$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS137410.roa File: AS137410.roa (raw, json) Hash identifier: QeMtAFjjvixkbIUlRqO+J/mC/mGymEjULAarVwfLcLw= Subject key identifier: F7:37:8E:5D:16:E1:B2:8C:D9:B7:8D:A3:9F:EF:B0:4F:EB:9F:62:0C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 127A48EF092CA41AA8C91A591B1C9F1E1031FC7C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS137410.roa Signing time: Wed 04 Nov 2026 09:15:14 +0000 ROA not before: Wed 04 Nov 2026 09:10:14 +0000 ROA not after: Wed 03 Nov 2027 09:15:14 +0000 asID: 137410 IP address blocks: 189.12.149.0/24 maxlen: 24 189.30.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7a:48:ef:09:2c:a4:1a:a8:c9:1a:59:1b:1c:9f:1e:10:31:fc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 4 09:10:14 2026 GMT Not After : Nov 3 09:15:14 2027 GMT Subject: CN=F7378E5D16E1B28CD9B78DA39FEFB04FEB9F620C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:90:81:e1:a1:d8:b1:4f:67:a8:11:cb:e1: 3d:5f:2f:c0:fc:ec:e8:9d:33:f6:b3:1e:5e:4a:83: e5:a9:05:8c:4f:fa:c6:3b:32:42:f5:63:24:d5:1a: 84:a8:7a:6a:e7:6f:8a:4d:d7:76:a1:52:cf:b8:38: cc:fd:ab:c4:d9:a2:fa:d6:f8:9e:05:db:88:7f:52: 76:ba:14:87:8e:c9:36:97:ed:40:31:ee:3d:ca:62: 9b:4f:02:f8:cc:ab:e9:54:12:28:6c:13:c7:db:fc: 93:96:ea:a0:fb:17:e2:e8:47:f7:f0:5c:83:7d:6f: 12:ff:1e:65:04:ad:d5:0a:ff:64:39:a2:10:42:5e: be:6c:23:28:b6:da:6e:d5:0c:39:de:11:cc:f3:a2: b3:7a:b3:fa:7a:ca:9b:5c:77:88:ac:13:1e:bd:a2: df:39:af:a7:e7:d9:a1:51:3c:90:88:15:c7:ea:74: e4:68:c7:fa:98:c5:64:d9:6b:2c:8c:81:31:9b:f8: 20:e6:f3:6f:49:68:6b:ff:71:19:a2:0a:37:75:6a: 5f:ef:86:5b:3a:4a:bf:8d:b5:22:f0:4b:35:7e:8b: df:00:73:09:75:35:dc:2c:85:2a:87:65:a8:1d:35: bf:be:2b:84:7c:73:3c:ee:57:1b:cd:ba:5c:bc:22: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:37:8E:5D:16:E1:B2:8C:D9:B7:8D:A3:9F:EF:B0:4F:EB:9F:62:0C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS137410.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.149.0/24 189.30.97.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9a:1d:7b:ae:05:b8:9a:f5:7d:9b:96:d4:32:8c:be:cb:80: 1a:5a:a1:d0:50:e6:ac:8b:93:12:9e:23:32:c2:91:6b:10:a6: a8:51:06:92:d5:17:67:2a:e6:67:a2:8b:70:2d:07:55:42:0a: a1:db:b4:a2:09:18:56:30:ef:d3:61:fc:01:4c:b7:e3:26:bd: 22:52:95:18:fd:e6:ee:45:79:f1:5f:63:98:b3:ff:42:43:2e: 20:26:1a:93:9f:c0:74:10:7d:2f:4b:34:0a:81:ff:6b:1e:60: b9:74:e1:3b:7c:20:d9:97:61:fe:0d:91:cb:76:33:63:e7:77: 05:25:2c:7e:8b:3d:d1:4e:4b:93:17:8d:96:71:05:5d:f3:f9: 46:02:b3:42:90:e3:1c:b8:47:5e:9d:e1:fc:32:29:ee:82:ba: eb:4b:6a:c8:9f:43:28:45:81:ba:56:49:c6:81:89:67:ef:44: 66:db:71:9c:c6:dc:53:c8:a7:ba:78:de:a6:0f:fd:05:19:f1: 71:1d:ca:1c:5a:49:ac:db:cf:a0:4c:91:ec:cb:db:5a:c0:37: ed:4b:45:d4:aa:7f:6f:44:e4:8a:d3:03:51:d8:e6:25:7a:62: 88:8e:bd:9c:69:97:5d:e6:2d:e9:74:cf:51:29:62:cb:36:93: 42:f1:e9:3a -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUEnpI7wkspBqoyRpZGxyfHhAx/HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDQwOTEwMTRaFw0yNzExMDMwOTE1MTRaMDMxMTAvBgNV BAMTKEY3Mzc4RTVEMTZFMUIyOENEOUI3OERBMzlGRUZCMDRGRUI5RjYyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBpCB4aHYsU9nqBHL4T1fL8D8 7OidM/azHl5Kg+WpBYxP+sY7MkL1YyTVGoSoemrnb4pN13ahUs+4OMz9q8TZovrW +J4F24h/Una6FIeOyTaX7UAx7j3KYptPAvjMq+lUEihsE8fb/JOW6qD7F+LoR/fw XIN9bxL/HmUErdUK/2Q5ohBCXr5sIyi22m7VDDneEczzorN6s/p6yptcd4isEx69 ot85r6fn2aFRPJCIFcfqdORox/qYxWTZayyMgTGb+CDm829JaGv/cRmiCjd1al/v hls6Sr+NtSLwSzV+i98Acwl1NdwshSqHZagdNb++K4R8czzuVxvNuly8IsPlAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQU9zeOXRbhsozZt42jn++wT+ufYgwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxMzc0MTAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC9DJUDBAC9HmEwDQYJKoZIhvcNAQELBQADggEBAIeaHXuuBbia9X2b ltQyjL7LgBpaodBQ5qyLkxKeIzLCkWsQpqhRBpLVF2cq5meii3AtB1VCCqHbtKIJ GFYw79Nh/AFMt+MmvSJSlRj95u5FefFfY5iz/0JDLiAmGpOfwHQQfS9LNAqB/2se YLl04Tt8INmXYf4Nkct2M2PndwUlLH6LPdFOS5MXjZZxBV3z+UYCs0KQ4xy4R16d 4fwyKe6CuutLasifQyhFgbpWScaBiWfvRGbbcZzG3FPIp7p43qYP/QUZ8XEdyhxa Sazbz6BMkezL21rAN+1LRdSqf29E5IrTA1HY5iV6YoiOvZxpl13mLel0z1EpYss2 k0Lx6To= -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:02 2026 by rpki-client