$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS44589.roa File: AS44589.roa (raw, json) Hash identifier: jvVWZcC2HCk4dUKvzalxgQnYTX+SCaklVbSoumUWSJU= Subject key identifier: F0:9B:DA:63:12:20:1B:64:04:D2:95:4D:FB:0C:B1:F8:19:06:02:C1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6619E7916389ACF702820F5235DEBA5F4F205747 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS44589.roa Signing time: Fri 13 Nov 2026 09:18:33 +0000 ROA not before: Fri 13 Nov 2026 09:13:33 +0000 ROA not after: Fri 12 Nov 2027 09:18:33 +0000 asID: 44589 IP address blocks: 189.31.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 11:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:19:e7:91:63:89:ac:f7:02:82:0f:52:35:de:ba:5f:4f:20:57:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 13 09:13:33 2026 GMT Not After : Nov 12 09:18:33 2027 GMT Subject: CN=F09BDA6312201B6404D2954DFB0CB1F8190602C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:e8:a7:1c:8f:1a:8d:74:eb:99:7b:c8:ad: 37:c3:8d:b9:ac:eb:2d:a0:84:ba:a8:ed:6d:84:ef: 14:0d:97:fd:5c:14:e7:34:d3:e4:53:9e:57:4b:76: 51:ac:15:1f:98:76:99:42:c3:6b:f5:4f:9d:24:98: 7a:05:72:f6:ed:cf:0f:f8:f4:7b:4b:c9:fb:35:c8: df:64:c6:be:0e:39:6c:05:c6:62:0d:06:9b:e4:56: b2:7f:86:c9:b5:68:b4:aa:ca:cc:bf:15:22:fb:01: 3d:68:bb:0b:9e:b1:1c:2c:3b:cf:b1:37:d7:1a:44: 2a:72:d1:f8:97:d6:98:23:b9:51:fd:81:f7:11:ce: 48:fc:9e:7a:27:fa:29:9c:c3:0e:93:f0:95:6c:79: 4f:15:8c:62:81:37:6b:b2:43:40:29:fd:0f:89:87: 3e:5e:f3:2d:8e:d6:9d:58:a8:1a:c2:91:c8:31:e4: 99:3e:e0:c4:ac:65:16:ac:b8:5f:32:46:65:eb:52: b8:5b:69:29:11:39:50:30:b1:43:b6:00:fe:9e:ff: 11:62:de:dc:a3:63:08:0c:f4:cd:0c:b2:37:81:64: d2:26:07:d2:d9:3e:3d:b1:55:5e:92:53:46:43:e8: 65:04:4c:93:93:5e:39:c2:8f:8e:a5:71:2d:8c:d2: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9B:DA:63:12:20:1B:64:04:D2:95:4D:FB:0C:B1:F8:19:06:02:C1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS44589.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.31.24.0/24 Signature Algorithm: sha256WithRSAEncryption 19:11:44:bb:1d:78:6f:13:b3:06:06:65:62:2e:20:22:a8:50: 6f:11:11:34:f4:32:79:aa:19:8b:60:65:c1:52:63:e1:07:db: 12:8e:67:a7:cc:62:d8:3e:b5:60:a3:11:e2:f7:d0:09:42:6e: f5:f1:3b:75:5e:74:b0:59:ef:2c:19:2b:39:8f:6b:fe:3c:3b: 4c:34:b6:30:a1:d7:3f:7a:9c:82:03:d1:86:6a:e8:c9:92:28: c4:20:58:89:26:6c:83:e9:f5:08:c0:eb:87:55:63:30:e4:0a: 5a:ac:fc:ef:2e:48:70:3d:6f:5d:9a:3d:a5:3d:9d:ba:eb:46: d2:c3:9e:0a:09:5f:c6:30:d4:b4:c8:98:07:97:da:e6:f6:ed: c7:94:a2:cb:43:17:4d:59:e3:1c:94:cb:ef:bd:f6:9f:07:0f: 24:bb:70:8a:8c:6b:cd:b4:1e:b6:25:2f:54:7b:0a:f5:58:f1: a4:60:bc:8d:84:84:f3:f4:13:ee:ab:73:4b:8d:4a:bc:2c:62: 4b:76:86:fb:7b:f2:c2:09:69:c0:de:6a:66:ae:c6:01:a6:e3: fe:df:e6:98:7e:ad:73:e5:68:03:63:0d:ff:e6:34:61:8d:78: f6:b1:01:73:95:48:84:66:6f:c1:19:b6:9e:ee:67:ff:44:b2: 55:c2:16:f1 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUZhnnkWOJrPcCgg9SNd66X08gV0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTMwOTEzMzNaFw0yNzExMTIwOTE4MzNaMDMxMTAvBgNV BAMTKEYwOUJEQTYzMTIyMDFCNjQwNEQyOTU0REZCMENCMUY4MTkwNjAyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEj+inHI8ajXTrmXvIrTfDjbms 6y2ghLqo7W2E7xQNl/1cFOc00+RTnldLdlGsFR+YdplCw2v1T50kmHoFcvbtzw/4 9HtLyfs1yN9kxr4OOWwFxmINBpvkVrJ/hsm1aLSqysy/FSL7AT1ouwuesRwsO8+x N9caRCpy0fiX1pgjuVH9gfcRzkj8nnon+imcww6T8JVseU8VjGKBN2uyQ0Ap/Q+J hz5e8y2O1p1YqBrCkcgx5Jk+4MSsZRasuF8yRmXrUrhbaSkROVAwsUO2AP6e/xFi 3tyjYwgM9M0MsjeBZNImB9LZPj2xVV6SU0ZD6GUETJOTXjnCj46lcS2M0vtpAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU8JvaYxIgG2QE0pVN+wyx+BkGAsEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0NDU4OS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAL0fGDANBgkqhkiG9w0BAQsFAAOCAQEAGRFEux14bxOzBgZlYi4gIqhQ bxERNPQyeaoZi2BlwVJj4QfbEo5np8xi2D61YKMR4vfQCUJu9fE7dV50sFnvLBkr OY9r/jw7TDS2MKHXP3qcggPRhmroyZIoxCBYiSZsg+n1CMDrh1VjMOQKWqz87y5I cD1vXZo9pT2duutG0sOeCglfxjDUtMiYB5fa5vbtx5Siy0MXTVnjHJTL7732nwcP JLtwioxrzbQetiUvVHsK9VjxpGC8jYSE8/QT7qtzS41KvCxiS3aG+3vywglpwN5q Zq7GAabj/t/mmH6tc+VoA2MN/+Y0YY149rEBc5VIhGZvwRm2nu5n/0SyVcIW8Q== -----END CERTIFICATE-----Generated at Sat Nov 14 22:06:58 2026 by rpki-client