$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa File: AS402857.roa (raw, json) Hash identifier: yVJup3ETK9rbDO0rMUoCEKydOL+1gS7N39tSuyvC+Rk= Subject key identifier: 91:B1:51:E3:94:1B:3E:79:7A:D0:7D:96:0A:A2:6A:79:02:56:CB:FF Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3A1FEE8A713404D65797AB83487BAA1B711CA685 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 402857 IP address blocks: 201.24.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1f:ee:8a:71:34:04:d6:57:97:ab:83:48:7b:aa:1b:71:1c:a6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=91B151E3941B3E797AD07D960AA26A790256CBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:4e:23:64:6e:90:14:8a:a5:23:76:0b:32: 26:8c:45:18:96:6d:d7:7a:27:7d:ae:fa:20:e9:69: 51:55:b2:7b:70:5b:b1:a1:26:64:07:56:ff:eb:a8: f3:1a:5b:2d:7f:e0:cf:ba:90:ae:ae:6f:48:20:59: 48:3d:cc:21:27:dc:2b:2c:38:c2:e1:2e:4c:ac:34: a0:bd:25:a5:92:1c:bc:4d:4b:c6:2d:03:8c:0a:a5: 7d:c3:dc:32:8f:8b:dc:44:97:5f:35:aa:53:7f:2a: ab:92:62:96:b9:9e:14:48:53:d7:bd:b2:31:f0:9c: f6:61:e4:4b:ed:cc:94:3f:bf:36:df:0f:a2:aa:8c: 60:d3:b5:bd:2d:13:5c:a7:39:7f:26:c7:e1:18:6e: f8:5d:4f:14:27:54:c0:0f:36:de:9c:42:20:f2:88: fc:7d:1b:68:7f:ad:66:16:25:06:b4:05:e9:d2:af: ba:9c:cf:d0:00:c0:f7:c3:55:75:4e:0f:43:92:3c: 5c:b2:cb:b7:26:c9:13:77:b9:7f:66:97:6f:b0:41: 0a:ac:7c:75:e3:e8:28:bc:39:76:47:df:f7:fe:d4: 95:98:3a:26:a9:fe:49:96:79:20:aa:6e:ff:f6:57: ac:f4:a0:ea:74:24:37:e0:36:bf:e1:90:48:2f:fc: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:51:E3:94:1B:3E:79:7A:D0:7D:96:0A:A2:6A:79:02:56:CB:FF X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.230.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:30:f5:5a:1c:c0:29:bf:c5:60:2e:11:cb:06:0f:7b:e9:38: 2f:a8:93:12:90:50:ac:41:03:c7:65:42:63:86:b0:c6:34:eb: d0:9b:e6:31:16:4c:2d:f1:6a:aa:5f:17:a1:d1:05:1a:39:fe: 64:77:ce:6a:b9:59:1e:82:f6:74:9c:f5:28:9a:35:17:2a:7d: ee:99:fc:50:e8:db:75:17:b0:db:00:99:51:14:87:67:2d:7a: ff:b8:07:c4:45:bb:f0:63:1b:20:ea:87:7c:df:ed:88:6b:a1: 31:f1:86:1a:22:71:0d:8d:b1:83:65:df:13:f2:dd:c7:41:cf: bb:64:bf:08:93:ee:bd:44:7d:06:86:fa:1c:b8:a1:2e:d7:a7: ac:aa:43:83:b0:eb:01:5a:fc:68:b7:30:31:8c:9a:e5:45:86: ab:c2:ed:61:f2:16:15:3b:4a:7b:e7:ac:a3:cf:ea:e4:df:d9: 95:7a:36:54:4b:3e:91:6f:ea:94:bc:53:a1:00:51:57:00:f4: ca:4e:d4:ae:cd:73:a5:1e:47:c0:52:6f:9b:b7:d2:26:81:0c: 3d:f4:fc:41:64:3a:65:a7:40:32:a1:53:21:0f:8d:e9:5c:12: 83:3b:21:59:ad:5e:7c:9d:85:0b:b5:2b:d4:90:2d:93:c8:9b: e9:9b:2a:84 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUOh/uinE0BNZXl6uDSHuqG3EcpoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDkxQjE1MUUzOTQxQjNFNzk3QUQwN0Q5NjBBQTI2QTc5MDI1NkNCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8e04jZG6QFIqlI3YLMiaMRRiW bdd6J32u+iDpaVFVsntwW7GhJmQHVv/rqPMaWy1/4M+6kK6ub0ggWUg9zCEn3Css OMLhLkysNKC9JaWSHLxNS8YtA4wKpX3D3DKPi9xEl181qlN/KquSYpa5nhRIU9e9 sjHwnPZh5EvtzJQ/vzbfD6KqjGDTtb0tE1ynOX8mx+EYbvhdTxQnVMAPNt6cQiDy iPx9G2h/rWYWJQa0BenSr7qcz9AAwPfDVXVOD0OSPFyyy7cmyRN3uX9ml2+wQQqs fHXj6Ci8OXZH3/f+1JWYOiap/kmWeSCqbv/2V6z0oOp0JDfgNr/hkEgv/Og1AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUkbFR45QbPnl60H2WCqJqeQJWy/8wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4NTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJGOYwDQYJKoZIhvcNAQELBQADggEBACww9VocwCm/xWAuEcsGD3vp OC+okxKQUKxBA8dlQmOGsMY069Cb5jEWTC3xaqpfF6HRBRo5/mR3zmq5WR6C9nSc 9SiaNRcqfe6Z/FDo23UXsNsAmVEUh2ctev+4B8RFu/BjGyDqh3zf7YhroTHxhhoi cQ2NsYNl3xPy3cdBz7tkvwiT7r1EfQaG+hy4oS7Xp6yqQ4Ow6wFa/Gi3MDGMmuVF hqvC7WHyFhU7SnvnrKPP6uTf2ZV6NlRLPpFv6pS8U6EAUVcA9MpO1K7Nc6UeR8BS b5u30iaBDD30/EFkOmWnQDKhUyEPjelcEoM7IVmtXnydhQu1K9SQLZPIm+mbKoQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:13 2026 by rpki-client