$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS198969.roa File: AS198969.roa (raw, json) Hash identifier: pBiC3KF6CaqQLThEGA5KIYAcJ9cKNorsb0pVzXo9sU8= Subject key identifier: 84:A2:02:02:C2:93:6E:6E:92:27:93:08:FE:BB:C5:8E:E8:E3:80:14 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 512C3F7C5162BEF01CDF4625EB0680110C6C4794 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS198969.roa Signing time: Mon 26 Oct 2026 15:03:01 +0000 ROA not before: Mon 26 Oct 2026 14:58:01 +0000 ROA not after: Mon 25 Oct 2027 15:03:01 +0000 asID: 198969 IP address blocks: 189.12.129.0/24 maxlen: 24 189.12.189.0/24 maxlen: 24 200.180.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2c:3f:7c:51:62:be:f0:1c:df:46:25:eb:06:80:11:0c:6c:47:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 14:58:01 2026 GMT Not After : Oct 25 15:03:01 2027 GMT Subject: CN=84A20202C2936E6E92279308FEBBC58EE8E38014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:6b:fe:8d:48:1b:24:2f:e9:19:f1:26:93: 43:90:db:b9:f5:6b:96:40:74:c1:c9:e9:ca:fd:34: e6:4c:34:e2:65:a4:3b:bf:be:dd:2c:cd:9e:71:69: c4:d4:09:11:28:1b:b6:d5:18:08:1d:2b:af:df:0a: 6d:79:41:30:e0:a5:d0:df:13:07:51:d8:0c:64:fd: 62:b2:fe:9c:c2:b2:90:c8:ab:c9:19:3d:e6:d3:c7: 9d:a8:1b:b9:a5:20:ae:7a:30:51:75:21:d4:7e:f1: 73:6d:a2:8f:4e:6f:84:3a:b8:da:5b:f8:ab:10:dd: e8:71:9a:b3:dc:78:5d:30:74:ba:d5:cf:49:34:d9: 5b:9c:11:04:5f:17:ed:61:a6:3f:e6:9e:fe:86:a2: 2b:15:44:b2:49:56:eb:c7:e0:ab:f6:b4:22:91:12: 4e:d3:1b:58:09:15:22:e5:b9:33:e1:d7:06:57:22: 62:69:a0:86:fd:2f:e2:cb:3e:61:fe:d4:88:1d:4f: 80:9c:45:30:53:8d:4b:e7:c0:1c:eb:29:5c:d8:c6: b5:3f:d4:5b:d6:92:19:1d:82:bf:77:11:40:7c:d0: bb:d8:8d:dc:91:80:39:a3:25:59:09:16:5e:0b:7d: 81:64:d1:5d:07:8c:e4:73:1e:0c:81:83:6c:26:9c: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:02:02:C2:93:6E:6E:92:27:93:08:FE:BB:C5:8E:E8:E3:80:14 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS198969.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.129.0/24 189.12.189.0/24 200.180.169.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:59:2c:0e:69:e0:aa:c7:ac:78:23:f3:29:65:6a:fe:f1:c3: 09:8b:7a:19:91:bd:c4:53:ed:f9:25:1c:09:e0:8b:8d:fd:e1: bb:58:50:12:93:52:e7:1c:f9:f2:c4:b8:80:fa:5f:97:09:d3: 70:6a:95:17:8c:d6:d2:60:08:bc:e9:b8:25:9f:2e:d8:3f:ea: ca:17:a8:e4:de:e5:d3:c2:c3:1d:01:54:86:08:cf:cc:48:1f: 69:a7:7d:83:0d:35:2e:f5:c2:0e:4b:38:b6:32:c9:88:8f:75: 45:71:cf:01:23:92:03:54:09:aa:49:82:cf:45:e3:89:41:21: 6a:8b:87:d1:62:70:f6:8f:cc:88:77:c1:38:8a:9f:3b:33:25: 60:c1:d8:11:f5:45:c0:73:ec:a1:4d:98:1a:e6:0a:e0:a2:1d: 2b:6a:89:4d:fd:c3:15:8b:b5:66:2c:03:ac:f0:c3:3c:4e:37: ab:48:43:3b:8a:0b:76:c4:d8:43:8d:a6:19:2c:d9:b0:ac:5f: 37:fc:4b:34:cd:33:d8:f6:47:de:de:2d:24:cc:3c:63:bd:85: 3a:6c:ed:fe:d6:17:62:9b:92:bf:16:2e:4a:7a:d9:44:82:d4: 5a:d0:6b:1b:4c:aa:89:73:07:ac:bb:63:48:3b:88:b8:f3:a4: 69:9b:24:5b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUUSw/fFFivvAc30Yl6waAEQxsR5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYxNDU4MDFaFw0yNzEwMjUxNTAzMDFaMDMxMTAvBgNV BAMTKDg0QTIwMjAyQzI5MzZFNkU5MjI3OTMwOEZFQkJDNThFRThFMzgwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilGv+jUgbJC/pGfEmk0OQ27n1 a5ZAdMHJ6cr9NOZMNOJlpDu/vt0szZ5xacTUCREoG7bVGAgdK6/fCm15QTDgpdDf EwdR2Axk/WKy/pzCspDIq8kZPebTx52oG7mlIK56MFF1IdR+8XNtoo9Ob4Q6uNpb +KsQ3ehxmrPceF0wdLrVz0k02VucEQRfF+1hpj/mnv6GoisVRLJJVuvH4Kv2tCKR Ek7TG1gJFSLluTPh1wZXImJpoIb9L+LLPmH+1IgdT4CcRTBTjUvnwBzrKVzYxrU/ 1FvWkhkdgr93EUB80LvYjdyRgDmjJVkJFl4LfYFk0V0HjORzHgyBg2wmnIgXAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUhKICAsKTbm6SJ5MI/rvFjujjgBQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMxOTg5Njkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAC9DIEDBAC9DL0DBADItKkwDQYJKoZIhvcNAQELBQADggEBAExZLA5p 4KrHrHgj8yllav7xwwmLehmRvcRT7fklHAngi4394btYUBKTUucc+fLEuID6X5cJ 03BqlReM1tJgCLzpuCWfLtg/6soXqOTe5dPCwx0BVIYIz8xIH2mnfYMNNS71wg5L OLYyyYiPdUVxzwEjkgNUCapJgs9F44lBIWqLh9FicPaPzIh3wTiKnzszJWDB2BH1 RcBz7KFNmBrmCuCiHStqiU39wxWLtWYsA6zwwzxON6tIQzuKC3bE2EONphks2bCs Xzf8SzTNM9j2R97eLSTMPGO9hTps7f7WF2Kbkr8WLkp62USC1FrQaxtMqolzB6y7 Y0g7iLjzpGmbJFs= -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:20 2026 by rpki-client