$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS147281.roa File: AS147281.roa (raw, json) Hash identifier: Sn3SxAP7aAgJoYWKgZvLvU7q2VItxbqvPSLUe7HE9ok= Subject key identifier: CE:44:25:3A:C8:C8:5E:B3:72:50:75:8B:7D:4E:47:79:02:B6:B9:AD Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4ED91FB2D89B0631AC99E48F4E819821AEBD662E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS147281.roa Signing time: Tue 27 Oct 2026 14:18:11 +0000 ROA not before: Tue 27 Oct 2026 14:13:11 +0000 ROA not after: Tue 26 Oct 2027 14:18:11 +0000 asID: 147281 IP address blocks: 179.254.210.0/24 maxlen: 24 187.14.161.0/24 maxlen: 24 187.55.32.0/24 maxlen: 24 189.12.128.0/24 maxlen: 24 200.138.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:1f:b2:d8:9b:06:31:ac:99:e4:8f:4e:81:98:21:ae:bd:66:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 27 14:13:11 2026 GMT Not After : Oct 26 14:18:11 2027 GMT Subject: CN=CE44253AC8C85EB37250758B7D4E477902B6B9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:fa:05:8c:9a:6d:db:23:6d:dd:51:8d:7e: 54:3d:00:44:b4:96:8f:6e:ee:9d:f0:13:65:e2:9f: 25:ee:74:83:cf:ef:d0:66:76:3b:2e:32:77:fe:2c: f0:50:29:22:76:31:ee:8e:9b:fa:ad:e1:d5:5e:85: fa:a3:e7:7f:03:46:3a:2e:22:f2:db:e1:02:b1:17: 55:92:3b:75:8f:14:df:eb:fb:74:fb:5d:eb:36:3c: e6:39:21:c1:f7:8c:b5:7a:62:4f:5d:c2:a4:47:b1: bc:7c:63:a6:27:0c:15:0e:2f:df:41:9f:88:d9:fa: fc:76:63:e5:a0:c5:b6:30:95:e6:b1:23:0d:de:89: 8f:33:68:af:9a:a1:91:33:18:36:4d:52:71:39:64: eb:8e:51:b2:41:23:73:5f:49:27:4a:8e:08:3a:ca: bf:32:32:d9:76:4f:fa:c7:33:b6:04:96:86:83:29: c5:0a:70:a4:9d:d5:0c:5b:4d:99:ce:e0:79:98:88: f5:64:e8:43:74:97:61:c5:a0:8a:d4:08:3e:01:30: f6:3f:4f:5d:61:ee:ca:4d:0e:16:ee:a1:bc:82:44: 9b:43:a7:c3:0e:e8:3c:ff:e6:55:94:04:30:c6:f8: 72:7e:f8:cb:8f:79:e1:35:7f:6d:71:08:b8:98:91: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:25:3A:C8:C8:5E:B3:72:50:75:8B:7D:4E:47:79:02:B6:B9:AD X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS147281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.210.0/24 187.14.161.0/24 187.55.32.0/24 189.12.128.0/24 200.138.16.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:26:15:a9:35:4f:f2:65:cf:99:fa:12:7b:27:3d:f9:e5:a5: b8:a7:60:db:04:6a:0e:82:11:c0:00:f7:9d:0d:75:e6:09:ee: 8a:69:8f:2b:46:5c:6c:09:0d:dc:aa:e6:2c:b7:56:7f:2b:6e: 13:8b:96:79:ad:2d:35:c6:fd:42:c5:f3:09:98:ed:01:47:49: 2b:bf:25:b2:4c:b3:b1:d8:e2:6f:32:b9:4b:6a:64:0a:13:dd: 82:92:1b:e8:e7:49:15:14:4f:17:66:4c:58:67:01:85:08:26: 79:71:e1:19:c6:19:41:e8:a1:fd:69:a2:3d:53:b1:9e:bb:6a: f0:b9:26:58:60:46:4c:b3:fa:ae:94:c1:8d:10:c7:7d:c5:c4: 0a:07:51:03:52:23:e7:b4:f2:79:74:9d:2a:8e:0e:0d:4c:f0: f7:1f:62:62:b7:b8:fd:d5:7d:71:9a:1d:62:36:e0:a5:28:32: ac:21:0d:68:2b:0c:bc:07:b8:0a:58:83:03:56:de:84:43:58: 7c:f9:8c:5d:56:67:9b:a5:e6:6a:7f:ae:2b:3e:b2:e4:84:69: 50:aa:bd:54:b0:2c:42:c1:95:eb:7a:ba:ca:8c:ed:00:ba:e8: c4:e8:22:62:4d:80:15:cd:80:1d:d8:d7:68:b3:8c:a2:71:f5: a7:d8:c9:c5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTtkfstibBjGsmeSPToGYIa69Zi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjcxNDEzMTFaFw0yNzEwMjYxNDE4MTFaMDMxMTAvBgNV BAMTKENFNDQyNTNBQzhDODVFQjM3MjUwNzU4QjdENEU0Nzc5MDJCNkI5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xvoFjJpt2yNt3VGNflQ9AES0 lo9u7p3wE2XinyXudIPP79BmdjsuMnf+LPBQKSJ2Me6Om/qt4dVehfqj538DRjou IvLb4QKxF1WSO3WPFN/r+3T7Xes2POY5IcH3jLV6Yk9dwqRHsbx8Y6YnDBUOL99B n4jZ+vx2Y+WgxbYwleaxIw3eiY8zaK+aoZEzGDZNUnE5ZOuOUbJBI3NfSSdKjgg6 yr8yMtl2T/rHM7YEloaDKcUKcKSd1QxbTZnO4HmYiPVk6EN0l2HFoIrUCD4BMPY/ T11h7spNDhbuobyCRJtDp8MO6Dz/5lWUBDDG+HJ++MuPeeE1f21xCLiYkeEDAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUzkQlOsjIXrNyUHWLfU5HeQK2ua0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNDcyODEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQE AgABMB4DBACz/tIDBAC7DqEDBAC7NyADBAC9DIADBADIihAwDQYJKoZIhvcNAQEL BQADggEBAIsmFak1T/Jlz5n6EnsnPfnlpbinYNsEag6CEcAA950NdeYJ7oppjytG XGwJDdyq5iy3Vn8rbhOLlnmtLTXG/ULF8wmY7QFHSSu/JbJMs7HY4m8yuUtqZAoT 3YKSG+jnSRUUTxdmTFhnAYUIJnlx4RnGGUHoof1poj1TsZ67avC5JlhgRkyz+q6U wY0Qx33FxAoHUQNSI+e08nl0nSqODg1M8PcfYmK3uP3VfXGaHWI24KUoMqwhDWgr DLwHuApYgwNW3oRDWHz5jF1WZ5ul5mp/ris+suSEaVCqvVSwLELBlet6usqM7QC6 6MToImJNgBXNgB3Y12izjKJx9afYycU= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:38 2026 by rpki-client