$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS154132.roa File: AS154132.roa (raw, json) Hash identifier: Gs9t6sNoph/Not+Mpd0Imw2IMsZkZo1z/IdJDAYNCsQ= Subject key identifier: F6:C4:AF:62:B3:4F:0D:81:B7:47:06:71:32:47:D4:06:E0:5A:81:A7 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2119D8A80B933E5C5025BA84E814AD900124EB6B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS154132.roa Signing time: Wed 04 Nov 2026 06:27:52 +0000 ROA not before: Wed 04 Nov 2026 06:22:52 +0000 ROA not after: Wed 03 Nov 2027 06:27:52 +0000 asID: 154132 IP address blocks: 177.201.202.0/24 maxlen: 24 179.253.44.0/24 maxlen: 24 179.253.52.0/24 maxlen: 24 179.253.56.0/24 maxlen: 24 179.254.212.0/24 maxlen: 24 187.55.8.0/24 maxlen: 24 187.55.9.0/24 maxlen: 24 187.55.38.0/24 maxlen: 24 187.55.39.0/24 maxlen: 24 187.55.46.0/24 maxlen: 24 187.55.51.0/24 maxlen: 24 189.30.104.0/24 maxlen: 24 189.30.126.0/24 maxlen: 24 189.31.18.0/24 maxlen: 24 200.180.168.0/24 maxlen: 24 200.180.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:19:d8:a8:0b:93:3e:5c:50:25:ba:84:e8:14:ad:90:01:24:eb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 4 06:22:52 2026 GMT Not After : Nov 3 06:27:52 2027 GMT Subject: CN=F6C4AF62B34F0D81B74706713247D406E05A81A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:18:f1:4d:79:7e:4f:be:c9:34:97:0f:4a: ec:1d:e5:40:93:f6:66:f5:35:2c:4c:ff:a8:df:b8: 33:54:df:98:26:7a:4e:23:b4:78:a3:ee:a9:7e:74: 0b:75:d3:5f:ea:bd:da:d3:3d:43:ac:44:bb:dc:f0: 39:f6:f6:18:e4:c0:cd:c5:20:db:91:6e:76:5b:a7: 78:4d:8f:e6:47:1c:f1:59:42:68:53:d8:dc:d4:95: 2a:11:b0:ec:e6:1c:29:2a:e1:2c:14:78:8c:01:42: d0:81:36:cd:f5:ea:8f:b8:6f:d6:9f:0f:6e:4b:28: 26:b4:78:cd:02:56:74:12:92:b6:68:25:5a:be:7e: 82:7b:89:8c:71:cd:74:1a:47:bf:b1:4a:33:3b:4e: a7:0e:2e:f3:4d:3a:7a:78:a7:ca:e3:9f:4f:b1:a2: 76:d9:88:fb:f2:2a:47:47:d6:4a:c5:eb:dc:77:31: f3:fc:52:4f:e3:bb:bc:af:f5:0d:40:71:5a:1b:de: bc:b7:1c:86:9d:6e:b4:6f:e8:af:82:7f:80:00:75: 64:da:f9:1a:cc:b9:98:f6:27:dc:58:90:ba:05:38: 84:29:eb:75:7c:89:b7:51:28:60:a9:fa:a6:99:a5: 36:f0:70:bf:79:b1:95:8a:9a:dc:37:71:5c:1b:f7: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C4:AF:62:B3:4F:0D:81:B7:47:06:71:32:47:D4:06:E0:5A:81:A7 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS154132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.202.0/24 179.253.44.0/24 179.253.52.0/24 179.253.56.0/24 179.254.212.0/24 187.55.8.0/23 187.55.38.0/23 187.55.46.0/24 187.55.51.0/24 189.30.104.0/24 189.30.126.0/24 189.31.18.0/24 200.180.168.0/24 200.180.172.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b4:e6:87:a5:b2:80:bb:3d:4c:a4:d0:71:21:6d:11:bd:1d: 5e:6b:32:4e:1f:d0:2a:45:92:3b:84:98:8e:49:f7:3d:35:d8: ce:5f:4a:13:68:52:c1:ba:6d:f6:3e:ae:a9:3f:02:bd:a3:5d: 6e:46:39:0a:a2:81:c8:68:40:c2:75:62:e0:56:d1:21:ec:3d: ef:91:8b:22:21:0d:0d:95:6b:e8:28:b1:4f:70:de:6a:1b:92: 57:cc:b1:ed:38:a7:89:af:fd:b7:4e:83:eb:29:69:d8:f7:0c: 04:76:35:3c:72:4e:97:02:b7:2b:c3:60:d0:2d:bd:b6:c0:5f: 69:55:a4:fd:f6:3c:27:e6:2d:b6:e6:f8:b1:ea:61:44:74:f7: c2:78:65:e3:a0:65:77:bd:19:11:a1:f2:e8:a8:e9:b4:8e:bb: 22:2e:7b:f1:91:c9:72:5e:a0:71:85:e3:fa:27:20:e7:af:54: a3:bd:7f:6a:89:5b:dd:ac:d3:1b:be:dc:59:76:1c:8c:3c:e3: 20:03:6c:f2:b6:fe:16:a3:08:f1:20:41:aa:14:49:e3:13:13: 9e:09:25:5c:3f:10:7f:e1:6a:99:9f:5a:f9:eb:d9:5e:a5:e7: b6:44:37:df:13:de:a0:e2:f1:92:70:56:04:94:7f:21:3f:02: 61:e0:b5:73 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUIRnYqAuTPlxQJbqE6BStkAEk62swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDQwNjIyNTJaFw0yNzExMDMwNjI3NTJaMDMxMTAvBgNV BAMTKEY2QzRBRjYyQjM0RjBEODFCNzQ3MDY3MTMyNDdENDA2RTA1QTgxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9BjxTXl+T77JNJcPSuwd5UCT 9mb1NSxM/6jfuDNU35gmek4jtHij7ql+dAt101/qvdrTPUOsRLvc8Dn29hjkwM3F INuRbnZbp3hNj+ZHHPFZQmhT2NzUlSoRsOzmHCkq4SwUeIwBQtCBNs316o+4b9af D25LKCa0eM0CVnQSkrZoJVq+foJ7iYxxzXQaR7+xSjM7TqcOLvNNOnp4p8rjn0+x onbZiPvyKkdH1krF69x3MfP8Uk/ju7yv9Q1AcVob3ry3HIadbrRv6K+Cf4AAdWTa +RrMuZj2J9xYkLoFOIQp63V8ibdRKGCp+qaZpTbwcL95sZWKmtw3cVwb9+StAgMB AAGjggKTMIICjzAdBgNVHQ4EFgQU9sSvYrNPDYG3RwZxMkfUBuBagacwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxNTQxMzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbQYIKwYBBQUHAQcBAf8EXjBcMFoE AgABMFQDBACxycoDBACz/SwDBACz/TQDBACz/TgDBACz/tQDBAG7NwgDBAG7NyYD BAC7Ny4DBAC7NzMDBAC9HmgDBAC9Hn4DBAC9HxIDBADItKgDBADItKwwDQYJKoZI hvcNAQELBQADggEBAGu05oelsoC7PUyk0HEhbRG9HV5rMk4f0CpFkjuEmI5J9z01 2M5fShNoUsG6bfY+rqk/Ar2jXW5GOQqigchoQMJ1YuBW0SHsPe+RiyIhDQ2Va+go sU9w3mobklfMse04p4mv/bdOg+spadj3DAR2NTxyTpcCtyvDYNAtvbbAX2lVpP32 PCfmLbbm+LHqYUR098J4ZeOgZXe9GRGh8uio6bSOuyIue/GRyXJeoHGF4/onIOev VKO9f2qJW92s0xu+3Fl2HIw84yADbPK2/hajCPEgQaoUSeMTE54JJVw/EH/hapmf Wvnr2V6l57ZEN98T3qDi8ZJwVgSUfyE/AmHgtXM= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:56 2026 by rpki-client