$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa File: AS402899.roa (raw, json) Hash identifier: OrHGXktap1Qv8aj0I06V2jdK2zIOw1kFNhb3EIDnPwQ= Subject key identifier: 86:9F:E5:D6:E6:16:EB:80:C5:B3:74:A1:6F:52:54:56:5F:E3:35:A0 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0B4174B0DAE163F56EE4A4BCC13E91AB9DDA7996 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa Signing time: Fri 13 Nov 2026 17:01:58 +0000 ROA not before: Fri 13 Nov 2026 16:56:58 +0000 ROA not after: Fri 12 Nov 2027 17:01:58 +0000 asID: 402899 IP address blocks: 152.234.141.0/24 maxlen: 24 177.201.196.0/24 maxlen: 24 179.69.113.0/24 maxlen: 24 179.254.195.0/24 maxlen: 24 187.14.133.0/24 maxlen: 24 187.15.196.0/24 maxlen: 24 187.15.232.0/24 maxlen: 24 187.55.10.0/24 maxlen: 24 189.12.148.0/24 maxlen: 24 189.12.156.0/24 maxlen: 24 189.30.65.0/24 maxlen: 24 189.30.68.0/24 maxlen: 24 189.30.88.0/24 maxlen: 24 189.30.103.0/24 maxlen: 24 200.138.40.0/24 maxlen: 24 200.180.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:41:74:b0:da:e1:63:f5:6e:e4:a4:bc:c1:3e:91:ab:9d:da:79:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 13 16:56:58 2026 GMT Not After : Nov 12 17:01:58 2027 GMT Subject: CN=869FE5D6E616EB80C5B374A16F5254565FE335A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:57:33:fb:8c:cc:ef:2c:65:67:68:fa:93: 44:b0:45:16:e5:3d:3e:21:81:f7:5a:45:52:ea:9a: 21:79:24:82:d3:8a:33:70:36:97:2f:df:5e:58:a3: 44:be:99:50:55:f7:95:62:b7:83:4d:f1:fe:05:89: 97:bc:36:c1:60:14:7f:63:32:0f:d3:88:1a:84:7b: 70:db:2d:04:06:37:ed:09:e1:11:cb:f4:d9:35:11: 85:d0:9e:2b:44:3e:3c:d7:34:3c:04:f0:05:6a:b4: 13:2d:76:8e:ad:0e:db:80:dd:e1:db:30:2c:0e:a4: af:fc:38:26:0d:16:73:5a:26:ae:24:a5:62:45:f2: aa:4f:dd:72:a0:8a:5b:02:f6:82:97:e7:8e:a1:98: d1:9b:cb:df:8f:3b:3e:47:cd:2e:ba:23:c9:44:bb: 24:dd:73:9f:4f:b3:db:c2:c1:5b:91:d8:cb:ef:bc: 7b:bf:88:bf:32:f3:2f:5e:44:86:20:ce:b4:85:d0: e1:79:ff:36:b1:5e:a7:06:6c:5c:5c:1e:63:c1:df: c0:ee:3a:10:eb:3e:39:e5:45:46:b1:89:f6:56:aa: e0:55:7d:6b:ed:2f:56:6c:ae:79:41:3e:7a:17:c0: 5a:b4:b5:e0:93:cb:fd:8d:67:3f:91:ad:37:6a:91: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:E5:D6:E6:16:EB:80:C5:B3:74:A1:6F:52:54:56:5F:E3:35:A0 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.141.0/24 177.201.196.0/24 179.69.113.0/24 179.254.195.0/24 187.14.133.0/24 187.15.196.0/24 187.15.232.0/24 187.55.10.0/24 189.12.148.0/24 189.12.156.0/24 189.30.65.0/24 189.30.68.0/24 189.30.88.0/24 189.30.103.0/24 200.138.40.0/24 200.180.173.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:fd:ff:30:a2:4e:46:8b:2b:af:1b:19:b7:4a:14:7f:15:9a: f2:04:a6:cd:92:d4:84:c2:48:a3:64:9d:a5:74:33:18:c8:c2: bb:31:51:d6:50:20:5e:3f:f6:11:14:81:80:f8:2e:72:67:e5: 36:07:0b:41:21:ff:3e:0d:80:ed:ab:5c:a2:99:d4:d3:11:b0: 0d:95:da:f6:3e:e7:a7:d6:b6:1c:f9:c5:a5:cd:62:22:07:d2: 52:78:54:05:3f:bd:7b:08:59:07:97:cb:a0:92:9c:41:df:c3: 12:24:b9:1c:e6:bf:29:37:6a:9f:c7:b1:e3:1a:5e:95:11:56: 3c:b2:45:7f:74:64:af:ab:42:d1:49:90:c3:5e:3c:39:c9:ec: 0b:4d:68:e2:8d:07:b6:96:2f:53:0e:41:81:5e:a6:d2:6a:5b: 28:28:7f:db:42:06:d7:33:c5:c9:f4:14:83:b8:ef:de:0e:b7: 6a:3e:c9:8b:72:07:5a:af:f9:86:82:9e:64:bb:95:68:f6:96: 29:37:95:f4:78:81:d6:ab:7a:62:0a:cf:ad:08:1b:4e:19:22: 6c:a7:20:2c:02:2e:a3:c9:f9:db:3a:ca:07:f6:8b:61:67:42: 24:8d:f8:65:6d:69:9c:79:80:55:78:f3:9e:cc:6b:39:2d:4b: 49:b6:ff:ac -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUC0F0sNrhY/Vu5KS8wT6Rq53aeZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTMxNjU2NThaFw0yNzExMTIxNzAxNThaMDMxMTAvBgNV BAMTKDg2OUZFNUQ2RTYxNkVCODBDNUIzNzRBMTZGNTI1NDU2NUZFMzM1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/1cz+4zM7yxlZ2j6k0SwRRbl PT4hgfdaRVLqmiF5JILTijNwNpcv315Yo0S+mVBV95Vit4NN8f4FiZe8NsFgFH9j Mg/TiBqEe3DbLQQGN+0J4RHL9Nk1EYXQnitEPjzXNDwE8AVqtBMtdo6tDtuA3eHb MCwOpK/8OCYNFnNaJq4kpWJF8qpP3XKgilsC9oKX546hmNGby9+POz5HzS66I8lE uyTdc59Ps9vCwVuR2MvvvHu/iL8y8y9eRIYgzrSF0OF5/zaxXqcGbFxcHmPB38Du OhDrPjnlRUaxifZWquBVfWvtL1ZsrnlBPnoXwFq0teCTy/2NZz+RrTdqkd/nAgMB AAGjggKfMIICmzAdBgNVHQ4EFgQUhp/l1uYW64DFs3Shb1JUVl/jNaAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4OTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIweQYIKwYBBQUHAQcBAf8EajBoMGYE AgABMGADBACY6o0DBACxycQDBACzRXEDBACz/sMDBAC7DoUDBAC7D8QDBAC7D+gD BAC7NwoDBAC9DJQDBAC9DJwDBAC9HkEDBAC9HkQDBAC9HlgDBAC9HmcDBADIiigD BADItK0wDQYJKoZIhvcNAQELBQADggEBAD39/zCiTkaLK68bGbdKFH8VmvIEps2S 1ITCSKNknaV0MxjIwrsxUdZQIF4/9hEUgYD4LnJn5TYHC0Eh/z4NgO2rXKKZ1NMR sA2V2vY+56fWthz5xaXNYiIH0lJ4VAU/vXsIWQeXy6CSnEHfwxIkuRzmvyk3ap/H seMaXpURVjyyRX90ZK+rQtFJkMNePDnJ7AtNaOKNB7aWL1MOQYFeptJqWygof9tC Btczxcn0FIO4794Ot2o+yYtyB1qv+YaCnmS7lWj2lik3lfR4gdaremIKz60IG04Z ImynICwCLqPJ+ds6ygf2i2FnQiSN+GVtaZx5gFV4857MazktS0m2/6w= -----END CERTIFICATE-----Generated at Sun Nov 15 01:35:57 2026 by rpki-client