$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402976.roa File: AS402976.roa (raw, json) Hash identifier: I7odSl4zXwZgCcLVH3lOtxDj9LSnAalofTGcPDzTh7k= Subject key identifier: 53:37:42:76:15:A9:19:1E:01:CC:6C:0C:03:63:99:0B:60:8C:6E:4E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 47C0620E5DFFFE85B7D3EFFED7311FE13D4AE5FE Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402976.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 402976 IP address blocks: 189.12.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c0:62:0e:5d:ff:fe:85:b7:d3:ef:fe:d7:31:1f:e1:3d:4a:e5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=5337427615A9191E01CC6C0C0363990B608C6E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:7e:e6:30:af:45:1d:a4:b9:b8:2e:ea:64: 58:00:c9:4d:ef:17:53:13:95:44:9e:b6:82:34:07: 0e:a9:57:83:04:5c:12:97:ea:28:33:75:b8:b8:58: dd:41:da:4a:02:7c:01:62:f7:d5:9a:0a:41:33:ce: 6e:8f:15:04:ce:57:13:64:14:b7:60:a2:b6:80:b5: 03:dc:92:f3:09:43:4a:bd:87:ff:fc:e1:2e:86:74: d0:56:e5:9f:c5:37:b1:c5:5e:88:7c:46:e7:59:63: 9b:f7:3d:5e:5c:28:f2:26:2d:27:19:1a:4d:b8:db: ca:a6:62:c7:40:10:2e:1d:78:bf:5b:6f:d3:48:51: 2f:b8:5c:ed:77:d3:3d:e6:da:fa:ce:e6:e4:71:cb: 46:7a:80:38:f8:48:35:d0:4c:a9:29:44:fe:70:74: 33:3b:20:e5:38:05:19:09:f5:ce:5d:e1:20:2c:b8: 54:2d:cd:ba:b2:5f:7d:5f:b2:87:2b:c6:fd:3f:a5: 90:1c:5d:d7:f5:32:76:12:2d:a8:4a:81:8e:96:d3: 03:b2:d8:c9:ba:9b:e1:c8:41:d1:34:e2:ce:02:54: 54:5b:3b:01:cd:18:32:17:5f:09:e9:5e:80:eb:7a: 02:03:e5:b3:20:23:aa:5a:5d:1f:da:e5:9e:7d:60: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:37:42:76:15:A9:19:1E:01:CC:6C:0C:03:63:99:0B:60:8C:6E:4E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.132.0/24 Signature Algorithm: sha256WithRSAEncryption c0:ec:cd:33:ca:cf:0f:3f:19:4f:65:c9:38:52:5a:c3:6d:18: 8e:37:d3:6c:0d:5b:13:96:72:da:d4:53:8b:81:26:3f:e5:95: 78:0f:43:0f:70:2e:25:3c:5e:72:cc:f1:bc:c7:1b:5e:b4:21: 2d:e6:6a:fb:04:a6:36:3e:29:c0:cd:4d:9b:23:c5:e0:c6:eb: 92:7e:e7:64:b4:42:07:a5:8d:e1:70:53:58:ce:07:5c:9d:81: ee:09:29:db:92:1b:64:73:51:c7:be:21:95:a1:8b:c3:ec:75: a5:29:34:06:5e:7e:88:4b:1e:9b:ba:ab:29:bb:65:e2:63:e7: 4d:65:b1:f4:dc:c4:29:a4:bb:20:a2:99:30:1e:e5:66:34:ca: 4d:aa:2d:f2:99:00:60:0c:1e:42:88:bf:de:cb:97:aa:fe:95: 08:a7:df:a5:45:e1:f7:f3:6c:83:7e:1d:ba:c6:84:c9:7d:b6: 45:24:ec:fb:68:dc:7f:2c:79:21:35:22:19:70:38:8b:9e:9d: 67:13:45:4d:2b:3f:3f:c4:ce:b0:d9:cb:51:f5:f6:50:67:9d: 65:75:7e:97:f8:cf:7e:54:df:48:98:d5:b4:12:51:53:04:a8: 49:0c:b9:a5:53:e6:41:20:de:02:49:e6:2c:19:ee:db:52:07: b2:f0:6d:f5 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUR8BiDl3//oW30+/+1zEf4T1K5f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKDUzMzc0Mjc2MTVBOTE5MUUwMUNDNkMwQzAzNjM5OTBCNjA4QzZFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztH7mMK9FHaS5uC7qZFgAyU3v F1MTlUSetoI0Bw6pV4MEXBKX6igzdbi4WN1B2koCfAFi99WaCkEzzm6PFQTOVxNk FLdgoraAtQPckvMJQ0q9h//84S6GdNBW5Z/FN7HFXoh8RudZY5v3PV5cKPImLScZ Gk2428qmYsdAEC4deL9bb9NIUS+4XO130z3m2vrO5uRxy0Z6gDj4SDXQTKkpRP5w dDM7IOU4BRkJ9c5d4SAsuFQtzbqyX31fsocrxv0/pZAcXdf1MnYSLahKgY6W0wOy 2Mm6m+HIQdE04s4CVFRbOwHNGDIXXwnpXoDregID5bMgI6paXR/a5Z59YJvZAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUUzdCdhWpGR4BzGwMA2OZC2CMbk4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI5NzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC9DIQwDQYJKoZIhvcNAQELBQADggEBAMDszTPKzw8/GU9lyThSWsNt GI4302wNWxOWctrUU4uBJj/llXgPQw9wLiU8XnLM8bzHG160IS3mavsEpjY+KcDN TZsjxeDG65J+52S0QgeljeFwU1jOB1ydge4JKduSG2RzUce+IZWhi8PsdaUpNAZe fohLHpu6qym7ZeJj501lsfTcxCmkuyCimTAe5WY0yk2qLfKZAGAMHkKIv97Ll6r+ lQin36VF4ffzbIN+HbrGhMl9tkUk7Pto3H8seSE1IhlwOIuenWcTRU0rPz/EzrDZ y1H19lBnnWV1fpf4z35U30iY1bQSUVMEqEkMuaVT5kEg3gJJ5iwZ7ttSB7LwbfU= -----END CERTIFICATE-----Generated at Thu Sep 24 08:17:35 2026 by rpki-client