$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402866.roa File: AS402866.roa (raw, json) Hash identifier: jWpfISEXb6U9Dip9km0xrCrOUXOTpGFf7SpErtVgnYM= Subject key identifier: 10:1E:C7:91:55:55:1F:41:40:DC:64:94:7B:E6:AC:F7:CC:8C:1B:B1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 296BA0674A4D88C481336B9523624284BF391F9E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402866.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 402866 IP address blocks: 200.141.177.0/24 maxlen: 24 200.180.178.0/24 maxlen: 24 201.24.228.0/24 maxlen: 24 201.24.232.0/24 maxlen: 24 201.24.236.0/24 maxlen: 24 201.24.237.0/24 maxlen: 24 201.24.238.0/24 maxlen: 24 201.24.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6b:a0:67:4a:4d:88:c4:81:33:6b:95:23:62:42:84:bf:39:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=101EC79155551F4140DC64947BE6ACF7CC8C1BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:42:e0:73:29:c9:7b:8b:90:60:38:a3:5b: e6:86:07:eb:a0:54:d3:2c:15:8e:e1:87:5c:11:8f: 99:00:dc:e0:a4:0f:f5:08:cd:9f:9b:3e:a8:8b:5f: f4:73:f9:f8:c0:91:42:f1:29:0c:d3:9f:8b:c1:c8: 5e:f2:6b:74:d5:4b:f2:13:bf:12:e9:3c:c4:a4:35: b0:bc:b3:e0:c7:38:be:73:43:c9:16:d2:43:1f:4c: 18:d3:4c:08:cb:22:67:c4:b5:c9:af:18:13:e3:7b: 6d:11:ab:9c:02:b2:81:cd:3b:be:bf:17:a6:47:a4: 50:d1:9d:0c:09:2a:c5:99:c6:08:30:18:e7:eb:3b: 49:1e:e5:cd:52:0a:3d:ea:26:92:0f:19:7d:c5:11: 75:51:fd:cf:7e:ca:63:80:d9:cf:ab:a6:46:35:6f: 56:de:db:fb:6f:f1:46:87:40:c0:c3:91:eb:35:6a: 41:5c:90:65:01:ef:0d:7c:48:cb:f4:87:9e:e6:58: d5:bd:c9:fc:bd:fb:27:c6:b5:d7:d4:f2:4c:79:45: 19:c8:a4:4a:15:be:36:77:c0:ae:ec:b5:91:f8:e6: 88:25:92:59:c2:fe:9e:ef:b1:4b:65:e5:4e:9e:9d: 51:c6:ba:7e:41:45:bd:4f:3b:7e:6c:fb:b7:a4:57: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1E:C7:91:55:55:1F:41:40:DC:64:94:7B:E6:AC:F7:CC:8C:1B:B1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.177.0/24 200.180.178.0/24 201.24.228.0/24 201.24.232.0/24 201.24.236.0/22 Signature Algorithm: sha256WithRSAEncryption c1:87:cf:26:9b:a0:18:2c:fc:0e:f0:83:d1:b9:70:15:f2:7b: 80:64:cc:c4:28:ed:74:36:e7:df:49:d9:ac:72:2b:83:e2:69: 9a:55:42:d5:06:b9:96:54:52:78:92:8d:b1:e4:dd:dc:b2:ef: ac:4f:4b:e1:6d:db:de:36:11:c0:30:6a:a1:48:ed:23:ca:6b: 1f:6e:8b:fd:5b:ac:aa:82:e6:3f:19:ed:58:75:78:28:be:c5: 61:21:55:7b:57:3f:23:94:ab:8d:b8:2c:6a:60:57:be:8d:d6: 7c:21:32:96:05:c4:b7:2d:5d:16:e9:b2:96:a8:e2:8b:bf:32: 13:15:ba:2e:4f:ec:d9:fb:7f:f2:33:8e:0f:5b:33:de:58:c6: 6e:67:d9:7a:d4:9e:92:2b:fc:58:5e:a2:fe:9a:b2:18:e1:bf: f5:76:db:69:02:e4:b3:09:8e:2e:0d:bc:97:bc:a9:00:a5:27: e7:15:3c:33:f7:34:d4:e9:3f:11:71:37:f9:eb:7f:75:93:ea: 43:a9:20:03:ee:5e:8e:29:81:0c:c7:2a:89:b6:f6:ef:76:04: 19:e2:04:d8:5c:0a:7c:fb:53:69:cc:6e:78:79:de:83:20:64: b0:02:4e:77:79:83:f7:37:37:5f:2a:6a:9d:04:fe:ed:78:3e: a7:7e:8e:52 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKWugZ0pNiMSBM2uVI2JChL85H54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDEwMUVDNzkxNTU1NTFGNDE0MERDNjQ5NDdCRTZBQ0Y3Q0M4QzFCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA0LgcynJe4uQYDijW+aGB+ug VNMsFY7hh1wRj5kA3OCkD/UIzZ+bPqiLX/Rz+fjAkULxKQzTn4vByF7ya3TVS/IT vxLpPMSkNbC8s+DHOL5zQ8kW0kMfTBjTTAjLImfEtcmvGBPje20Rq5wCsoHNO76/ F6ZHpFDRnQwJKsWZxggwGOfrO0ke5c1SCj3qJpIPGX3FEXVR/c9+ymOA2c+rpkY1 b1be2/tv8UaHQMDDkes1akFckGUB7w18SMv0h57mWNW9yfy9+yfGtdfU8kx5RRnI pEoVvjZ3wK7stZH45oglklnC/p7vsUtl5U6enVHGun5BRb1PO35s+7ekV3+RAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUEB7HkVVVH0FA3GSUe+as98yMG7EwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4NjYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBADIjbEDBADItLIDBADJGOQDBADJGOgDBALJGOwwDQYJKoZIhvcNAQEL BQADggEBAMGHzyaboBgs/A7wg9G5cBXye4BkzMQo7XQ2599J2axyK4PiaZpVQtUG uZZUUniSjbHk3dyy76xPS+Ft2942EcAwaqFI7SPKax9ui/1brKqC5j8Z7Vh1eCi+ xWEhVXtXPyOUq424LGpgV76N1nwhMpYFxLctXRbpspao4ou/MhMVui5P7Nn7f/Iz jg9bM95Yxm5n2XrUnpIr/Fheov6ashjhv/V222kC5LMJji4NvJe8qQClJ+cVPDP3 NNTpPxFxN/nrf3WT6kOpIAPuXo4pgQzHKom29u92BBniBNhcCnz7U2nMbnh53oMg ZLACTnd5g/c3N18qap0E/u14Pqd+jlI= -----END CERTIFICATE-----Generated at Thu Sep 24 10:32:13 2026 by rpki-client