNjU3MTNaFw0yNzExMTIxNzAyMTNaMDMxMTAvBgNV BAMTKDU5ODhBMjYwMjgyMzEwRjRCRUZBRkY2RDM3NEJFNkZDNjdGQjdEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdmn8T1PzgAjcj2YhzdYBCzx69 NrLZd8/+7b1Tiwc5/3ye3SRSgYdzxyedf0/4Pr83phhgewUUbHrLLhKfj/3Wotae mKVhO/nlzxZMgYYRw/Ak2F3gcU+1GOv+T5me/zombiTO603/KXMNoIdhobMLqG4v RYJUV/VDDrdGhYh7/1jn8LXmvadpVqx+YyCzArFU2hWPREY40C4AjS/xAT4HzrCG yB+jnwfaHMuRwKnoyLhRoDybiwBOdXYfQ3UORGKsL4x968dDLr4Ggz1uj8iBGMj7 tlBVFoJBHDB6INF9uLuiLYSoBZpcdPWWGgvYb9CJJMbQAxku7cNLDVwc+zzpAgMB AAGjggKTMIICjzAdBgNVHQ4EFgQUWYiiYCgjEPS++v9tN0vm/Gf7fTkwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI2NzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbQYIKwYBBQUHAQcBAf8EXjBcMFoE AgABMFQDBACY6p8DBACxycMDBACzRWgDBACz/S0DBAC7NyEDBAC9HlIDBAC9HwUD BAC9HxkDBAC9SSwDBAC/AFEDBAC/LSYDBADIiiMDBADIjT8DBADIlb4wDQYJKoZI hvcNAQELBQADggEBAFW57W5HyfZ4vTgbUEm4zCJVs8XvIEF4Q/n+cK/GeV37dVG6 U8ze6QZHUab9+V43sC45/1D2K2ngKIyemWMfVEFlOFaCM8wPWdWHpmZQ77WIEXvL 6BgKNaHuWVdHRYStAlsFiIlSKJXvbF79Np+b8P9mRm9K50U5Tq8a3+qGTULDCN5U nPH382lNHJjIzEQeZ5qCwRLFdeDaRK7DhKlcM07ysFL8TlEgSX/1k53/Kq+9bSJ2 zc6ZF5ChNe2vwYbsQww/moz2kAYKIerPysFsO+9RkQrW5PrdoljFMqpabGV3Gz5x Vgmdahb4HkYkd9+f+pCf/YK3yATpJvVzwL8mL5M= -----END CERTIFICATE-----Generated at Sun Nov 15 01:55:26 2026 by rpki-client