$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215607.roa File: AS215607.roa (raw, json) Hash identifier: M818K+/wJ9ZMYixs63O642c6xdA4lpGJxTEfuudD8b4= Subject key identifier: 5F:83:F1:DE:DD:9C:00:F0:6E:59:79:6F:72:31:85:5F:DF:D8:0D:C7 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 458730CCBE775ECD0BBA7AF36F47AFB3A589CA0A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215607.roa Signing time: Sat 07 Nov 2026 18:57:28 +0000 ROA not before: Sat 07 Nov 2026 18:52:28 +0000 ROA not after: Sat 06 Nov 2027 18:57:28 +0000 asID: 215607 IP address blocks: 179.254.223.0/24 maxlen: 24 187.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 20:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:87:30:cc:be:77:5e:cd:0b:ba:7a:f3:6f:47:af:b3:a5:89:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 7 18:52:28 2026 GMT Not After : Nov 6 18:57:28 2027 GMT Subject: CN=5F83F1DEDD9C00F06E59796F7231855FDFD80DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:07:ed:63:87:80:e7:72:d5:cf:a8:95:b0: 01:5f:bc:28:a4:05:68:5d:9d:c0:61:8a:c1:f7:64: 9e:09:ac:af:4a:58:ae:22:6b:83:6c:15:a3:2e:e0: f3:95:eb:26:8c:50:cf:6c:4c:0f:78:b9:68:46:a6: 2b:43:8f:af:52:97:dc:e6:96:3c:d5:53:40:70:98: 2f:9f:8d:e0:4e:a9:44:65:35:b9:66:d4:4c:fa:a8: c7:ca:0b:c9:1c:28:16:3a:92:e9:0c:0c:08:ab:4c: 4d:94:12:33:fa:09:d4:1d:32:cb:d2:fa:df:e1:25: e7:17:76:6f:1e:6b:86:a9:a7:b5:4f:4e:f7:1c:aa: 73:d0:f1:d2:69:3c:2b:a8:65:ab:3e:fd:8d:34:cb: 79:df:70:64:5a:e8:37:d0:13:3f:a6:6c:e9:4a:c3: 59:3b:3b:14:d7:bc:18:43:f1:71:91:62:0c:ff:23: 38:2f:15:56:ad:1a:fa:c8:83:56:ef:b8:a1:a7:64: 9c:f5:3c:47:12:eb:7b:53:f6:07:ac:61:44:68:38: fd:7a:5b:92:e8:bd:b2:06:d0:19:ff:69:a6:7d:d2: 02:a6:3e:5d:35:1a:b2:02:f1:f5:06:30:25:2b:e3: 9b:23:3a:a4:a3:69:8d:8c:bf:5b:99:a3:d6:1c:ca: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:F1:DE:DD:9C:00:F0:6E:59:79:6F:72:31:85:5F:DF:D8:0D:C7 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS215607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.254.223.0/24 187.14.132.0/24 Signature Algorithm: sha256WithRSAEncryption 27:be:df:24:02:1e:b2:ef:ea:08:75:c9:dc:fc:39:36:4b:09: 8d:41:9b:ae:9a:5e:8d:4d:e5:45:ff:02:50:ad:68:29:71:65: 35:90:94:8e:ee:a3:84:7d:87:d6:b2:2d:d4:c2:1b:ca:9a:a6: 24:0d:8b:0f:00:9b:4d:de:88:35:ea:37:4f:f6:71:b3:93:63: db:db:06:3f:05:f5:14:42:83:d0:0c:77:a4:56:b4:62:ca:5a: 06:88:bf:02:b5:5b:81:bb:a3:e7:6c:3f:38:a1:6d:bb:d0:13: e9:5c:03:8c:8a:b1:ab:fa:02:1e:84:e5:8d:61:d7:1a:2f:1e: 49:62:3e:e2:6c:f8:21:0b:19:ca:be:8f:e8:79:89:a2:2f:df: 94:28:b3:cf:3e:a8:05:fb:17:98:8b:08:1d:61:f0:24:92:27: 40:1d:89:d4:db:ff:64:e9:09:c7:fb:d5:cf:05:c7:91:7b:c7: 04:41:e6:36:e3:36:22:08:f6:2b:07:de:ff:04:1f:8c:14:7a: ab:72:c3:95:8c:b5:ca:13:b0:34:19:28:76:95:67:0b:f5:8b: 52:23:29:0d:07:6e:f3:82:6b:a4:f9:29:19:d0:33:39:35:1a: 87:2a:be:6f:77:b6:75:41:42:6b:56:d7:97:92:cf:7f:00:1b: e2:35:19:27 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIURYcwzL53Xs0Lunrzb0evs6WJygowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDcxODUyMjhaFw0yNzExMDYxODU3MjhaMDMxMTAvBgNV BAMTKDVGODNGMURFREQ5QzAwRjA2RTU5Nzk2RjcyMzE4NTVGREZEODBEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiQftY4eA53LVz6iVsAFfvCik BWhdncBhisH3ZJ4JrK9KWK4ia4NsFaMu4POV6yaMUM9sTA94uWhGpitDj69Sl9zm ljzVU0BwmC+fjeBOqURlNblm1Ez6qMfKC8kcKBY6kukMDAirTE2UEjP6CdQdMsvS +t/hJecXdm8ea4app7VPTvccqnPQ8dJpPCuoZas+/Y00y3nfcGRa6DfQEz+mbOlK w1k7OxTXvBhD8XGRYgz/IzgvFVatGvrIg1bvuKGnZJz1PEcS63tT9gesYURoOP16 W5LovbIG0Bn/aaZ90gKmPl01GrIC8fUGMCUr45sjOqSjaY2Mv1uZo9YcyjRfAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUX4Px3t2cAPBuWXlvcjGFX9/YDccwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTU2MDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBACz/t8DBAC7DoQwDQYJKoZIhvcNAQELBQADggEBACe+3yQCHrLv6gh1 ydz8OTZLCY1Bm66aXo1N5UX/AlCtaClxZTWQlI7uo4R9h9ayLdTCG8qapiQNiw8A m03eiDXqN0/2cbOTY9vbBj8F9RRCg9AMd6RWtGLKWgaIvwK1W4G7o+dsPzihbbvQ E+lcA4yKsav6Ah6E5Y1h1xovHkliPuJs+CELGcq+j+h5iaIv35Qos88+qAX7F5iL CB1h8CSSJ0AdidTb/2TpCcf71c8Fx5F7xwRB5jbjNiII9isH3v8EH4wUeqtyw5WM tcoTsDQZKHaVZwv1i1IjKQ0HbvOCa6T5KRnQMzk1Gocqvm93tnVBQmtW15eSz38A G+I1GSc= -----END CERTIFICATE-----Generated at Sun Nov 8 05:59:45 2026 by rpki-client