$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS40929.roa File: AS40929.roa (raw, json) Hash identifier: NFPVwkQ+qH/NGlUlMTMzkMTwNqB1QwCWmHUslRedvJg= Subject key identifier: A3:99:36:46:F6:92:34:A9:BA:1A:4D:9B:51:5E:10:76:99:B9:A2:96 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6C0103FBE9A2A5BD38C2C1AF6D8387CAFBB3B0EB Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS40929.roa Signing time: Tue 22 Sep 2026 08:47:05 +0000 ROA not before: Tue 22 Sep 2026 08:42:05 +0000 ROA not after: Tue 21 Sep 2027 08:47:05 +0000 asID: 40929 IP address blocks: 177.177.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:01:03:fb:e9:a2:a5:bd:38:c2:c1:af:6d:83:87:ca:fb:b3:b0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 22 08:42:05 2026 GMT Not After : Sep 21 08:47:05 2027 GMT Subject: CN=A3993646F69234A9BA1A4D9B515E107699B9A296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:f8:45:19:ae:a1:d1:bf:e1:f4:ef:eb:57: 14:ed:6f:8b:f9:ad:7d:07:cc:5b:22:9a:8f:56:dd: 8b:6f:38:7a:e7:21:d5:e7:97:9e:1a:6b:4b:51:89: f0:1c:67:1e:28:76:de:97:52:35:10:c5:09:fb:22: 09:53:9b:e3:a0:6a:d3:5b:46:5b:ee:c2:87:4f:c8: a2:45:a8:13:18:b5:19:44:d8:b7:ad:13:a1:81:10: ba:d6:fd:81:d5:44:82:e1:57:db:88:17:88:3c:a8: 33:1a:92:c2:5a:6c:3a:25:55:f9:22:52:fc:68:24: ec:17:41:92:bf:91:11:ed:4c:c5:e1:66:e0:cc:fc: 79:90:e4:9c:92:05:64:6c:ab:55:fa:18:9c:4d:d0: 64:f7:22:14:8c:a1:63:08:3f:06:ed:7d:7a:f8:8a: bd:a3:3f:94:26:8b:40:14:b8:79:1b:a1:fd:ad:c8: d7:48:10:31:7a:e7:8c:58:84:99:04:dd:86:ae:f5: 9b:63:9b:9f:03:ab:ce:77:52:22:67:f7:6f:a3:3b: f4:1c:40:d0:01:94:35:36:9f:f2:aa:a1:c1:8e:58: 52:6d:99:f9:84:ad:56:a3:bb:37:5e:35:07:03:55: 8a:ae:95:1c:41:5f:12:30:17:49:0c:37:1a:9e:07: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:36:46:F6:92:34:A9:BA:1A:4D:9B:51:5E:10:76:99:B9:A2:96 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS40929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.82.0/24 Signature Algorithm: sha256WithRSAEncryption 69:15:4b:44:f3:16:af:73:8c:64:6a:70:ab:af:59:cc:0f:3c: 48:02:91:56:ae:02:ff:a1:1f:8a:d4:ff:6e:08:20:25:43:6f: 09:1e:49:a2:22:fe:c0:0f:52:7c:41:04:92:49:d1:f3:13:c5: fe:c2:47:2b:8d:23:37:38:df:b4:09:ce:34:b0:ee:5c:46:9d: 47:88:af:f1:a8:08:8e:9c:f2:73:c2:fb:5d:26:26:81:7c:ab: 91:96:28:26:3d:43:56:39:7d:91:5a:f5:9b:d3:29:66:98:a5: f4:19:c0:dc:4a:2e:76:a8:42:bc:d7:69:f2:4e:a4:c5:f2:b2: 7e:5e:a1:11:b3:7a:aa:e4:61:59:ce:1a:99:84:4b:c1:5c:85: 9f:3a:da:ec:9b:07:ef:58:94:2a:f9:a0:99:c7:52:d8:f2:62: cf:54:21:99:b6:f8:e8:7f:6d:f0:99:71:db:fb:dd:a3:44:4d: 56:30:7c:65:69:fb:bc:06:68:f9:79:91:3b:d9:02:fa:7b:b0: e1:7d:47:bb:ad:89:9e:c4:99:73:2c:92:c7:ae:59:d5:eb:0c: 6e:91:cf:71:f9:81:95:a0:e1:d8:e7:b0:4e:88:13:01:0f:4c: 51:a9:ac:f6:37:6a:60:04:68:3c:77:d5:b8:96:c9:35:5e:64: 1b:92:b4:6c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbAED++mipb04wsGvbYOHyvuzsOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjIwODQyMDVaFw0yNzA5MjEwODQ3MDVaMDMxMTAvBgNV BAMTKEEzOTkzNjQ2RjY5MjM0QTlCQTFBNEQ5QjUxNUUxMDc2OTlCOUEyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pfhFGa6h0b/h9O/rVxTtb4v5 rX0HzFsimo9W3YtvOHrnIdXnl54aa0tRifAcZx4odt6XUjUQxQn7IglTm+OgatNb RlvuwodPyKJFqBMYtRlE2LetE6GBELrW/YHVRILhV9uIF4g8qDMaksJabDolVfki UvxoJOwXQZK/kRHtTMXhZuDM/HmQ5JySBWRsq1X6GJxN0GT3IhSMoWMIPwbtfXr4 ir2jP5Qmi0AUuHkbof2tyNdIEDF654xYhJkE3Yau9Ztjm58Dq853UiJn92+jO/Qc QNABlDU2n/KqocGOWFJtmfmErVajuzdeNQcDVYqulRxBXxIwF0kMNxqeB2jbAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUo5k2RvaSNKm6Gk2bUV4Qdpm5opYwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDkyOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEALGxUjANBgkqhkiG9w0BAQsFAAOCAQEAaRVLRPMWr3OMZGpwq69ZzA88 SAKRVq4C/6EfitT/bgggJUNvCR5JoiL+wA9SfEEEkknR8xPF/sJHK40jNzjftAnO NLDuXEadR4iv8agIjpzyc8L7XSYmgXyrkZYoJj1DVjl9kVr1m9MpZpil9BnA3Eou dqhCvNdp8k6kxfKyfl6hEbN6quRhWc4amYRLwVyFnzra7JsH71iUKvmgmcdS2PJi z1Qhmbb46H9t8Jlx2/vdo0RNVjB8ZWn7vAZo+XmRO9kC+nuw4X1Hu62JnsSZcyyS x65Z1esMbpHPcfmBlaDh2OewTogTAQ9MUams9jdqYARoPHfVuJbJNV5kG5K0bA== -----END CERTIFICATE-----Generated at Wed Sep 23 19:13:42 2026 by rpki-client