$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS205489.roa File: AS205489.roa (raw, json) Hash identifier: JttuSmCI08LTi8+Acd6nR0Vo+yRsOVeh0zzs1mN+3Aw= Subject key identifier: DF:32:D5:90:DC:EC:21:1F:EC:F8:D7:3B:F7:F8:FC:36:80:7B:29:C0 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 76C16595EF56AF2C984DC095FCE29898AB61D333 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS205489.roa Signing time: Thu 12 Nov 2026 18:49:08 +0000 ROA not before: Thu 12 Nov 2026 18:44:08 +0000 ROA not after: Thu 11 Nov 2027 18:49:08 +0000 asID: 205489 IP address blocks: 177.201.208.0/24 maxlen: 24 189.30.100.0/24 maxlen: 24 189.31.19.0/24 maxlen: 24 191.45.34.0/24 maxlen: 24 200.141.176.0/24 maxlen: 24 200.180.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 09:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c1:65:95:ef:56:af:2c:98:4d:c0:95:fc:e2:98:98:ab:61:d3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 12 18:44:08 2026 GMT Not After : Nov 11 18:49:08 2027 GMT Subject: CN=DF32D590DCEC211FECF8D73BF7F8FC36807B29C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5f:6b:85:94:4a:3f:84:ee:13:9f:17:8c:b1: 66:13:1a:b5:dc:2e:37:6b:77:ec:f1:c0:4b:76:64: 7f:1d:eb:e7:31:0c:3b:c1:68:28:9f:d2:4a:1f:a5: c3:ab:99:46:33:13:62:9c:f3:3e:bf:c1:2e:e7:94: c1:48:95:13:d0:12:37:84:39:61:da:1c:c1:1e:20: 75:ee:2a:0c:d3:5c:1a:92:05:dc:e6:ad:1d:82:00: a4:87:ad:0e:4c:0e:3b:dd:02:18:f7:d1:97:58:97: cd:cb:01:44:4e:b8:e6:76:39:3d:b4:0b:03:1d:8a: a7:24:7e:9c:65:d0:ec:27:2e:52:f7:56:00:62:fe: 8d:16:81:72:5e:00:15:8f:3f:80:56:7c:1a:12:48: 36:dd:98:30:b0:55:8e:57:14:32:55:2c:cd:a9:65: 24:17:af:51:28:a3:30:fe:6d:42:0a:c0:f3:25:f4: 93:e2:da:30:2b:44:44:9b:c7:a9:1a:9a:b1:a5:1e: ae:32:50:11:d9:22:87:3f:53:3e:ca:14:d4:3a:c9: 86:d7:e1:44:3e:44:12:9b:30:73:de:db:11:ff:7c: 50:fe:8a:65:38:a7:1d:bc:ee:c2:d1:b3:23:e4:64: 00:b5:56:30:94:5d:d2:38:fb:52:91:2d:3d:3b:3b: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:32:D5:90:DC:EC:21:1F:EC:F8:D7:3B:F7:F8:FC:36:80:7B:29:C0 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS205489.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.208.0/24 189.30.100.0/24 189.31.19.0/24 191.45.34.0/24 200.141.176.0/24 200.180.171.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3f:99:dc:10:88:f5:9d:f1:6b:74:07:4d:9f:91:5d:ef:b0: e5:d3:f5:81:8a:69:25:a9:3a:77:2d:b5:d7:35:30:cb:ca:ce: d4:42:5c:46:07:c1:b8:57:c3:8a:27:83:fd:2b:0c:d3:79:fb: 3f:a2:ed:41:7a:6b:53:ec:7f:25:76:89:56:95:56:bf:c8:2d: 2c:00:10:a1:14:09:f5:cf:cb:29:03:3e:54:e8:a1:d2:ab:2c: 72:fe:a1:0b:25:a4:0c:cd:9b:a5:25:b5:dc:d2:b6:0b:e9:13: 50:28:2c:20:a0:65:f1:32:95:98:55:5c:d1:83:33:5d:39:41: f5:95:00:ac:2b:c0:71:c7:43:27:67:ae:b3:b0:1e:f7:e3:85: 2d:e1:36:39:18:b5:07:92:29:77:63:59:e4:7a:ca:e0:f4:18: 63:bb:5b:6f:d7:59:5a:8a:02:76:df:43:b1:14:6c:4f:55:0f: 93:c9:9b:be:87:69:13:2e:81:c1:ec:fd:89:cc:90:b5:e8:d9: 02:8d:74:05:ef:2a:1d:d2:d7:36:a3:d4:5c:d2:1a:8b:53:b2: 11:44:d1:54:02:70:16:bd:a4:14:22:d4:3c:1e:64:95:cb:d1: 57:63:79:7a:f7:a3:aa:cb:64:07:b5:f2:27:2c:39:64:41:25: 72:11:77:b7 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUdsFlle9WryyYTcCV/OKYmKth0zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMTIxODQ0MDhaFw0yNzExMTExODQ5MDhaMDMxMTAvBgNV BAMTKERGMzJENTkwRENFQzIxMUZFQ0Y4RDczQkY3RjhGQzM2ODA3QjI5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvX2uFlEo/hO4TnxeMsWYTGrXc Ljdrd+zxwEt2ZH8d6+cxDDvBaCif0kofpcOrmUYzE2Kc8z6/wS7nlMFIlRPQEjeE OWHaHMEeIHXuKgzTXBqSBdzmrR2CAKSHrQ5MDjvdAhj30ZdYl83LAUROuOZ2OT20 CwMdiqckfpxl0OwnLlL3VgBi/o0WgXJeABWPP4BWfBoSSDbdmDCwVY5XFDJVLM2p ZSQXr1EoozD+bUIKwPMl9JPi2jArRESbx6kamrGlHq4yUBHZIoc/Uz7KFNQ6yYbX 4UQ+RBKbMHPe2xH/fFD+imU4px287sLRsyPkZAC1VjCUXdI4+1KRLT07O7JzAgMB AAGjggJjMIICXzAdBgNVHQ4EFgQU3zLVkNzsIR/s+Nc79/j8NoB7KcAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMDU0ODkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoE AgABMCQDBACxydADBAC9HmQDBAC9HxMDBAC/LSIDBADIjbADBADItKswDQYJKoZI hvcNAQELBQADggEBAKA/mdwQiPWd8Wt0B02fkV3vsOXT9YGKaSWpOncttdc1MMvK ztRCXEYHwbhXw4ong/0rDNN5+z+i7UF6a1PsfyV2iVaVVr/ILSwAEKEUCfXPyykD PlToodKrLHL+oQslpAzNm6UltdzStgvpE1AoLCCgZfEylZhVXNGDM105QfWVAKwr wHHHQydnrrOwHvfjhS3hNjkYtQeSKXdjWeR6yuD0GGO7W2/XWVqKAnbfQ7EUbE9V D5PJm76HaRMugcHs/YnMkLXo2QKNdAXvKh3S1zaj1FzSGotTshFE0VQCcBa9pBQi 1DweZJXL0VdjeXr3o6rLZAe18icsOWRBJXIRd7c= -----END CERTIFICATE-----Generated at Sun Nov 15 21:56:15 2026 by rpki-client